dcx.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 23:ae:86:97:3e:54:ac:df:68:2c:01:13:88:b6:24:df:85:aa:2d:92 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 23:ae:86:97:3e:54:ac:df:68:2c:01:13:88:b6:24:df:85:aa:2d:92
Serial Number (int): 203706731155182767658899298523750650164458171794
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 63:68:15:b9:a3:08:bc:ae:37:36:8c:53:76:cc:ff:e5:05:b0:5a:05
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 89:a3:26:79:10:e7:30:5b:20:68:92:5b:31:6c:f2:f6:e5:a3:21:32
Fingerprint (sha256): 35:b5:d4:81:f9:0a:21:8a:74:f7:d5:12:1c:de:28:27:34:d9:29:4f:1a:4b:0f:c7:07:63:8b:e7:ce:be:53:e6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate dcx.funkemedien.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dcx.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dcx.funkemedien.de
qadcx.funkemedien.de
*.dcx.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for dcx.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHr0cLRbdSCdLq4NodK
I6+RWhTKugfadiYOFHg2dQo9xqvYozSHZRW8/F+aQyMW5jJCZlcHz9dpLzPLXv30
/TVPPASs1TKKy6TDykPZP/ePikbw6dlpJB8Xwff6k4vACznk5uZxHmG3Wtagsuji
c4GNB83n5qnVFcc5KeyulAdPMJar6RaZlDWrpmlf1FITWpDGZvHTMRJQdNzN4YZ/
KJyP9MU8HDq/VkkN7/rzWUHGHr69OltyhFZMLPUN5vs7eY7iidGNOXKMOclw3Lmp
HfCV84ag4FtFQkXywicz1n7wJ2vSFzy+EOXtK/87c+ndWI/ql8zPKVzS7B88HJw/
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 203706731155182767658899298523750650164458171794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 06:25:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 06:25:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcx.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25248608357175753314246419744735505575484882755075299803005180161445658127460442305202752632603674871768596661447647537666168690759009552714816883891697888851190870061819231545676190659416358000874278078681394038508942833540049479584414240598140868219743039025771917609953038815066760053752648176768815022308653216687144555842227164070728988634676487546415910845958875853525604316897295212268103207303664092990029561258304470165424835124926522743279121562346522989918087868230791342763263770511672478385384083546676227338549915039186137075012544146959694457743734017596938818090981367457560479529324148306858093592401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcx.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadcx.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcx.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							636815b9a308bcae37368c5376ccffe505b05a05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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