*.exco.de

- E X C O GmbH -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 48:00:44:75:c9:69:40:23:4f:fe:f5:2b:8f:e8:62:4f:1f:2f:b8:b7 was issued on by QuoVadis Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

E X C O GmbH

Organization: E X C O GmbH
Organization unit: IT-Services
State / Province: RHEINLAND-PFALZ
Locality: Frankenthal
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 48:00:44:75:c9:69:40:23:4f:fe:f5:2b:8f:e8:62:4f:1f:2f:b8:b7
Serial Number (int): 411053299215518054386230664619706031351381604535
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f9:4a:6c:80:0d:2e:fc:30:2c:58:1b:05:02:d5:59:f5:b2:5b:51:b7
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 84:30:3f:e2:67:ba:a2:a8:b6:4e:b0:9f:50:66:0c:22:a8:44:44:30
Fingerprint (sha256): 3f:20:16:85:e2:29:2c:bc:d7:f5:3a:22:f6:6c:b0:f4:31:29:6e:6c:b5:4c:3e:87:da:5c:14:51:d5:01:27:2a

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.exco.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exco.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.exco.de
exco.de
*.exco.gmbh
exco.gmbh
*.exco-consulting.ch
exco-consulting.ch
*.exco-group.com
exco-group.com
*.exco-group.de
exco-group.de

Other certificates including the domain name exco.de

(limited to 100 certificates)
plan.exco.de
*.exco.de
exco.de
plan.exco.de
*.exco.de
*.exco.de
exco.de
mail.exco.de
*.exco.de
exco.de
*.exco.de
mail-ft01.exco.local
career.exco-services.com
exco.de
exco.de
exco.de
*.exco.de
career.exco-services.com
mail-ft01.exco.local
exco.de
exco.de
mail.exco.de
plan.exco.de

Certificate

The complete raw certificate details for *.exco.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+YxJRlRHkFN3+wtmVq+
GfhnaHs6+Ra6XO77bqbRsAOKFMH21BsvUoJrODGlQ0/eTw71HtU0hC72rRwLxqiT
5YDnxRlyO7pX4TyvRZ4CBLStMrtbIJ+JrWzffBUHKufU2rsIeNs++/4Gn2dFYAnY
lBstg/EoTSZnccGadqdNHCN9bLJ8l1oZPVPWe3jpTbt3XC1mpk+2OuoF7ltvEy0b
LHLZ9ekyWVBMIKsweqJQz7HQ7gwW0k0+QO1GMk/ArSIrL8evyVRBzUooQQV46joG
cfJOSu179sLUyEuCTlrRe+BspAO+FovERXYTJbRgJX7y7nMcAFAt3Vxn0zq4yDVv
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411053299215518054386230664619706031351381604535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 13:51:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 14:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RHEINLAND-PFALZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankenthal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E X C O GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT-Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exco.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28769607119499459776474189826412407253999214093943104150004394994245149324055507562769229646210022534580847554716157174082520933858320127375290672139952146096923021401597963633057388601447963335897595228373664281588665293654850271914173149748242076431144844407416749314445973649447832476120248119304436241192877429546751854969273170849715079693787130891298663887595282320999712498105426475025797749875079734379791262654704901473965449939450680827409566829030337454360468060093165945825737983888337008130008695086833436251715561581706998203701941317771978247277099465035181530863117605044289599604293265251434914738039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-consulting.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-consulting.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-group.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-group.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f94a6c800d2efc302c581b0502d559f5b25b51b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00d08b9e421ae3e79bb759c4fe2aecc484a6aa4b4a30398da45c837bb7dce5445990c77d567b219f0927fce700d87603c448844cdc9da8e005d44f27a2acff80ae58e86853256c147d3d49dd339de70898187e76e7745edf7c8f22dea9994e6329d3168ccee47f46922dc04f278a4e9cf3b345c44c795b3a3a2d1791b359a9f930a76924ec2eefa68a46b9f6d1337fe2fa3db9059a345309065e805d3f4e589911c77ac699e079158ad39b0434de3cab0668f799f87d1810fbc08a6a000bb278d0ed5b569b25ff8536dc38e784ea27a5a31307de1492b2e2edaaaf45ca70cae459e36f5a17933bc3d902b35d15942d11801374936c6e2c7a37547781c5e785f73881d50801b7e81e8124801658196b878831085c52eb946e01779299b479a4c410598a97a9a31f558d08e7d86b3cd1f84183c4b7db617183664a23d85fcd65201a5a23c7c0ee9aa8a396a7c544d0584d978306ebed6305fbce904953532967474c0f59a3737bc48b530ea2401017ed1d7f9d646724f5c835d7b41645b58a14e3d0bdff2722319ab070cb69a14406f76e010c53fde6bfffbc33ab25d9664a341f0b9b9847d2455d845dda8b17f057195720d36073a1c4615a691f91b469bb0f8030118621efcca4bb87c66279843508496714001ba09bc3cccee75cebb7204200bb66933114522ccaf23eb323632dd59372ecfcbea2a50e6886079af8bb1151280e