*.hirschmann-automotive.com

- Hirschmann Automotive GmbH -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:f4:ad:5a:a6:77:2b:89:92:be:21:ea:ba:51:46:b1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hirschmann Automotive GmbH

Organization: Hirschmann Automotive GmbH
Locality: Rankweil
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f4:ad:5a:a6:77:2b:89:92:be:21:ea:ba:51:46:b1
Serial Number (int): 14562716430246294095587288040762066609
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:51:47:d5:df:0f:db:5c:c0:d5:a0:a8:3c:b3:52:96:19:1c:b2:c5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 93:9c:4b:3a:f2:dd:fe:1b:34:10:5a:81:f4:63:0a:50:39:e0:62:68
Fingerprint (sha256): 37:97:91:79:92:fc:3d:d9:44:79:eb:a0:1c:b3:35:0a:4f:ca:47:c7:fd:da:6c:aa:9c:3f:56:03:31:23:cd:2d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.hirschmann-automotive.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hirschmann-automotive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hirschmann-automotive.com
hirschmann-automotive.com

Other certificates including the domain name hirschmann-automotive.com

(limited to 100 certificates)
jobs.hirschmann-automotive.com
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
shop.hirschmann-automotive.com
magazine.suncoastergroup.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
citrix.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
shop.hirschmann-automotive.com
quals.truebeck.com
www.digital.britishtraveljournal.com
shop.hirschmann-automotive.com
*.hirschmann-automotive.com
magazin.tellz.me
hirschmann-automotive.com
quals.truebeck.com
*.hirschmann-automotive.com
publikationen.contipark.de
*.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
citrix.hirschmann-automotive.com
kiosk.flp.ch
magazine.roarkidsmagazine.com
citrix.hirschmann-automotive.com
eft.hirschmann-automotive.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
magazine.elektropraktiker.de
magazine.inversionesciel.com
*.hirschmann-automotive.com
kiosk.flp.ch
*.hirschmann-automotive.com
hirschmann-automotive.com
kiosk.der-kleine-georg.de
shop.hirschmann-automotive.com
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
magazine.cioa.com
shop.hirschmann-automotive.com
hirschmann-automotive.com
shop.hirschmann-automotive.com
hirschmann-automotive.com
brochure.ntpwarranty.com
brochure.ntpwarranty.com
shop.hirschmann-automotive.com
quals.truebeck.com
ctx.hirschmann-automotive.com
brochures.keepmoat.com
jobs.hirschmann-automotive.com
magazine.cioa.com
production-hirschmann-automotive.hosting.snk.de
wirbeicontipark.contipark.de
shop.hirschmann-automotive.com
magazine.elektropraktiker.de
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
kiosk.vidaglobal.de
kataloge.teppich-stark.de
www.hirschmann-automotive.com
shop.hirschmann-automotive.com
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
production-hirschmann-automotive.hosting.snk.de
www.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
production-hirschmann-automotive.hosting.snk.de
kiosk.am-weststrand.com
kiosk.am-weststrand.com
hirschmann-automotive.com
eft.hirschmann-automotive.com
wirbeicontipark.contipark.de
info.independenceaustralia.com.au
hirschmann-automotive.com
magazine.elektropraktiker.de
shop.hirschmann-automotive.com
cn.production-hirschmann-automotive.hosting.snk.de
shop.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
kiosk.der-kleine-georg.de
jobs.hirschmann-automotive.com
kataloge.teppich-stark.de
citrix.hirschmann-automotive.com
magazines.andadev.com
jobs.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
shop.hirschmann-automotive.com
shop.hirschmann-automotive.com
atedge01.hirschmann-automotive.com
citrix.hirschmann-automotive.com
ctx.hirschmann-automotive.com
production-hirschmann-automotive.hosting.snk.de
magazin.tellz.me

Certificate

The complete raw certificate details for *.hirschmann-automotive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd2Pt3lZGg0UB0SOl6y+
s3uEW0N8nLOC46enEo0vJwUVgKHjjMGtI2hscnasnc2b5P/BOMVsRSqMW7wcrWrr
JHjlaysRY9T8P3OLl0u9WSaKJ/Pda9o62+HNlfhuJX0Iapn9w3dKa0O5bo71qetj
bg/eMYzyykkzY41ZISakWjrQu1OKVhIJZsYxbPT0+z4ap+DUR88XAHJ8XNKNOaWB
7FGwzY2DomqO5bEmXPReqWUBNUyXklq83t0Sq2buNnA+NV+qX76XEpjRr6IjPneO
0VZhydvwiydE95P+HqsXu8+w9FkxAfz9y1BELzCMg09iurRY8trTEi9sn3N1FPMv
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14562716430246294095587288040762066609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rankweil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hirschmann Automotive GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hirschmann-automotive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22453435974075675620298339906662702585395475142302856727727150215984537069582734165749757292783614619940300391032220097956647031891307420820055653613157450446365135958149596750968578420484318798675274203419425903009901009335312549397516723456772362799845951124987381413231759607263327619513501892224689583415699148258750497749178980846196733603685363186021002783334346804221506707890738444333750615839599443872026133015290989900587177224827973279380346828655999196580312594189089950013112370922882615740774880587534363776967413282500106331407342010043252003846049388384232178086983527139572213370572353272034698145739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							495147d5df0fdb5cc0d5a0a83cb35296191cb2c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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