DV SSL/TLS Certificate for www.jolmes-ingenieure.de

Certificate is witin its validity period

Issued by Starfield Technologies, Inc. (Starfield Secure Certificate Authority - G2)

About the www.jolmes-ingenieure.de DV SSL/TLS Certificate

This certificate with serial number bc:ba:37:1a:b0:92:0b:09 for www.jolmes-ingenieure.de was issued on by Starfield Technologies, Inc..

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.jolmes-ingenieure.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organizational unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): bc:ba:37:1a:b0:92:0b:09
Serial Number (int): 13599242612569672457
Serial Number Length: 64 bits, 8 octets

Subject Key Identifier: 75:68:b1:a0:2a:31:2c:93:65:4a:b0:69:4e:b8:8c:ec:cb:b8:f8:c0
Authority Key Identifier: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (SHA-1): 63:f2:19:5d:09:40:bc:61:09:f4:ba:39:88:6a:a9:73:9c:2d:c9:a3
Fingerprint (SHA-256): 7e:01:19:d4:f8:6e:00:05:7b:8c:f5:04:e3:ea:5b:4f:3d:cf:41:e5:71:cc:14:8d:bd:cf:1e:cd:10:3f:75:59

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation Information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-783.crl

Check the revocation status for certificate www.jolmes-ingenieure.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.jolmes-ingenieure.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.jolmes-ingenieure.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13599242612569672457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-02 23:32:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-01 23:32:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jolmes-ingenieure.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618947499277826791314168386000727626678446319453341720645478519092419688160314211177964600392097998000576177985764704255647885500008398178972883382962066727984683699854890589502615631971004456067238632172819028932718552914867705485405776817746811178399260043057842889872477006421713430253516828989316540846026995084352779066014240888243183876589322080762514166895978571766704647139789126348382277971851778272270303564873215437156786878942537880228938741231685574251911344490297554786991061322508850133008069256898113706356095878875428616826408430372168395595504648856350980719859876091234518676479279611707678244951955015048446702250722689681238955780295915288090802233068416474107262281939673928004263923944711566218431064629732964162019771857651923144891616706832304190651064803881072952986769801159317500978691652724935057578198558629266758197909951981800541804920205129081735444071175165208304856853497669659516297252701721865532083511010934077234152000686483358986365430485985971362807658291724605664815264941566183735917190742232201519608576384247946615072604538961086353906588184964205645159175025420867479936026556781940396510269058685062183649263374590781608152941893563144716829386020586931607844525611264277861446585982541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-783.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jolmes-ingenieure.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jolmes-ingenieure.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7568b1a02a312c93654ab0694eb88ceccbb8f8c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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