m.manager-magazin.de

- manager magazin new media GmbH -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 12:6d:fd:d3:77:73:fe:b5:05:d3:87:4e:ac:c7:24:21 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

manager magazin new media GmbH

Organization: manager magazin new media GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:6d:fd:d3:77:73:fe:b5:05:d3:87:4e:ac:c7:24:21
Serial Number (int): 24497212485449741764533741804184871969
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 47:7d:50:a0:c5:53:3b:57:9a:99:6b:0c:73:63:65:a7:1c:14:ab:bd
Fingerprint (sha256): 4d:10:35:b6:c7:c5:6b:59:d6:01:9b:7d:24:fb:9a:96:f4:83:bd:7f:36:ba:3d:c6:e9:47:f3:b4:c5:62:b3:6b

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate m.manager-magazin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.manager-magazin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for m.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWjjRZL4pRQLW1Ot8RPG
wOA7vep58NhIBwOF7aQmMoVQPLQpvTtE5crFyNNH7zEn9X3HauaB6B9faLCRZsW3
mcokFtL+7pDTtKPHEGHPJDGPmWH1HXwhGT+eHqQLp0XDD9gX4pVg20C9OSP5ze6z
m3epd0RKBBQt+1JTvBUSCtV+dkY05N5NaAhBQmmE+uClUZ3ZzL3Yt0Un2SS5o3Hf
uMywBI3CHvLEpScNVKVfiBuz86b9MEc8tPbiNU9UWYLckK90LcndSkRRGmrudVvg
LpO+iLna38osauaQGPsgQDUSFhU7dhfVNUJahZt7V3AYT7SQAqbDs4znFS2U1icl
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24497212485449741764533741804184871969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'manager magazin new media GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910761730792633493645666750472476657124274592936041031692752739711434249812165506408398945242526157813582967392379414857366401966843124584156473478579423403115385584506653412223628104550203815261959996065420869995140054645049369700627433140916845449727597314125589638850944960170979658745336912024744538693892292082721122584351305719089200976496787805396344349465201373151637652436261893442745873587184095211747365361990348506970279974383960738201906190652861622669412868722287080810603433416733312616480882006974722584999634768015383887916736455712550865760206025469923479566804309874444847831288134175879135176173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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