www.vaillant.de

- Vaillant GmbH -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 18:1c:9c:0c:0b:90:59:fc:f0:6e:2a:ab:50:0c:ab:87 was issued on by GeoTrust Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Vaillant GmbH

Organization: Vaillant GmbH
State / Province: Nordrhein-Westfalen
Locality: Remscheid
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:1c:9c:0c:0b:90:59:fc:f0:6e:2a:ab:50:0c:ab:87
Serial Number (int): 32050021221091921337629026299847420807
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): e7:b2:29:2a:f8:9b:29:ff:48:35:67:65:cb:dc:09:1e:9a:5a:73:4a
Fingerprint (sha256): 3a:e5:41:00:08:4b:28:74:e2:59:ea:0f:cf:22:56:63:76:0c:74:78:af:57:5e:e2:93:47:8c:e0:49:dd:9b:7a

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate www.vaillant.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vaillant.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vaillant.dk
www.vaillant.ch
www.vaillant.no
www.vaillant.se
www.vaillant.pl
www.vaillant.com
www.vaillant.co.uk
www.vaillant.ru
www.vaillant.com.tr
www.vaillant.at
www.vaillant.it
www.vaillant.de
vaillant.de

Other certificates including the domain name vaillant.de

(limited to 100 certificates)
vaillant-tools.de
preisliste.vaillant.de
webshop.vaillant.de
21-grad.vaillant.de
e.lernwerkstatt.vaillant.de
www.vaillant.com
preisliste.vaillant.de
preisliste.vaillant.de
heizungonline.vaillant.de
www.vaillant.lt
www.vaillant.com
praemienshop.vaillant.de
praemienshop.vaillant.de
praemienshop.vaillant.de
www.vaillant-group.com
www.vaillant.com
21-grad.vaillant.de
www.vaillant.lt
gewinnspiel.vaillant.de
www.vaillant.com
self-service.vaillant.de
vaillant2.marcapo.com
praemienshop.vaillant.de
preisliste.vaillant.de
gewinnspiel.vaillant.de
preisliste.vaillant.de
www.vaillant.de
preisliste.vaillant.de
21-grad.vaillant.de
praemienshop.vaillant.de
preisliste.vaillant.de
gewinnspiel.vaillant.de
self-service.vaillant.de
www.vaillant.com
admin.marcapo.com
www.vaillant.com
admin.marcapo.com
preisliste.vaillant.de
heizungonline.vaillant.de
www.vaillant.com
praemienshop.vaillant.de
admin.marcapo.com
21-grad.vaillant.de
www.vaillant.com
www.vaillant.de
admin.marcapo.com
www.vaillant.com
classic.germany.live.vaillant.neoskop.cloud
www.vaillant.com
admin.marcapo.com
21-grad.vaillant.de
testshop.vaillant.de
classic.germany.live.vaillant.neoskop.cloud
village.vaillant.de
www.vaillant.com
*.vaillant.de
praemienshop.vaillant.de
admin.marcapo.com
praemienshop.vaillant.de
anwendungen.vaillant.de
admin.marcapo.com
www.vaillant-group.com
heizungonline.vaillant.de
gewinnspiel.vaillant.de
www.vaillant.de

gewinnspiel.vaillant.de
www.vaillant.com
heizungonline.vaillant.de
self-service.vaillant.de
webshop.vaillant.de
www.vaillant.com
www.vaillant.com
admin.marcapo.com
vaillant-tools.de
classic.germany.live.vaillant.neoskop.cloud
heizungonline.vaillant.de
21-grad.vaillant.de
gewinnspiel.vaillant.de
www.vaillant.com
www.praemienshop.vaillant.de
heizungonline.vaillant.de
admin.marcapo.com
www.vaillant.com
gewinnspiel.vaillant.de
admin.marcapo.com
admin.marcapo.com
vaillant-group.com
*.vaillant.de
admin.marcapo.com
heizungonline.vaillant.de
gewinnspiel.vaillant.de
heizungonline.vaillant.de
anwendungen.vaillant.de
www.vaillant.com
village.vaillant.de
www.vaillant.de
praemienshop.vaillant.de
self-service.vaillant.de
www.vaillant.de

Certificate

The complete raw certificate details for www.vaillant.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1uRdIkTOhxSPwylf01w
wH4ATGKQ0VCCtfOWoM6Wgk1jZgcUJlE5ythXuYX6WosB6EyAKWw7Y24zcjdupSzY
xgWCqyJJUknikRpYM3cUrJZWwKba42bnPz08FbVs67egLoZg+VAfT1zrKSsBHfpn
fd6AD2KpVWVFCvhIheyYMSRWUfrLKG08u2Zm7FeJKL3OXvu1g0ZNFMkAmFKhgbSh
uPn2vAyGr9m2wfPwz2D/vp9pglQVg/1VOLWJgED00znk7srxZt3Xd3WarfUTY1sJ
GaJBXC0vDoxAkJFQf77cs2zvn57DfQffVG4Tk5ITKoaV13WVcr8lUBF+FLMGgKGw
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32050021221091921337629026299847420807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Remscheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Vaillant GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.vaillant.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20621997664125779485138058002468612948443874085105764919273599837809009496016414136465071317266026191802926886286463505203186311098416357849606352027101285537995578721780603397880267225042128805411049326445547952888035432587814945700122035188727819063869959876045881840694662679114420151686350826599909743101480079579247491791234420300501472227635907062321200873027441844206115932565487624389246173160860273646931958294279214251578865380393424298952552443128937789438605308328564667771032632707903176018048780154180993878960746051963276465123890204689836928040756070072823443921002597221903440977836472669890871931009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaillant.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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