mc01.omc.net

- OMCnet Internet Service GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:8a:bc:a1:d8:8e:9c:94:42:06:7c:7d:7e:16:09:f7 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OMCnet Internet Service GmbH

Organization: OMCnet Internet Service GmbH
Organization unit: Server Administration
State / Province: Schleswig-Holstein
Locality: Quickborn
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:bc:a1:d8:8e:9c:94:42:06:7c:7d:7e:16:09:f7
Serial Number (int): 4708046869593374153889574013910780407
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7f:11:9c:5b:66:58:04:2a:23:87:ce:2e:cf:c8:7f:5a:e1:9c:33:b6
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 4b:50:77:04:19:79:21:04:04:26:f4:c9:ab:9c:34:b2:ab:95:1c:b9
Fingerprint (sha256): 36:79:6b:1e:b0:cf:54:82:37:cf:49:2d:a7:3f:f1:cd:6c:a1:9f:e3:5f:eb:7f:ef:f0:d6:43:7e:45:f9:db:00

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate mc01.omc.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mc01.omc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mc01.omc.net
pop3.omc-mail.de
imap.omc-mail.de
smtp.omc-mail.de

Other certificates including the domain name omc.net

(limited to 100 certificates)
webmail.omc.net
swg2.omc.net
sslp1.omc.net
sslp1.omc.net
*.omc.net
www.cluster1.igefa.omc.net
mx-cluster.omc-mail.de
www.cluster1.jpre.omc.net
mail-cluster.omc-mail.de
sslp1.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
mc01.omc.net
*.omc.net
sslp1.omc.net
www.cluster1.jpre.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
sslp1.omc.net
ftp.mvg.omc.net
mx-cluster.omc-mail.de
*.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
omc.net
www.cluster1.igefa.omc.net
*.omc.net
ocp.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.cluster1.jpre.omc.net
*.omc.net
www.cluster1.jpre.omc.net
omc.net
*.omc.net
www.cluster1.jpre.omc.net
www.cluster1.jpre.omc.net
www.omc.net
www.omc.net
*.omc.net
ftp.mvg.omc.net
*.omc.net
www.omc.net
sslp1.omc.net
www.cluster1.igefa.omc.net
www.cluster1.igefa.omc.net
sbund-www2.omc.net
ftp.mvg.omc.net
www.omc.net
www.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
webmail.omc.net
*.omc.net
m.testing.cinemaxx.omc.net
mx-cluster.omc-mail.de
sslp1.omc.net
m.staging.cinemaxx.omc.net
*.omc.net
www.omc.net
*.omc.net
www.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
mx-cluster.omc-mail.de
webmail.omc.net
sslp1.omc.net
vmm1.omc.net
www.omc.net

Certificate

The complete raw certificate details for mc01.omc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4708046869593374153889574013910780407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mc01.omc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824652783440465648101679362424534395866626623631060179133795574525091436571106425689091535677793409525042247808091377798876544615681777654561390680417025680892045725225481291370973898198677129682952850801398748858650244485698006945665147349234203011791293497486947036421654887280988716545194236281240993819836747854604688693319349049148066003436716824491867328193634589544519584847557062966662847143642470271209991367801457883095310983014662456051654876646240160312714539635175077886900759384475502409227376999585752035432557657478500448554991355547161383492882672651246603030598099701152680932168455258021454212150680533565580990276177903401651513849405285667230420124567229676017874292348102958361378180536786526557504697363725060503730622733127533932189066881340905304280693272549598980668138197901386140408420412930567396846164532391212988390616039530149763826186816140509938704167456962003198871672118077020505390164315631423217324298642406938379142481394565154005904904018113033281097464283179742687166589177658705700496368202808632884892342532939708248574585221553596449792969882820667868891373857127607985076298880332898537162847981197728861931107885005755873639298260717528879498383820784937937105470952056717754745680815319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f119c5b6658042a2387ce2ecfc87f5ae19c33b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc01.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.omc-mail.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004933fcbe259b3ae83aafc4b68b300f1c1586883931929d3b5017bf4aaf851af0eb43262b2f8a2679781f46e77b455d425d569854e0472feace61744b4f8eccb99ec48f4cd9a9c34ece7eaf77cad75c6e3218d02bf2fda8126eee5a8c2ce82799b79c2202f203603fc4b0bb2bf1d79ff12d51c0cd694f9a2a6579af19405dfce0f94f7fb2ded11edec65af894c364a2b350a2b9de8f813244a0b0b3357cbb34646ef2fde429f7360b79f904538cc86abd6f481f4eb8e33b88171ff68de01414faf6164737e41f3aea36c40b7ddb6afc01cc18cc38a31e6a176d0868d12c22005590ea62377424a064fb5ef57a5ac8e44edcc0698f84c61b0730cf9736187e42ea