www.mannheim.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:fc:e3:95:a5:cd:1d:bc:d7:36:db:ea:0f:b4:64:b2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mannheim.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:fc:e3:95:a5:cd:1d:bc:d7:36:db:ea:0f:b4:64:b2
Serial Number (int): 19922266712628839183282169945718547634
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:7f:6e:22:0f:1d:11:34:de:19:48:f8:1d:4d:e3:9e:34:18:76:03
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 76:43:99:32:a8:66:95:fa:0b:a0:84:f2:d7:11:94:f6:17:55:ac:04
Fingerprint (sha256): 47:4c:ff:3d:de:70:12:c2:17:41:9e:6c:3e:b8:10:2a:21:2d:fe:96:d0:12:c8:4d:41:2e:14:ed:7b:4f:cf:b1

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate www.mannheim.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mannheim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mannheim.de
mannheim.de

Other certificates including the domain name mannheim.de

(limited to 100 certificates)
veranstaltungen.mannheim.de
red.mannheim.de
scope.mannheim.de
extern.mannheim.de
NBGstamanEXP-E1.mannheim.de
piwik.mannheim.de
web2.mannheim.de
mailings.konversion.mannheim.de
buergerinfo.mannheim.de
bewerbung.mannheim.de
www.mannheim.de
theater.mannheim.de
opendata.mannheim.de
www.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
mailings.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
bs.mannheim.de
veranstaltungen.mannheim.de
stadtarchiv.mannheim.de
*.mannheim.de
khria.mannheim.de
veranstaltungen.mannheim.de
gastwlan.mannheim.de
extern1.mannheim.de
www.mannheim.de
buergerinfo.mannheim.de
buergerinfo.mannheim.de
beteiligungshaushalt.mannheim.de
*.mannheim.de
svcloud.mannheim.de
bewerbung.mannheim.de
www.formular.mannheim.de
piwik.mannheim.de
*.mannheim.de
piwik.mannheim.de
katalog.mannheim.de
theater.mannheim.de
www.mannheim.de
www.formular.mannheim.de
www.mannheim.de
artup.mannheim.de
svcloud.mannheim.de
ccs.mannheim.de
piwik.mannheim.de
mdms.mannheim.de
katalog.mannheim.de
waehlenab18.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
mailings.konversion.mannheim.de
webco.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
web2.mannheim.de
www.mannheim.de
theater.mannheim.de
scope.mannheim.de
services.mannheim.de
piwik.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
stadtarchiv.mannheim.de
mailings.konversion.mannheim.de
web2.mannheim.de
bewerbung.mannheim.de
web2.mannheim.de
katalog.mannheim.de
NBGstamanEXP-E1.mannheim.de
services.mannheim.de
scope.mannheim.de
katalog.mannheim.de
mailings.konversion.mannheim.de
ccs.mannheim.de
veranstaltungen.mannheim.de
mailings.konversion.mannheim.de
theater.mannheim.de
mailings.konversion.mannheim.de
www5.mannheim.de
um.mannheim.de
formular.mannheim.de
katalog.mannheim.de
www.stadtarchiv.mannheim.de
umfrage.mannheim.de
bs.mannheim.de
bs.mannheim.de
bs.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
umfrage.mannheim.de
ccs.mannheim.de
extern.mannheim.de
svcsg50.mannheim.de
scope.mannheim.de
bs.mannheim.de
mailings.konversion.mannheim.de
katalog.mannheim.de
fuehrerschein.mannheim.de

Certificate

The complete raw certificate details for www.mannheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19922266712628839183282169945718547634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mannheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841093638948784964570326189630691299607663374098136443397480693983610521080626557806252417002567199447104469717297723226292695795169607063216557822397731462040439149046936154401764519367387913975440067839763450898135328188198768133236323756593405079346612148694050852774337380626750881827765616928721433377888038610856725144453852030671488518535745145625247092313372974475687531384100042003237733188191474862717924706410735282614377335090494911481687146023699723093458026615608443746776872521963151213505511832226079670979806751753163056528022957002475959280910111612019933359068900382461905062171519478634792458134232101151581902422802074665568704098859810947625529745102452303566298541695726861325641283881836601780165599799878648640666189783483053596144399998228958257483242067408672195404805544141915436619926673918232175613954998201491622005927968592082300407241974717412746799882339068475970939465195740708989183660002236882598180657597064783950894753060684259570721226423091236805938106021392907887897296771170107732487470106902322340615991703881682056756936144437896447225339018141386294503069895837553353102291462491996372971530958830190333705614042118089193285390726030928745802187222755542926628354808312241114036806568251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							997f6e220f1d1134de1948f81d4de39e34187603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mannheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b55ba7a520000040300463044022029667670324bcf6b77ed3e799d710b6eb422d8845090bcce34723a52ef865f8402205c40b92e978137fc8ed2c36e66e0b01bf3649b10b371bdecf06b78876a9fef930076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b55ba7a9700000403004730450221008bbfdd1d153962026a90e314b7a7b8efd1b8de8acef5bc1598c1b03c5464591302207e0b74b6a8499a652da6276269b5816f8d74020d8e0449eb19defbde4ed22f46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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