*.steinberg.de

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 02:c8:98:87:e2:38:45:26:fc:fc:48:c8 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.steinberg.de

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 02:c8:98:87:e2:38:45:26:fc:fc:48:c8
Serial Number (int): 861475489882316994275723464
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: 25:1a:7c:af:21:f0:69:61:32:1a:bb:87:20:65:17:7d:df:fa:5c:8f
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 53:c6:6b:f4:35:97:df:17:51:70:f9:38:a2:1c:7d:71:b5:35:b8:05
Fingerprint (sha256): 40:e3:7c:e5:1a:a0:86:00:a3:ed:41:91:57:c8:2e:22:9d:b5:90:55:ff:ff:1f:1e:d6:44:99:c2:82:e5:6c:3d

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.steinberg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.steinberg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.steinberg.de
steinberg.de

Other certificates including the domain name steinberg.de

(limited to 100 certificates)
helpcenter.steinberg.de
traveler.steinberg.de
newbouncer.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
traveler.steinberg.de
www.steinberg.de
*.steinberg.de
mailgw.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
testrail.steinberg.de
www.steinberg.de
insektarium.steinberg.de
www.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
helpdesk.steinberg.de
helpdesk.steinberg.de
*.steinberg.de
videoconf.steinberg.de
confluence.steinberg.de
testrail.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
melitta.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
confluence.steinberg.de
sts.steinberg.de
srv-ftp2.steinberg.de
newbouncer.steinberg.de
insektarium.steinberg.de
confluence.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
sts.steinberg.de
newbouncer.steinberg.de
helpcenter.steinberg.de
easypeasy.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webcon.steinberg.de
*.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
*.steinberg.de
memoq.steinberg.de
*.steinberg.de
ensicaen.steinberg.de

Certificate

The complete raw certificate details for *.steinberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHGxls4HZ8T+CvdBKzXQ
5RA/oPYybI8DsGDbFSgNwbn8G7okh9U+lYv9I6gIVRaTaMvGVh3we41lYYqtZHmY
z6JBOye60CQ2Fnk5ZLSiNbbY8EyyBouWAuIYZkElSDeb/MqZde0KFln2OBEd4BUP
iEAuiknVDEc8S3K5zkGtoT/IuZ5qn+x2IcgSgM5NP57adcc7e27OnvCg3M/52pfy
OZt9L3NgNTEWQyFI4bqbsXsIcwvXLA7jQozmtbXF0rwqYSTSTxE3ZKmS55IrfT6i
c88j9GxFTw7fnQO5aNMCklMTHjydTeWCkyJWNXE4HHRmWIexZG+Q022cZIQ8cTCx
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 861475489882316994275723464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 14:01:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-16 14:01:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.steinberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22274006130670846761247659184252030510096780709833884676843775605279015291852717922236416700533338396318348411121957102176463164727198335856016263811601797326535133771349045325859968152079465861786573879913175922311901293139409675482610148910768502922643647662202417831855559984867981317235593196524527639552838336389655838121271694290112058139498261365533642432442505218750625737264582723492516122670805091929903580319265871379587194469104851889722908808889641132449773074829352104722785292587954034372058608868576755447003407415909889209418429862464486280018998342993185255324318708486151974812291137663400426910099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steinberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							251a7caf21f06961321abb872065177ddffa5c8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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