*.vr-immoservice-mainfranken.de

Issued by Encryption Everywhere DV TLS CA - G1

About this certificate

This digital certificate with serial number 03:12:12:96:5a:e9:31:4a:2e:83:a6:53:33:21:ec:b5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.vr-immoservice-mainfranken.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:12:96:5a:e9:31:4a:2e:83:a6:53:33:21:ec:b5
Serial Number (int): 4081522326541180750002932470905957557
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3c:50:7c:2e:c0:15:cd:7f:02:ab:ad:55:9a:96:70:bf:e7:26:aa:29
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7

Fingerprint (sha1): d9:79:f8:f2:be:08:48:1a:11:33:9e:00:9a:4a:10:f1:98:5f:66:ee
Fingerprint (sha256): 40:40:57:61:ec:d1:ae:18:eb:a7:1f:ab:00:37:81:5a:70:1c:23:a8:35:6d:24:17:75:5c:a6:0f:62:4e:e1:0c

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate *.vr-immoservice-mainfranken.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vr-immoservice-mainfranken.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vr-immoservice-mainfranken.de
vr-immoservice-mainfranken.de

Other certificates including the domain name vr-immoservice-mainfranken.de

(limited to 100 certificates)
www.revistacipcisa.com
digiprospekt.freyplus.de
magazine.montana-cans.com
magazine.montana-cans.com
webkiosk.magazinmarley.de
digital.queencityconnections.com
egsk.weita.ch
read.africanphotomag.co.ke
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
digital.queencityconnections.com
katalog.hltravel.at
katalog.isa-racing.com
immomagazin.wegenerimmobilien.de
www.vr-immoservice-mainfranken.de
neubau-projekte.vr-immoservice-mainfranken.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.magazinmarley.de
webkiosk.airhoppark.de
publikationen.manres.ch
biblioteca.sciens.com.ar
epaper.hz.de
digital.queencityconnections.com
*.vr-immoservice-mainfranken.de
*.vr-immoservice-mainfranken.de
rieswick.mediaflip.de
brochures.hts-touristik.de
ebooks.teammelanie.nz
neubau-projekte.vr-immoservice-mainfranken.de
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.suncruisermedia.com
*.vr-immoservice-mainfranken.de
kiosk.dorfstadt.de
*.vr-immoservice-mainfranken.de
read.africanphotomag.co.ke
katalog.hltravel.ch
booker.turningpages.me.uk
egsk.weita.ch
katalog.hltravel.ch
kataloge.pricon.one
magazine.montana-cans.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
mitarbeitermagazin.uk-essen.de
kiosk.hinzundkunzt.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
digital.queencityconnections.com
webkiosk.epaper-kiosk.beam-verlag.de
www.vr-immoservice-mainfranken.de
magazine.montana-cans.com
epaper.hz.de
epaper.technischesysteme.com
api.vr-immoservice-mainfranken.de
magazine.montana-cans.com
epaper.ictjournal.ch
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
kataloge.holzimpraegnierwerk.ch
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
www.vr-immoservice-mainfranken.de
epaper.hz.de
ebook.aimara.ch
webkiosk.magazinmarley.de
katalog.hltravel.ch
programme.holiday-event.de
ebook.aimara.ch
biblioteca.sciens.com.ar
kurse.bdb-musikakademie.de
media.auvesy.de
*.vr-immoservice-mainfranken.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.lurkoi.com
prospekte.wernigerode-tourismus.de
booker.turningpages.me.uk
vr-immoservice-mainfranken.de
webkiosks.theuma.com
katalog.hltravel.ch
webkiosk.magazinmarley.de
ebook.aimara.ch
katalog.hltravel.ch
brochures.hts-touristik.de
prospekt.hirsch-ille.de
oldnick.thesatanicwarlock.com
newskiosk.lixx-lingerie.de
epaper.hz.de
rieswick.mediaflip.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
www.infoblatt.at
dossier.benecos.eu
kiosk.hinzundkunzt.de
epaper.wta-suhl.de
katalog.lemo-schuh.ch

Certificate

The complete raw certificate details for *.vr-immoservice-mainfranken.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHZ22PzWa3g1I9Uv7nNs
vPHhNAdFge6RY/e5qWBhUathERymoioZwk1M3fOjI5AOhIE1+QfRkNyohAR1MHaR
jHqASGoXm/K/qxVF7O3qGCjzZB0voOvuEIjAsz6QRMxwKJ9SacM6puo/gLFJoZXG
4EohXw2XKLpy+A7Mfj4D3OhJUYIAp0YUf0VxUkpNeZHEdWSEMV4U87bEuOTIwvEw
jop2AQPdLpRNkoXFKOkr5vd2GvEx8Vq0r4Sq0bbeG+4hXfAeycsmagnNSKQGmavf
vYAlxvl8J8oUPXazf5swtRYPiyk7QHAxUpINwP0qEU/ylmZGVSbgr/SgrVZme2CE
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4081522326541180750002932470905957557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vr-immoservice-mainfranken.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18236732813259983279513714685370551757409784853174083745960604088700923915740841822017502835414642887657549899563684088105236827402170442040943660183022282105210902295898133495386851366219904593023146124924269553979158477853865993871657617946575519884433176561176534092156316207095459232076790579113053952615003535045258568961478611401491232566643323325088798208563642962202142834982721427463073081630800840087672187590086708721280288430725743360222726877526188757395081249234176872644634863925536853503120987346578720792062508450730231333712294515923672337301540480463133922442976236403980034708667497389800493712487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c507c2ec015cd7f02abad559a9670bfe726aa29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a0e7d69a70000040300473045022100cf02e55c6e2d61c4790a2c0b9be3500e4dad06381f6eb4ef83914d0efdea232402201fa9e52f2410f62ddfa7830c13c610e85ec3b74b9698494ef248cc4e58cac45d007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a0e7d694c0000040300463044022001fdbddf8c43ec65627d4c610953802b06031428425ecb937d4a027af1c39b590220194f82b6503e2a3a194dd9d470bf9bac4eb25b74f901e543098aff5735fe6820
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061dadde545f5d94758c9036d39d19c465eb8bd716c441412d6696640f92bc2722e9197b506d51e2d3ede63bc2f7d76bcde515de713d19ea69e7788b80f50777db3df6d94cf9a1dcea2235481470c130a303fedfd672656b35e2ac732dc794c4d1a960254050b9488419ee51b9b1c6477281826ca3c6a7ab69704ca0ff4632218468e5cafe681d0aa1e0d22253757632827ace53305c31ddc4cb5d476e55e3b9b0d5258ccd092352b07e304aff12bb9d707e3393cd3e76945fe2e6bcbbcf7ab4adb3838647f44abcdff45ad4c562e6cb994c6e4917982c563aed27bfd790c5d4bc74bf039e5fc462b7f85b9286ef150c5bff5abff9ead5f56d26c0993ff439205