OV SSL/TLS Certificate for fta.dfg.de Issued to Deutsche Forschungsgemeinschaft e. V.

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the fta.dfg.de OV SSL/TLS Certificate

This certificate with serial number 0d:91:2c:02:ea:5e:ea:ac:66:8a:d6:1b:94:34:6b:54 for fta.dfg.de was issued on by GEANT Vereniging.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for fta.dfg.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0d:91:2c:02:ea:5e:ea:ac:66:8a:d6:1b:94:34:6b:54
Serial Number (int): 18033739646704581595138189569163553620
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: f2:a5:77:b8:5d:6d:34:2e:19:fe:fe:2e:a9:64:32:d7:d4:1e:97:09
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): b4:29:27:0c:f6:c3:b6:48:2e:7d:d4:b7:98:7f:d4:e7:65:af:94:c0
Fingerprint (SHA-256): be:77:84:f7:66:b4:ca:66:2b:9c:ae:52:66:19:ec:62:6c:b3:e6:83:56:eb:1d:a6:8c:b2:f2:a7:2a:61:35:6f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate fta.dfg.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for fta.dfg.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for fta.dfg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHGCog0w8e67y3S6Rcn6
/qQPYrKbLozuG6WTUOnvjP5riIK3E7Dc0j08jrdvCcYKsXZmlGqwptRDo32jaH2f
ddnCG5HH/zZ3lVStpugJNzd2i5WlrVlKlb39glEi5ChLWgu7QijgOdsCvH8V5U2z
Hmg26KPgDBBtnnNBuhfjXrpDukVhGHeRsW+ayYjB1EIcictocZBF+3P7SF13zk+L
mv1zwR5pYqIZesMWautrWoi07bzQgANuqh+H4ri5y4nm/XtCZGeM3vohmEgVCV63
aBSv7dVYOKsCTxypciLZ2n7dVtQll9MwIBpXlAiuCQQa9n/VqmHVIJvmBbNXVE7g
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18033739646704581595138189569163553620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Forschungsgemeinschaft e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fta.dfg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20254102802386312882899161629221308284988387835882903810647345174923338060827613525647562256618821317318840860114417660785572988457694999731425791407491242590670933588655225758775965872122639738149496045081547649307895653548190280034482460683441790840906639024892844470059811585430747851202806924370016031409238617411970514453806252089211343992626643216128716454977893377249647930084824648274168642037350184338383373899721725361586161660976994329295832660134794616083699208914509723581258482391257701362242696509253013029817380302010608934107009179110564378571215241539728683054451359264092203832746913995033595011259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2a577b85d6d342e19fefe2ea96432d7d41e9709
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta-t.dfg.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006267c1f79d93ee1e6a2866be7725f3386c97e8df99c1ae631e0113c6b32e1683efa125c33d4523545c9261ad100e72ee6413d31ebf7962921964618f019aa33bf07d995fc413f19d57acd227c4d247afbba490b0197bbe0894280a8e7d17a71d9721e8f3506c9dad8a61e536630a3257af87ad229ca0a66151f9ea2e914a1a0e171b6210678fba24c6ec8a8f472a10f5ba647da2a3a4efe0cb878cb97f1441efdd3009a20634f78e544b2a4e1d18b686a69c0497c3ddb8560b3e0c35310e01e3f69a127d64c8d44d8627d7396f12e3d70cf0c2addb55583d2ac6114fc6d502839e88ac1237c465bae7858c9c7bb43c731dbbb89bc3e6d8ab0e11ca144b60fabb4a8e78e628073deddba8bd16230623cf7a8823ffbce21e37e2cf225f841651446b38bfe0d9de0a16fe10af27ccdf1c618de8f442fd30337ac17bb9d0b4bc2b4d79b00cd27ef27dddf5b127e04133ddefc9a9b83d0f9958082722d8f458a1fa48283c6fd444bf423ca55ee5a5847885ce2bc0d10799d1bb9fe97733b2044269c77aa2dbcb8dfa880e0034d305988631f745558428bc8d1eaa5c9773209aa684dd4e72d39cc9018c8255992818f5126554285cb5c0be1a9558a49f3e73751b382f1a004282c572a3868b10d2d4d4507436220529bd3348793c5658a1e7fa77d07b8e70d34f6c1a163193ca27d8216388c91dde66553b0f36f7c59527abfe1df512