www.ihk-sh.de

- Industrie- und Handelskammer zu Luebeck -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 70:60:d5:bd:16:c2:0d:e6:f2:d8:e4:c2:0b:cc:d5:23 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer zu Luebeck

Company registration number: CSM018744987
Organization: Industrie- und Handelskammer zu Luebeck
State / Province: Schleswig-Holstein
Locality: Luebeck
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 70:60:d5:bd:16:c2:0d:e6:f2:d8:e4:c2:0b:cc:d5:23
Serial Number (int): 149376331160741481695414656047977911587
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e5:61:40:6e:b5:4e:52:8b:3a:95:65:7e:50:f2:b0:1d:e5:3b:0e:b7
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 63:89:b7:c5:06:17:ae:13:1e:b9:50:3d:77:6f:77:28:1a:cc:df:e0
Fingerprint (sha256): 36:57:3c:26:1e:dc:ac:55:82:da:9d:d2:56:41:bb:56:e5:40:ca:8c:01:55:a5:37:26:a7:33:b7:6f:9e:2d:49

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate www.ihk-sh.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ihk-sh.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ihk-sh.de

Other certificates including the domain name ihk-sh.de

(limited to 100 certificates)
ihk-sh.de
ihk-sh.de
ihk-sh.de
www.ihk-sh.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-schleswig-holstein.de
www.ihk-sh.de
ihk-sh.de

Certificate

The complete raw certificate details for www.ihk-sh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyqcdDs5PVkezr75Zl+7
7PlSc76woEj154M51oo26Z/bEQsSeSIjwB8IrLZWOeBBHIMOEYNguLaVfy3Zh4um
a2H/Jv/MHz8P4qbt8anbTh2vAA8n3J5vI2P0s3a1uPS4cE84PamuyAgpBLNgP5JW
46MSrOEbgjdlmaVmwzxZu0EpX4a0XVpc145h835I5IzCo5FTWiOCpU/EzF+ZEZde
08STqPUjF1yNNCC4May3dCB/0y01i6sHgVdb0QBn0qkf8QdZXDHvu435MDJ+N61p
hJ0nRYm3q9lxrssejQsXipkrLfjb53bQ858pxRNwTYTNUCovr64/anvwfOMJsMQD
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149376331160741481695414656047977911587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 11:56:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-27 11:56:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018744987'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer zu Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ihk-sh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20092902830093750245176422145441580079314245825478697793603320517071307238327278533931099577296229703137482962522341893877449327817029014117052922355616831820951263130638605941413126249372764797473286069611194364240935212831865018615778371990780666067896683001541210864658832224136043893382047747104128343756898752969162665796233572430241330568435003477827521818533209022946829566102657601864932309939991246588074733398893641332304109480723833902036454896102207245817222424812778621641542484880503855681041137002284001433645877395702462601309004439909148456217299044556854388210227115932718462804768985488398322238293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1328 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-sh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e561406eb54e528b3a95657e50f2b01de53b0eb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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