demucexpe01.nemetschek.com

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 77:ff:82:6b:0e:aa:33:d4:a9:44:6b:26:f0:2d:cb:d8 was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=demucexpe01.nemetschek.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:ff:82:6b:0e:aa:33:d4:a9:44:6b:26:f0:2d:cb:d8
Serial Number (int): 159504812392531785954698231795168431064
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): df:22:ea:e0:e6:0f:d4:2d:88:63:02:fa:10:c6:c2:46:88:64:43:90
Fingerprint (sha256): 3c:10:a2:55:2c:fa:d7:af:ea:f7:e8:db:58:c6:36:29:15:be:23:bc:16:2d:af:7e:db:da:06:b7:65:b4:5d:59

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate demucexpe01.nemetschek.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demucexpe01.nemetschek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conference-3-standaloneclustera0f04.nemetschek.com
conference-2-standaloneclustera0f04.nemetschek.com
nemetschek.com
demucexpe01.nemetschek.com

Other certificates including the domain name nemetschek.com

(limited to 100 certificates)
intranet.nemetschek.com
nemetschek.com
www.nemetschek.com
site.nemetschek.com
intranet.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemo.nemetschek.com
nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
nemetschek.com
nemetschek.com
one.nemetschek.com
site.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
www.nemetschek.com
one.nemetschek.com
ir.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
demucexpe01.nemetschek.com
nemetschek.com
docuware.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nrldev.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
*.nemetschek.com
inside.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
expe-muc-01.nemetschek.com
nemetschek.com
nemetschek.com
nemetschek.com
portal.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
demucexpe01.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
docuware.nemetschek.com
matomo.nemetschek.com
nemetschek.com
inside.nemetschek.com
ir.nemetschek.com
one.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
news.nemetschek.com
matomo.nemetschek.com
site.nemetschek.com
piwik.one.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
piwik.one.nemetschek.com
matomo.nemetschek.com
inside.nemetschek.com
nemetschek.com
ir.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com

Certificate

The complete raw certificate details for demucexpe01.nemetschek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159504812392531785954698231795168431064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'demucexpe01.nemetschek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634288457476065000951456312668085703574458953841765556683191240599789654466731588470544308984051227714955392393566276676910904070793387970402662531656808436554664024014175829160572712975011979288878422341277333371063185019093732168434255751486748894949958205761997654536661009350599307197343822425493282409052113515781480814340975276455590795066038358715909639715834952686592561288623904570765555655631568434939029258322521876268318180689017390748002082970974902576229421892188366242474049306292132564251810454903309520299523540506055902198913081781158567985634519810368558708952993163277354252345277593337779170431643057954452452339852631626281904401288098993830837175755496892082462024026154871433215485358742438462958922528528232650868933393649131526952329154990478292661183379127227862021927044586767653007288237014975706929669046214285523830880415234536357696775599099415429999337050779462760388479898351983422933315403445715056563186980964400393847729758686735866405504253834704920008321862617568845782406753105967899678058838079540956930953237278936146384656021555018966965252444062953614496295978854286215735596712387702574253725473504420342224580301442739223350925197865879189800076488837282889391792486704947303206891871223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standaloneclustera0f04.nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standaloneclustera0f04.nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demucexpe01.nemetschek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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