ivwbox.fitforfun.de

- Tomorrow Focus AG -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 75:d4:e6:0e:2e:60:8e:6b:b4:fa:30:b0:e8:98:07:41 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tomorrow Focus AG

Organization: Tomorrow Focus AG
Organization unit: Fit For Fun Verlag GmbH
State / Province: Bayern
Locality: Muenchen
Country: DE

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:d4:e6:0e:2e:60:8e:6b:b4:fa:30:b0:e8:98:07:41
Serial Number (int): 156625108518600695564239975598039500609
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 44:5b:93:23:ae:b9:e0:1b:07:8c:10:da:ee:1f:1f:5a:6d:2c:3d:aa
Fingerprint (sha256): 40:fa:7d:54:c0:e0:12:c8:b2:3e:01:fa:48:9c:54:d6:03:91:50:be:31:fe:11:c9:48:eb:c0:46:9b:e4:00:14


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate ivwbox.fitforfun.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ivwbox.fitforfun.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name fitforfun.de

(limited to 100 certificates)
branded-stories.fitforfun.de
x.bunte.de
community.fitforfun.de
bf-tools.net
bf-tools.net
mms.burda-forward.de
promo.fitforfun.de
consent.planetradio.co.uk
shopping.fitforfun.de
*.fitforfun.de
kzsicw.fitforfun.de
bf-tools.net
tags.fitforfun.de
bf-tools.net
bf-tools.net
ssl.1.damoh.fitforfun.de
bf-tools.net
branded-stories.fitforfun.de
branded-story.fitforfun.de
*.sandbox-sp.fitforfun.de
cmp.bestcheck.de
tags.fitforfun.de
community.fitforfun.de
data-f06c8efc81.fitforfun.de
branded-story.fitforfun.de
cmp.bestcheck.de
shop.fitforfun.de
bf-tools.net
mms.burda-forward.de
cmp.bestcheck.de
cmp.bestcheck.de
damoh.fitforfun.de
*.sp.fitforfun.de
mms.chip.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mms.chip.de
a.tfag.de
ssl.1.damoh.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
mms.chip.de
*.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
data-f06c8efc81.fitforfun.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
*.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
bf-tools.net
shopping.fitforfun.de
shopping.fitforfun.de
community.fitforfun.de
mms.burda-forward.de
mms.burda-forward.de
ssl.1.damoh.fitforfun.de
branded-stories.fitforfun.de
cmp.bestcheck.de
bf-tools.net
branded-story.fitforfun.de
branded-stories.fitforfun.de
z.fitforfun.de
bf-tools.net
*.sp.fitforfun.de
shopping.fitforfun.de
mms.burda-forward.de
x.bunte.de
branded-stories.fitforfun.de
rt.fitforfun.de
bf-tools.net
bf-tools.net
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
blackfriday.fitforfun.de
blackfriday.fitforfun.de
mms.burda-forward.de
a.tfag.de
cmp.bestcheck.de
ivwbox.fitforfun.de
mms.burda-forward.de
bf-tools.net
cmp.bestcheck.de
kzsicw.fitforfun.de
a.tfag.de
a.tfag.de
data-ba3ff52f53.fitforfun.de

Certificate

The complete raw certificate details for ivwbox.fitforfun.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAUi1mPXZfgr2VSgNV5t
wyUe5VBjR7HvHSt7EAHvUJgRTnrNkIpoI5Rt2+1FpwqOj0C5uCC3qyLOUmAXMSaq
32/uStginrtNYKMgOopTE0d1kicEknZDrpkTNSb9jBtej7nfOF+f0/B4VWH0CVNY
Tpu9ONhWXBuB+VNAFO1gPElSViocskJ8xiX/rfh4Q5si/nF1tMXzNo2k2YDDk2ZS
myfi0RtT+dp/NrpJ69yi94KBjEZeR5imbot+jkQXDlQ+8+CdchmmnmhTZEVSm1k2
71ZHq2g2FigSSG27AdOXZQBY2PqyTE1iKJfGarGtXlTQEQlISw6QN94GKzFTlHz3
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156625108518600695564239975598039500609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tomorrow Focus AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fit For Fun Verlag GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ivwbox.fitforfun.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22725427591222969648092978152827858949604314554868440362488268734952857541009326147455725846408085955941961968728286577426497234219400179942727464689247377279712958392543165955643311875712619124550165524050729000269026977481928440230093045085130761236181861205901852567494092731661723494008396952919417106090156232773140449521900008915031730614985968699109836985323354830377888737705641094665316729058523510859086868196049653950777583152606637955164239985234423569334365006714962931667045936007442423646529345624931109091938210110589938625421723497298255435978800617493450760262756125924244832273711044374510729754401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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