OV SSL/TLS Certificate for scm.thm.de Issued to Technische Hochschule Mittelhessen

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the scm.thm.de OV SSL/TLS Certificate

This certificate with serial number f2:78:33:f1:23:8e:23:ec:3e:e8:75:c1:f5:5c:ed:bc for scm.thm.de was issued on by GEANT Vereniging.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for scm.thm.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): f2:78:33:f1:23:8e:23:ec:3e:e8:75:c1:f5:5c:ed:bc
Serial Number (int): 322297304110854585181965808583323741628
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 2c:ae:58:72:3a:e3:08:be:cc:c8:a8:fd:c9:39:0d:ed:08:c4:76:a2
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): 29:11:da:3b:06:26:5e:78:57:81:8b:b3:b5:05:bb:71:df:cd:90:fe
Fingerprint (SHA-256): 67:df:66:da:ed:23:19:de:e0:a6:36:f7:55:f3:d1:9a:e8:43:53:97:ce:d2:2a:c5:74:ad:1b:e7:22:96:5e:1b

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate scm.thm.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for scm.thm.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

scm.thm.de

X.509 Certificate

The complete raw X.509 certificate details for scm.thm.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAj/BYBDmyHF1cIZWwWsAx
syjS9TmEItim0XcOEKoTDJv6emBXS2kR7pcLoiUGr1REgE4Mk/LIYhhZmYVqt3GS
SqYFghjYNI6luLhCU5aBljZUqT65+nqFCtqPwmEaNVdQ48zpEEdMYZ9oM6djm7aq
X/9lrz+dhoVeqTipAXlaP661GapD+j1G9yatqj9Gg5sLlEutvm+XNJMi4z4/bSZy
uDndCv0BQA2We+yLPUoN5gYpodlIEmv294dEMtPBCPH9Yn1aMFDG6oTEw/yOM9zB
NsqsYUTJI/59ljXP3ixBFrxPREDrpe2AMeCKmnSze3mBamKy3Muxvj7c7A0G/jzo
7qrH/S298vsNlGwt+C+nA4BauRIAzQ/oSv8Bp5+jB8iseir3o/Xas6eeS15Kgf7Y
v2E260hZNun7RYKtaG2odnquswb8bgX8hgkrmsZ6AfnVQ8piA41C5bilYxxyhij7
NTY2O36XCxOGiLlwUudMkkFTSy+k2FvMvYsUTyNAeVy948E4/3hVw8zoCU0l11i3
t6SbnQWzECWFtjl4VhFGOKRHO+gOCalp7zvQqQGf3TUH/sgtj24QMaRprWm+bybJ
ypb9YtMlvLLVBOv0Dc5pW/WHqq+xYVSetZkt1L0JqdSWXlgF5NyG3fEcnl8bXhXD
EL9XRRD5UAqxozCM4Q5/drMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322297304110854585181965808583323741628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Hochschule Mittelhessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scm.thm.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 587219247105802196599223491303737442756790408708487265852143140254876208284000637601604084212889902490551340969697316623339192739090986066766384765750629773626513098760868621239619812847736862990232016884527516945031990810133937466041379480567002555631154882566151599906623481342314809360988515478538947168595640054837573261428958908075109405450041986047538864378906442189380537670483375544123651793014853412080699480039487568458763869120612956158025645148194028965442093121793900361594918021141038080928595932415710383703240276752629846486629841159185756443912789599138646637087745073082049549828536816241541676733575742509045563066464025298431718475856001092505686261941473213481493675770643964212422894562468462108448095414326404957555070602363003059826179199651682750810736578417925061476371369619319032440847827125509980532146055244337126452233101554118315045090731331387362629758551663490755602503491002433555283863490390636099311790523457186331981395459021957685862193253601529814480561679751245329504992136865001791227426660693130017788361409466526224158928861596257258407451134393546395997482985966482188025687855247264767327744665525772259727026636621257891573324461197542621972501622582818412747605824345930899588812601011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cae58723ae308beccc8a8fdc9390ded08c476a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.thm.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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