serviceshop.sartorius.de

- Sartorius AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:1e:ba:7c:4e:7e:10:f9:c3:82:e0:06:a2:e9:0a:c3 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sartorius AG

Organization: Sartorius AG
State / Province: Niedersachsen
Locality: Goettingen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1e:ba:7c:4e:7e:10:f9:c3:82:e0:06:a2:e9:0a:c3
Serial Number (int): 1488779278311627265763865546369600195
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e9:64:b9:77:7c:0f:36:c6:d7:33:02:f8:2e:21:a0:7b:1b:31:1d:a8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c1:23:1a:1c:b1:c1:0b:18:a6:54:b7:64:1b:df:c3:0f:d9:a9:fe:27
Fingerprint (sha256): 40:5b:4f:62:4d:1c:44:f9:cc:34:03:d1:81:85:04:2e:ec:7f:50:10:20:04:10:27:5e:c1:b2:92:96:ac:f3:8e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate serviceshop.sartorius.de

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for serviceshop.sartorius.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

serviceshop.sartorius.de
serviceshop.sartorius.us
serviceshop.sartorius.ie
serviceshop.sartorius.com
serviceshop.sartorius.be
serviceshop.sartorius-austria.at
serviceshop.sartorius-switzerland.ch
serviceshop.sartorius-france.fr
serviceshop.sartorius.co.uk
serviceshop.sartorius.it
serviceshop.sartorius.es

Other certificates including the domain name sartorius.de

(limited to 100 certificates)
www.sartoriusglobal.com
serviceshop.sartorius.de
www.sartoriusglobal.com
serviceshop.sartorius.de
ir-berichte.sartorius.de
sartorius.de
www.sartorius.com
serviceshop.sartorius.de
www.sartorius.com
serviceshop.sartorius.de
serviceshop.sartorius.de

www.sartorius.de
serviceshop.sartorius.de
sartorius.com
www.sartorius.com
www.sartoriusglobal.com
www.sartorius.com
sartorius.de

www.sartoriusglobal.com
www.sartorius.com
www.sartorius.com

serviceshop.sartorius.de
serviceshop.sartorius.de
www.sartorius.de
serviceshop.sartorius.de

Certificate

The complete raw certificate details for serviceshop.sartorius.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxyNlvXvZUgacN2vA682
Sg1MkWOhAX14izrgssfDD2rdj9huKC+2peP7FbWjQRao0xoAcnRajQl2ev4zVOQX
S1mqOtu+YC8fbNKTGgec766BfsbQyaYAcsF43uRj7xBQzzAEvO5EinxTb0c0uPxY
gT6Nu7QKAhLihzfzAXZsHiFfmTfv7eLO6rVgtf302RDOgHCfHZ2xxmADdoawnF7y
y/OsdrVR+/wv8Rz4wX7bsVKn8+jOztfgbsMruAThsTzVqGnt+HlFZ+5WJKAzh3wE
cnkverRziGtPa3Q1BPDF74JNwvHQmmPNCUTktForWgK9FUeNZTIyCtTF5TGXRlR1
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1488779278311627265763865546369600195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goettingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sartorius AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'serviceshop.sartorius.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25135502739095347577166450102703868388937013459820116695555487508090312777413049491766873492653340347920976494124986063861668037561749631639671922845013377994732138749216477980841550143371562810077354023830803033102080562994559958430006442428368090671278771490532061323319630835144513486369032504597356787669921575374108202940546748751966399658416772168707894235465926305464897606622675841295346962119553703143578179831339919100254252849653917615966147602243130577750821008024313665028605881842399332685395165880378736646952971140104413360175199811476128259095248814925516032371528251744299017343000548271985716917749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e964b9777c0f36c6d73302f82e21a07b1b311da8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius-austria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius-switzerland.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceshop.sartorius.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c4d17469800000403004730450221008953c2189a6fdad6a88bb854e8cbac0cd98739c0e32ad8f4ff7637f7f518d0180220490c16d69abc89e6aa22cb960711cf79dc75076a0b9ec5f5fc0d463cce1f94d10077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c4d1746e60000040300483046022100ef9fcff83d694f208e418f9e351c6863c9ac1596d965cb61826ec03b3c321168022100dcb8656a395a520ae1c1732f5174f40620c430c5b4691d5e9fd0d08f3b6757ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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