dev.bitmarck.de

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 53:f4:bd:87:9b:f2:71:b7:7b:ca:c2:bb was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev.bitmarck.de

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 53:f4:bd:87:9b:f2:71:b7:7b:ca:c2:bb
Serial Number (int): 25983128743970491589632639675
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d3:62:98:55:a9:1f:7a:91:82:cf:cc:61:08:b1:5a:21:f5:ba:95:79
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 52:fd:ce:cd:38:4c:92:af:9d:4c:52:8e:24:50:57:c5:b8:fa:0a:0e
Fingerprint (sha256): 37:d4:18:68:9e:3e:a1:6b:d0:20:f3:09:a6:00:aa:5d:35:cf:ee:a4:ab:8c:39:da:a5:e7:5b:0e:b6:5d:68:4a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate dev.bitmarck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
apigwdu.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
apigwpu.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
planontest.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
*.bitmarck.de
services.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
planon.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
bravo01.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
beispielservice.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
webvpn2.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
apigwtu.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de

Certificate

The complete raw certificate details for dev.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyH+2wMnhrrARFRns21CH
otJN6X90Qd4tIKG++w3za9UXgKMJjg0agS/JMY0WOR+AnnaawslA8n1p9d86rxkh
mHTdHcIx/je5w+tki4Wp2G5cpS5xzw8+Ip2geFwNMyxeLNgajE6XfK573KZa7PmY
vJPOBdidjAOtBHsYV9Tj+8lX/oB1OZDJ/5FEmIJcSRSXHWpzBMt7D4YiBbMrIW9B
3c5lKWPa7aktUBrj/2/b9wdRtUS7xMa7OlKzLb2lZPyGOM+ilWD9fLsIHiM44Yc9
lVG4q7v3l+u/VPFBygA7WIQTusI7mKdlu3E3zIMNWdNQBF6wz65zDm749PfHErhe
lDPisOQ8M/E1sWEtQpisbQWI5fp68UtJnwXVObE1AKapbTjqbFopWbB0xDtoaVGc
eqdYDEEqieRwdsoDjIpeIdXS650dtm+QBKGUE/lJXG2fXvK79p9ernTuzdI1oHKS
kzBJ4ePXIUd36ggy8QuVKo3JUIWW+3zqNG+Ks9plcAO58k5SbyBkADKOjNqpR8py
oKw8+RkBMw22ZDghrpy4bQwaxorfvivT0hWFkCzrBVEQAnbSVNyaGwoSzMDpUQ2e
iuIQM/v8fP8Vi1eC1JftttgUCBH4wsxB4m56UdtCO84WRpdzxLp2SqUlQzMCCx4/
6iSFL8H5AKpwuN6GCwS2eJ0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25983128743970491589632639675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 11:27:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-07 11:27:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817964075985924128642763442701791588631928811872897080442578760132828838466793744965004108917617166358989148930251858939979381714264091925042322055772249832967132604482111664877694196801925996700756758028642192971361573154526806240601515389253064894717093778888365486531324050226671619464806127106819524703254319704635335401620074436946972000074209251500286195470096604283496845943734152778275689815131757083178269007640337063179698379056242264069794089762787721084873297295872689538486063872765763892399392106583655753974954870988578464424744853799519663660147561572436916170110471991748683865408417806105800671519136562446256063866188019507220530253942535524696736906644544419754228419096209183233835067013771155405411207877185237347927991380292885480200435453337555139288181527113202137661895099144017488188868171645431614366846370381464658228051859921127217133593836439718268588610279279895614675864892435820877247321681646449192934234982286444488647240478549298695326859330125998258446998863056042334856249930726355088159017402559736937956026722300325085197512859242301342929858421818637448675170049065983491473804273715022313097019182103945368027950938960784122802267488065376486261078423827495488610791275118234173163724765341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3629855a91f7a9182cfcc6108b15a21f5ba9579
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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