ssl3.fioport.de

Issued by thawte DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 12:c2:01:a3:13:1e:18:d9:a2:7a:37:a9:01:7b:7d:71 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ssl3.fioport.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:c2:01:a3:13:1e:18:d9:a2:7a:37:a9:01:7b:7d:71
Serial Number (int): 24933442717200936061601674495616843121
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a

Fingerprint (sha1): dd:48:b5:eb:89:94:c5:86:bd:57:6c:70:bd:f7:5f:73:c5:0c:54:4a
Fingerprint (sha256): 4c:23:ca:42:a4:e7:f1:77:5a:fd:fe:9c:1d:25:42:ef:f8:3f:d9:b0:3b:59:ae:5e:7e:9b:ba:d7:b1:58:8d:17

Issuing Certificate URL: http://tm.symcb.com/tm.crt

Revocation information

OCSP Server: http://tm.symcd.com
CRL Distribution Point: http://tm.symcb.com/tm.crl

Check the revocation status for certificate ssl3.fioport.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl3.fioport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl3.fioport.de

Other certificates including the domain name fioport.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ssl3.fioport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24933442717200936061601674495616843121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl3.fioport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715335393682445734946083916635260425313973492492397016440256178584740613388602117024005396759624065017636750149702777095270469940949742708152579660333576196333474828719159501315953487075272900666229154317110181499920364631254825563084800150653619913575819537991084984418987014015158724515208922737465477478947428915089348771269322794877220542224340243186028647117557966041011926757245694011303948231197623272754692002471552007727712192705607481837855337472127642083060714097478794195632557654233384819030049509524205587671124993321328167488258662741208433204677836691717984691767142208064095558789244900707179832584824961125208927850738600905435813923501880886747583921053227566056969762171178121023273918630500873267371676876062198283913793598622870696545661853469109502563267774137250366770879526626131327381839623064449371575491420257495589242220111797693843188451419159335249930178395609182350326311038719225115990144316919010401905692615990529939089167547318731454094350062748058860251049509152625906348008901743803404527260496644493607236352777898417163340347694900222649867806935974924869160985741848184441194709542979497589130342534264009394759546608638565192927820599389406259759758149408913820661776685560084181165904863037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl3.fioport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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