*.sheego.de

- sheego GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:5c:31:b0:4e:9c:74:ed:0d:67:29:83:55:e7:28:cc was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

sheego GmbH

Organization: sheego GmbH
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5c:31:b0:4e:9c:74:ed:0d:67:29:83:55:e7:28:cc
Serial Number (int): 4466383104896108564191358871126091980
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6b:55:b8:f0:a1:06:5b:96:cf:a7:b5:1e:65:a7:aa:a9:9b:ac:81:d2
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): e0:22:a9:1c:3e:dd:20:2c:bc:b3:06:7b:d0:e2:af:bd:e8:28:de:3b
Fingerprint (sha256): 47:9b:5c:10:1e:7f:8f:df:74:52:dd:2e:27:00:cf:6b:89:63:e5:7d:cd:a4:ff:e9:c2:51:d8:43:8c:c0:ea:79

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.sheego.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sheego.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sheego.de
sheego.de

Other certificates including the domain name sheego.de

(limited to 100 certificates)
news2.sheego.de
company.sheego.de
www.sheego.de
*.oghub.io
sohiuc.sheego.de
blog-staging.sheego.de
js.oghub.io
*.oghub.io
news2.sheego.de
*.oghub.io
web.sheego.de
news2.sheego.de
cloud.sheego.de
asmreports.sheego.de
company.sheego.de
js.oghub.io
*.oghub.io
news2.sheego.de
sohiuc.sheego.de
company.sheego.de
cloud.sheego.de
cloud.sheego.de
sv.sheego.de
news2.sheego.de
www.sheego.de
m.sheego.de
*.oghub.io
js.oghub.io
news2.sheego.de
sv.sheego.de
news2.sheego.de
news2.sheego.de
www.sheego.de
sohiuc.sheego.de
web.sheego.de
*.oghub.io
cloud.sheego.de
company.sheego.de
news2.sheego.de
company.sheego.de
news2.sheego.de
sv.sheego.de
happyland.api.sheego.de
*.oghub.io
company.sheego.de
news2.sheego.de
news2.sheego.de
company.sheego.de
js.oghub.io
*.oghub.io
cloud.sheego.de
cloud.sheego.de
*.sheego.de
news2.sheego.de
sohiuc.sheego.de
*.oghub.io
cloud.sheego.de
*.oghub.io
company.sheego.de
web.sheego.de
js.oghub.io
js.oghub.io
*.sheego.de
*.sheego.de
news2.sheego.de
sohiuc.sheego.de
media.sheego.de
www.sheego.de
js.oghub.io
news2.sheego.de
media.sheego.de
news2.sheego.de
www.sheego.de
news2.sheego.de
sohiuc.sheego.de
js.oghub.io
news2.sheego.de
cloud.sheego.de
sohiuc.sheego.de
cloud.sheego.de
www.sheego.de
js.oghub.io
*.oghub.io
web.sheego.de
news2.sheego.de
asmreports.sheego.de
secure4.scene7.com
js.oghub.io
news2.sheego.de
news2.sheego.de
js.oghub.io
*.oghub.io
m.sheego.de
company.sheego.de
news2.sheego.de
mail.schwab.de
news2.sheego.de
news2.sheego.de
company.sheego.de
*.sheego.de

Certificate

The complete raw certificate details for *.sheego.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGoG8mk+G80uKK7SzWA3
qWbLJs9ogj8n/hPLbOyXb4Bu47JqDSQXXWXOYEdN8WQvG27hpk3gvFfz1G6MbjnP
ha+O+fDU0wVCVNR6k/lVDkUUDvRQFhKB49WdLFiAzoGfvx6eeIlF8GDEqrbn3USq
BdclC4Ea+tAjpdOh7wqpo/+FtCnbFhRXsyLKOzPIpC7dQSi0J2Ea5a5Y3D1mjW6E
e7g0mjaS1H0qwxlWYZXQNlRFUKRM0+xD6qwddnXBzNaL/97hl34w2dbK1oqPWvB/
ePuvW4P7LoHDle+FBxx3/GEBP1sPta2C+SDpSQZ0EcVZ4IXL0F6f09UoGJlxigaQ
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4466383104896108564191358871126091980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sheego GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sheego.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24794991702955023849500986995082253916129643459556691859924726761410094747453336980751506659223721159210987056139072490483356677625780433549232121387624809739052423797700065119313595732480748468085306324286408513392039033455305292928372134549296576290807462281901864479538086673464009354548983111915065294893044598809573030660157052234822303737797599552030212893634952434475177367136832590202786380594939577027128810305613277202912097835814610364327104568422639413116567032065764343026698425111477751189346314753364645170119241565378890331345377806542381575577221286909864066800215382187337620857182394215781670228177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b55b8f0a1065b96cfa7b51e65a7aaa99bac81d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheego.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheego.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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