www.hansestyle.hamburg

- CKB mediahouse GmbH -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:1f:3c:5f:93:75:71:33:48:60:b3:4a:de:b0:49:9c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CKB mediahouse GmbH

Organization: CKB mediahouse GmbH
Locality: Hamburg
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:1f:3c:5f:93:75:71:33:48:60:b3:4a:de:b0:49:9c
Serial Number (int): 18771377660491335170519766699602889116
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:b6:2c:c5:d5:12:37:19:13:94:e3:c4:59:8d:f1:db:04:34:26:5e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 86:d4:45:05:f9:ba:cb:c6:78:15:bc:d3:96:d6:7d:71:06:bb:d3:ec
Fingerprint (sha256): 3e:cd:79:bf:91:58:90:9b:04:4f:d2:a3:6f:6a:5e:9f:a0:53:cb:8f:39:ed:6c:55:8f:63:a1:e4:65:78:7d:e6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.hansestyle.hamburg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hansestyle.hamburg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hansestyle.hamburg
hansestyle.hamburg

Other certificates including the domain name hansestyle.hamburg

(limited to 100 certificates)
catalogues.meister.com
kiosk.greater.sydney
www.hochseescheinkurs.online
e-paper.moinmoin.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
prospekte.intersport.de
catalogues.meister.com
epaper.glasmarte.at
kataloge.quester.at
kiosk.greater.sydney
kiosk.greater.sydney
berliner-kurier.kiosk.plus
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
blaetterkatalog.rp-media.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
kataloge.quester.at
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
kataloge.quester.at
kiosk.greater.sydney
ca.lyreco.de
kataloge.fuerholz.de
kiosk.greater.sydney
kurier.leimbacherdruck.ch
kiosk.greater.sydney
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
kataloge.fuerholz.de
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
kataloge.fuerholz.de
kataloge.quester.at
online.hansestyle.hamburg
kataloge.my-workwear.de
webkiosk.sossenheimer-wochenblatt.de
www.hansestyle.hamburg
spezial.holzschwab.de
catalogues.meister.com
weser-wohnwelt.mediaflip.de
e-paper.moinmoin.de
www.hochseescheinkurs.online
polsteraktuell.mediaflip.de
kataloge.fuerholz.de
kataloge.fuerholz.de
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
kataloge.fuerholz.de
kiosk.greater.sydney
kataloge.quester.at
boeden.holzschwab.de
epaper.glasmarte.at
cf.completesportsnigeria.com
ca.lyreco.de
kurier.leimbacherdruck.ch
tueren.holzschwab.de
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
epapers.gleitz-online.de
magazin.fon-times.ch
kataloge.fuerholz.de
kataloge.fuerholz.de
catalogues.meister.com
webkiosk.stein-verlaggmbh.de
berliner-kurier.kiosk.plus
elektrosystemyonline.pl
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
moebel-boeck.mediaflip.de
online.hansestyle.hamburg
berliner-kurier.kiosk.plus
www.hochseescheinkurs.online
webkiosk.baechli-bergsport.ch
www.hochseescheinkurs.online
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.baechli-bergsport.ch
epapers.gleitz-online.de
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
kataloge.quester.at
epapers.gleitz-online.de
outdoor.holzschwab.de
epapers.gleitz-online.de
kataloge.fuerholz.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
pub.vermoegenszentrum.ch

Certificate

The complete raw certificate details for www.hansestyle.hamburg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXn1jh6QeyaJrJBxV1ew
+27W/oepu94SzkUQ+H693Zn0o/jwmt060H9EWt17TDZ1a7KXmI8dbZvUw2ctAz7U
DbmrPNajHnmJY96dva2Q4b0KiUj6c1Mx0PIqt5YydrLFPmaTv3GOwg0VS7hC8P3K
hItlPAhQk2YbXi4/O8ElN80Z+MNeG5X+C7u77oTg6RNHh+x9/+KwTva4E3c9CXPq
IrPZEMNc1sX+X5r5VWM7H8xatg32XvWPPbnnHh6MLtvTnowqLe5YO9/Pt03eyrX5
0kltxwSrBZD0dcDfJdmoPIXM6cJiUj9e1G/ZM0ZR6RQub0HI/k/THQILo3D6x3e1
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18771377660491335170519766699602889116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CKB mediahouse GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hansestyle.hamburg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18364694542970186383710782529535925126183321399502264720090846237795062642502444992498408787509579692482367403186478668203710983738658820594469147220917831667295550079788899401741558267198458001660811881178066175971256636405073655514604791216955933783973692546333892994977793632017365564159625231302687911372342103300054763376742505509481327979612945330456865411438457859242672782564655789080672065979419248180905203614506891561183524033269414883716938844479540483071891065101111532494293039687754985670353012988983786431294768361336085152852450999290924270297830871535234995907787667240330007556368146749197787837829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86b62cc5d51237191394e3c4598df1db0434265e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hansestyle.hamburg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hansestyle.hamburg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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