*.bitmarck.de

- BITMARCK Technik GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5d:30:42:2a:7f:3c:26:32:f3:1b:2e:e8 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BITMARCK Technik GmbH

Organization: BITMARCK Technik GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:30:42:2a:7f:3c:26:32:f3:1b:2e:e8
Serial Number (int): 28840446812845959025864158952
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f5:d1:c2:bb:83:d0:a0:04:43:37:1f:bf:16:76:c6:75:eb:b6:39:de
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): b6:9b:16:fe:79:c9:0d:19:0b:07:d3:d4:e0:41:26:53:44:69:86:2b
Fingerprint (sha256): 43:e0:8d:34:de:16:40:1e:1e:ba:fb:bd:10:56:66:0f:79:c4:f8:60:8e:a0:ae:97:9c:69:23:b0:58:a7:77:35

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.bitmarck.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bitmarck.de
bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
apigwdu.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
apigwpu.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
planontest.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
*.bitmarck.de
services.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
planon.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
beispielservice.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
webvpn2.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
apigwtu.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de

Certificate

The complete raw certificate details for *.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28840446812845959025864158952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 07:41:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-11 07:41:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BITMARCK Technik GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934522328091587246035347190894135686719289305526131298352527568595906875891157994850877057639096677657790434803334572531754655462808201130231742345995859621669647831866180703110330210553678072778540385524133634360944642545062654999867895884176001406416523290813474578934716427876625800847922354798752680168727606859749409037483552046683617734960472210101006519521792168866311838170988300565499385222821839912568881423449335775433218991253445320893315723420495542947909894758437400769353971318699527152688069614425412199272577108084959546840101447233279360360341061659996985163394867769151730328303838065137609019037081833329946095507036425718686296066797583647514693837691313870748441340182038187781230877075427589630321439435217128771979427617193851724094854270769085159472578045433322501154122963946875028786064737663501268279597512965979041369844841253568058726452678246181885951412338099702352664683891765093648686401395597948467158434665218463799228034656503186469176691861090659929810216330939434891163632580491960950994277409991135474131811001594436460954904589209444591787004391547392686676747169786369425893780586610735618572779248834769341661619101920083476163192060925847720839493806393730002836785672560921549926915717513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitmarck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5d1c2bb83d0a00443371fbf1676c675ebb639de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017337abafd10000040300463044022031c389ea57d02e7a6f3053ab3070fcf17bcf1fe62c2ca5ec6e076cdb455e3604022079fc8b1e1df7365e4662e9962e81575454203350064b107a69d5e0510a84edbc007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017337abafb40000040300473045022100fdc821cf0abc83a5469e941b26818384a1a8e5a149eb66746ec520450b265e7c0220588da654236936a2114a2f7289f17daecd82ff3fbf3cad6b2f4f0cc15d1eb104
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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