STIFTUNG PREUSSISCHER KULTURBESITZ - CA

Issued by DFN-Verein PCA Global - G01

About this certificate


This digital certificate with serial number 0c:e0:74:8f was issued on by DFN-Verein .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • ERROR: Certificate has key usage [CertSign] set
  • ERROR: Certificate has key usage [CRLSign] set

STIFTUNG PREUSSISCHER KULTURBESITZ

Organization: STIFTUNG PREUSSISCHER KULTURBESITZ
State / Province: Berlin
Locality: Berlin
Country: DE

DFN-Verein

Organization: DFN-Verein
Organization unit: DFN-PKI
State / Province: Berlin
Locality: Berlin
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:e0:74:8f
Serial Number (int): 216036495
Serial Number lenght: 28 bits, 4 octets

SubjectKeyId: e7:a7:c8:65:27:05:bf:0a:63:48:44:19:47:d9:ca:b8:e0:e5:50:29
AuthorityKeyId: 49:b7:c6:cf:e8:3d:1f:7f:ea:44:7b:13:29:f7:f1:0a:70:3e:de:64

Fingerprint (sha1): 11:1c:0d:e8:eb:4e:c1:b6:84:c3:c2:06:af:2a:71:43:09:3d:39:b0
Fingerprint (sha256): c8:89:51:8f:b1:d3:98:cb:84:a9:a8:63:02:72:e9:ec:a0:fb:07:0e:1a:79:6c:8f:bb:e9:03:9d:c5:ab:97:68

Issuing Certificate URL: http://cdp1.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl

Check the revocation status for the current certificate on STIFTUNG PREUSSISCHER KULTURBESITZ - CA
0
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Cert Sign
CRL Sign

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions



CA Certificate

This is a CA certificate
Maximum Path Lenght:

1

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name). [email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIEDOB0jzANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJE RTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEkMCIGA1UE AxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4XDTA4MDkwNTA5MDgxNVoX DTE5MDYzMDAwMDAwMFowgbIxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4x DzANBgNVBAcTBkJlcmxpbjErMCkGA1UEChMiU1RJRlRVTkcgUFJFVVNTSVNDSEVS IEtVTFRVUkJFU0lUWjEwMC4GA1UEAxMnU1RJRlRVTkcgUFJFVVNTSVNDSEVSIEtV TFRVUkJFU0lUWiAtIENBMSIwIAYJKoZIhvcNAQkBFhNjYUBodi5zcGstYmVybGlu LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU5qB2kP2vlTFakj e28/dAZH4rHiSAOevDzbpF+rtJBE/zl2DykpBiN0YfsEQraTJfWR7irlKRSK42ej Md4CCw4dkDB47YcRdnsHT0Le028OsXTmgpsJ3Ky2kAp+APDZ33vZOybOTnPXPHoq KDMzJxzdyo7hiSZD+61pC+CkeXTS3NuZhSTJD5c7DcwnPVeLTEER4IdLsRTJgibQ Zp+t+TgGFOprbBbRI1uARo8ghvCAgutO+bXnbS9+AgZibmZW4zNQ/YApa66HmeYK y2YsQQwoFvuL0CZoP8BuOFWsRE0nca84iq+99b6ysvxi+SUYvJYwzurk+SNWtKoV 4ynJFQIDAQABo4IBtTCCAbEwEgYDVR0TAQH/BAgwBgEB/wIBATALBgNVHQ8EBAMC AQYwHQYDVR0OBBYEFOenyGUnBb8KY0hEGUfZyrjg5VApMB8GA1UdIwQYMBaAFEm3 xs/oPR9/6kR7Eyn38QpwPt5kMB4GA1UdEQQXMBWBE2NhQGh2LnNway1iZXJsaW4u ZGUwgYgGA1UdHwSBgDB+MD2gO6A5hjdodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2ds b2JhbC1yb290LWNhL3B1Yi9jcmwvY2FjcmwuY3JsMD2gO6A5hjdodHRwOi8vY2Rw Mi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIGi BggrBgEFBQcBAQSBlTCBkjBHBggrBgEFBQcwAoY7aHR0cDovL2NkcDEucGNhLmRm bi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwRwYIKwYB BQUHMAKGO2h0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtY2EvcHVi L2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQA2vEXsDe6kvfFY m1cO6VHhKQ+unX6fjd8tWX9PM6YaiN/Gppy5dKV6ladgU4VUAmGJvCajsaElyUGq en/UQNYui1+XLAMdLa+3rf7n6RutrOilnwLLEYmzYddafzad4yykAYuP7HtxoqTi ALcPkQkqo4B3+9tifhxRKvwhUoksBnzq9G1PlFrpyDbF1r1QcwibP00/SC+WgsxE gkK4gHG5A9z6pyhByS43vSx9KYoaTHZ/99OlAHV0xv3RU8sC88a1zhpY8l1oT0Sx I8UoG0B6oKIwVHF5c+fOwE0/zjqBZCAKJev1ndw1LQyEiWoWMUW0Un/DCjRy8Ohc hf0Y7SLb -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU5qB2kP2vlTFakje28/ dAZH4rHiSAOevDzbpF+rtJBE/zl2DykpBiN0YfsEQraTJfWR7irlKRSK42ejMd4C Cw4dkDB47YcRdnsHT0Le028OsXTmgpsJ3Ky2kAp+APDZ33vZOybOTnPXPHoqKDMz Jxzdyo7hiSZD+61pC+CkeXTS3NuZhSTJD5c7DcwnPVeLTEER4IdLsRTJgibQZp+t +TgGFOprbBbRI1uARo8ghvCAgutO+bXnbS9+AgZibmZW4zNQ/YApa66HmeYKy2Ys QQwoFvuL0CZoP8BuOFWsRE0nca84iq+99b6ysvxi+SUYvJYwzurk+SNWtKoV4ynJ FQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 216036495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-Verein' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-Verein PCA Global - G01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-09-05 09:08:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STIFTUNG PREUSSISCHER KULTURBESITZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STIFTUNG PREUSSISCHER KULTURBESITZ - CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20363034570667216127053862108665684177719606807178155338239939152590084103310039212187011549509695405964714538791271027656490356984097098297242473348412843950466606188016334492838426756332248181331703038735843680427103169329229902574222906243086423858571652303223959177304041033223575715517222124019807598491029883689454751335691957471389554837870264031421392610605167662679427057576370421431564315902813285567915254585284335681036456449211666839616088412008319548769922349479054494271710479980016709353693966927236574569641832417305728823833920108342884147397815574496132604092720688466822770949576833059017668020501 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (7 bits) 0106 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e7a7c8652705bf0a6348441947d9cab8e0e55029 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49b7c6cfe83d1f7fea447b1329f7f10a703ede64 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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