OASGOLD07.smshealthconx.net

- Siemens AG -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 04:ba:85:d6:83:81:de:97:e6:63:6a:43:5b:d1:13:97 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Siemens AG

Organization: Siemens AG
Organization unit: ISC SERVICES DELIVERY
State / Province: Bavaria
Locality: Erlangen
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:85:d6:83:81:de:97:e6:63:6a:43:5b:d1:13:97
Serial Number (int): 6285393754830744040001803407999439767
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): b2:57:3f:17:0e:f3:61:36:af:12:d5:48:37:da:27:fc:cf:ec:d8:47
Fingerprint (sha256): 35:3c:40:4f:9a:30:5a:92:1f:47:90:8d:7b:ec:f1:23:5c:61:24:0c:c1:ff:55:ec:d3:ac:ca:d5:68:d8:f8:99

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate OASGOLD07.smshealthconx.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for OASGOLD07.smshealthconx.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

OASGOLD07.smshealthconx.net

Other certificates including the domain name smshealthconx.net

(limited to 100 certificates)
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
netaccess.smshealthconx.net
netaccess3.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold07.smshealthconx.net
oasgold04.smshealthconx.net
netaccess3.smshealthconx.net
oasgold03.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
www.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
oasgold07.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
nsp.smshealthconx.net
www.smshealthconx.net
netaccess3.smshealthconx.net
dashboard.smshealthconx.net
oasgold01.smshealthconx.net
www.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
OASGOLD04.smshealthconx.net
netaccess2.smshealthconx.net
check.smshealthconx.net
www.smshealthconx.net
OASGOLD07.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD02.smshealthconx.net
netaccess.smshealthconx.net
netaccess.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess.smshealthconx.net
netaccessa.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
check.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessc.smshealthconx.net
check.smshealthconx.net
netaccess.smshealthconx.net
oasgold01.smshealthconx.net
netaccess-lifespan.smshealthconx.net
dashboard-internet.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
oasgold02.smshealthconx.net
dashboard.smshealthconx.net
netaccess2.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccess-lifespan.smshealthconx.net
netaccessb.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
netaccessc.smshealthconx.net
netaccessc.smshealthconx.net
netaccess2.smshealthconx.net
netaccessa.smshealthconx.net
netaccessb.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess-test.smshealthconx.net
netaccess3.smshealthconx.net
OASGOLD07.smshealthconx.net
netaccess.smshealthconx.net
netaccessb.smshealthconx.net
netaccessa.smshealthconx.net
netaccess2.smshealthconx.net
documentmanagement.smshealthconx.net
OASGOLD01.smshealthconx.net
netaccess3.smshealthconx.net
netaccess.smshealthconx.net
netaccess2.smshealthconx.net
dashboard-internet.smshealthconx.net
oasgold03.smshealthconx.net
netaccessa.smshealthconx.net
netaccessc.smshealthconx.net
www.smshealthconx.net
oasgold05.smshealthconx.net
oasgold03.smshealthconx.net
netaccess.smshealthconx.net
www.smshealthconx.net
netaccessb.smshealthconx.net
oasgold05.smshealthconx.net
netaccessb.smshealthconx.net

Certificate

The complete raw certificate details for OASGOLD07.smshealthconx.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyMDTPtNxgENVMIB/tX1
RDbmiPyy5x0NDo7sPgdgFhPx9MMu2i+BSQmYtQO8zfgTJDDu+8vXNiCcRqrJOe2+
FY4I8yJErWiup4gJDVBYmujpKN9UxD9+L4zsEKGx1QrloY2/rTcqI1z/rnCUpolV
wYf5rgUmz4EDs5ylB/WazpoNbbTEW9FQDFyh8ioys9AlEB4MysrIjUn3FibWTunf
6YDKAkB9XmvkBB2naIVvnoHq3hYYouOcQeWLSmkAMBlBm7ifmIv8iH/v/2RCcLwv
KG1nkSSKBvK83vZMeWzcySRFMCgbjVOxWwc0g4LN+LCqP2BcnKQP7qawQIXjPog2
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6285393754830744040001803407999439767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Erlangen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Siemens AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ISC SERVICES DELIVERY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'OASGOLD07.smshealthconx.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25643641409337926571891628391967465313697053034107134714683259502234948081241044701871379637125970603982212294057929519519826885315234403232643584548172609673669692394166909264138372806713912877178285797724536136836151655253151224592578751966790701510653502943799195100818412621049784447696879742210497758585957965568167023279327111338348117562050114850876451140930016221716802934036448721546852613240221322705897168972430708551039757851831023756162615631666669791407931625751283013238269598185597894246462218168694346713424705183140190976757036118542346289642314853448868309356476968768894226807502217857293588379291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'OASGOLD07.smshealthconx.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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