psm13.mbtech-group.com

- MBtech Group GmbH & Co. KGaA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1f:7c:18:c2:dd:06:8c:9d:00:00:00:00:50:ea:6e:f6 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MBtech Group GmbH & Co. KGaA

Organization: MBtech Group GmbH & Co. KGaA
State / Province: Baden-Württemberg
Locality: Sindelfingen
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:7c:18:c2:dd:06:8c:9d:00:00:00:00:50:ea:6e:f6
Serial Number (int): 41850414896288830846208837582383116022
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f9:0e:32:33:73:74:58:1a:6b:81:8a:42:4f:2b:c5:6a:1c:4b:4e:3e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 58:42:71:e0:3d:96:d1:68:70:1f:8f:d1:10:2f:cb:ae:e4:e5:2c:cc
Fingerprint (sha256): 40:48:0c:71:e6:17:5a:40:04:35:8e:0a:c2:97:db:5e:22:e8:d4:52:b4:dc:f9:2c:9a:00:87:bf:4b:ae:2d:c8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate psm13.mbtech-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psm13.mbtech-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psm13.mbtech-group.com

Other certificates including the domain name mbtech-group.com

(limited to 100 certificates)
mdms.mbtech-group.com
sip23.wp.corpshared.net
psm2.mbtech-group.com
fahrtenleitertool.mbtech-group.com
career.mbtech-group.com
psm10.mbtech-group.com
*.akka.eu
sip13.wp.corpshared.net
sip23.wp.corpshared.net
academy.mbtech-group.com
psm9.mbtech-group.com
sip23.wp.corpshared.net
stores.za.com
extranet.mbtech-group.com
emeeting.mbtech-group.com
sip23.wp.corpshared.net
whoiswho.mbtech-group.com
polarion_apm.mbtech-group.com
mail.mbtech-group.com
tsportal.mbtech-group.com
sap.mbtech-group.com
fahrtenleitertool.mbtech-group.com
academy.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip23.wp.corpshared.net
psm11.mbtech-group.com
academy.mbtech-group.com
mx2.mbtech-group.com
academy.mbtech-group.com
logon.mbtech-group.com
psm13.mbtech-group.com
prorenal.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
email.mbtech-group.com
zzzc.cc
www.mbtech-group.com
psm6.mbtech-group.com
polarion_apm.mbtech-group.com
share.mbtech-group.com
email.mbtech-group.com
psm9.mbtech-group.com
www.mbtech-group.com
sip23.wp.corpshared.net
career.mbtech-group.com
fahrtenleitertool.mbtech-group.com
*.akka.eu
www.mbtech-group.com
sip.wp.corpshared.net
email.mbtech-group.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip13.wp.corpshared.net
*.akka.eu
vpn1.mbtech-group.com
mail.mbtech-group.com
mbtech-mdm.telekom.ebf.de
psm14.mbtech-group.com
extranet.mbtech-group.com
share.mbtech-group.com
share.mbtech-group.com
vpn2.mbtech-group.com
cadmin.mbtech-group.com
mobile.mbtech-group.com
psm7.mbtech-group.com
www.mbtech-group.com
www.mbtech-group.com
ouen.cc
career.mbtech-group.com
psm.mbtech-group.com
extranet.mbtech-group.com
prorenal.com
mbtech-mdm.telekom.ebf.de
email.mbtech-group.com
psm7.mbtech-group.com
psm3.mbtech-group.com
sip.wp.corpshared.net
*.akka.eu
sip.wp.corpshared.net
psm5.mbtech-group.com
sip.wp.corpshared.net
psm12.mbtech-group.com
academy.mbtech-group.com
www.mbtech-group.com
sip.wp.corpshared.net
www.mbtech-group.com
psm.mbtech-group.com
guestwlan.mbtech-group.com
www.mbtech-group.com
vpn1.mbtech-group.com
sip13.wp.corpshared.net
psm6.mbtech-group.com
psm11.mbtech-group.com
fahrtenleitertool.mbtech-group.com
extranet.mbtech-group.com
email.mbtech-group.com
psm2.mbtech-group.com

Certificate

The complete raw certificate details for psm13.mbtech-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvysicDm0MpZZ3lZ6JQ9g
176uf27ZInA+x+wU3IN0vt9/XLp5Brin0EUALRyG+Qwm2TRIOmeaKFr3VYhxXG6P
0DW6y0fzWiDewFP0CiPz1c9EFv5Ab3jvZyuvUysjY9g4IiXg14tE/pRoA8jn/Gg5
HfS13XUvkc4CgB13vo45XxcEUc9lt/42omV+ew98TFMgP/NRhIvE8bTPnihJHuhv
TTc8bIVO2MWMEfjj6KjwgxddgcMS4TC/GtCXkUSU3m9dFBb+issjy3l84qNBI0h7
FnG/oCuRccfTThXrMd/zxx58JxMBnQbiO4/VYaGsyiFwfwTQvXJkoUzBLKyrjRxp
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41850414896288830846208837582383116022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 15:28:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 15:58:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sindelfingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MBtech Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psm13.mbtech-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24132786675516791090473757318968760123979332529863623425340098028711480072137226840311227843653450905068153587873389830562613385546480061302263657637937863804498888820550191099046264798963915335660201527223101862971696584199117336885667428446877943996468649598944220351799242891746457932170163256251892661653987897292503802522561266928030268011565541628924387635971794170052503879905705739759681986762453456219935540686173062763821905273254338792370920316293227239943530070020430853141513251677379637971367812137394778605518920351148065583531532715881667538166852389954160851206434336307558477557071272626799983225269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psm13.mbtech-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f90e32337374581a6b818a424f2bc56a1c4b4e3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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