meindev.bitmarck.de

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 34:d9:ec:78:28:34:6d:8b:cf:09:5e:91:86:34:a5:43 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=meindev.bitmarck.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:d9:ec:78:28:34:6d:8b:cf:09:5e:91:86:34:a5:43
Serial Number (int): 70251380367606428344766029337384494403
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): fa:78:ca:7a:84:c0:34:a4:9e:21:d8:af:69:bf:73:6f:5c:97:41:d5
Fingerprint (sha256): 41:a3:21:9e:2b:91:90:89:70:06:d0:3e:48:a2:38:0c:08:c2:80:d1:01:75:70:a5:99:5a:2b:32:42:16:7d:ad

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate meindev.bitmarck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meindev.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meindev.bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
*.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
siplync.bitmarck.de
lima.bitmarck.de
sts.bitmarck.de
apigwtu.bitmarck.de
vcsebravo.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
tango.bitmarck.de

Certificate

The complete raw certificate details for meindev.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs7NNUyDK8+dHYCIPQOwg
87kCfWcRtZVU5mw2kp5fuAGt+wwQ5YKbe20mmUarYn0GgTMWFw9A+ksWB3GkDHSY
hdX7+mXGN3eX992jeMmxI3taF0dMaozvV0obaY8+ci5zZiKQp9s6/Iy37pndRlSt
OvBvac3LD91ZZ3zPGS1jjZx73n0JhID1q/5YHJ113zVGu3zWsnSqy+AvO26DLX5A
mkoiLCmUbUgA1Mwq3lmjXHKorw+GESLfEnFuhhg8wB+CBrO0r3RFHfTkraygSccK
8KYEBbSFqn94tVGLq7m51NYbsYtnGWXs2ZFKGmImqPQ9ZxMTTtP6/wjU2gtiKQb1
VvYO1J8gx2zfXFaZLysuPGDiucRnjzguOnRpDIIAjAzqmr7UjVybZglyhc0GKhsy
/SbhK3RvDtZ0lbHIawXq/u9xtiEGmX/OFM7po8TUS3T8nxy/+FuszdwDCF+devdZ
MCk2RETq1/b+kh9rDyYE8IZyF8BkqxbOBf9zyLFVxDmVkmWR6mVB8FM+TPCpq69P
et6rRb/htrVYhKL3ws/EGWvWOv2ZaYdo4VQjm7dmzjZ4slQvmEQgPLBUC/Fm5YOr
rtTKENSEQwnGB5NZp0ZolzA24qMJ8Lg3t73i0tlUr2Nynj/qEQVF+/Im+Qv0h6xm
RP5ermptgz75rElQslEW6vkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70251380367606428344766029337384494403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'meindev.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733113665298171346325534248948613981556060781185686543492920579246546305451130445258434229565452200711047404893237070855095909421688379120963391284057605551277710681213437325596313947847089017272974361542963185780488319036553442728924880854185043949245137072230921424290428152519837127800392999717154912558030986828783706986059654657332264986205394696195949023197238063521306913300280889587711989311261235121338210944557797862233772646688201092447829990662773040307072108164772027411870068939276425567362477128017133677922048394392015826343885221931115721978900804300389957331582931738903834185677705423163880495985081022910954319584688212522507048746373431447895337725322052460348206203876381711955843394307237763962751869440103051765030880529675460318497478443761850920531454489467135418675262873184298754913001047202695610896815865619005443876024982823057524659403131250661958928489832025232175519241864628323648362251626976166777484721850238616065927593554329598850995881699008289022245235529625389288797513895903606001276716040415784719390316743797948549687038716240684082157002336706422318956025454677544977268614982322261835566479823055331770509448351068063976420521463940549609569316141155594164732674376100461853878011751161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meindev.bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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