wes.karlsruhe.de

Issued by Sectigo RSA Pro Series Secure Server CA

About this certificate

This digital certificate with serial number c5:d6:41:5c:a6:5a:6d:b9:e8:ea:dc:4f:99:9a:aa:3b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wes.karlsruhe.de,OU=Domain Control Validated

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c5:d6:41:5c:a6:5a:6d:b9:e8:ea:dc:4f:99:9a:aa:3b
Serial Number (int): 262970392394453901866938485924477708859
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0e:1b:7d:1c:5a:11:e4:90:98:8f:3a:86:5a:2e:23:ef:26:43:12:69
AuthorityKeyId: 81:c5:ba:1d:b3:02:7d:c1:bf:56:f1:68:0c:e8:07:86:9c:7a:80:c6

Fingerprint (sha1): d8:b8:02:5b:1f:43:1a:f7:10:38:0d:c9:8a:ca:7e:58:30:6f:94:e6
Fingerprint (sha256): 4d:9e:78:ee:c6:ba:a7:f4:0f:5b:f8:e9:9f:0a:9a:b5:3a:72:aa:bf:4e:0f:db:90:03:4e:42:e6:68:4f:09:b1

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAProSeriesSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate wes.karlsruhe.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wes.karlsruhe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wes.karlsruhe.de
www.wes.karlsruhe.de

Other certificates including the domain name karlsruhe.de

(limited to 100 certificates)
m.karlsruhe.de
matrix-seg.karlsruhe.de
www1.karlsruhe.de
*.hhs.karlsruhe.de
presse.karlsruhe.de
matrix-seg.karlsruhe.de
lernfabrik.karlsruhe.de
www.carl-benz-schule.de
*.cbs.karlsruhe.de
moodle.cbs.karlsruhe.de
wettbewerbe.karlsruhe.de
www.carl-benz-schule.de
wes.karlsruhe.de
www.karlsruhe.de
www.karlsruhe.de
wes.karlsruhe.de
www.mgg.karlsruhe.de
owncloud.mgg.karlsruhe.de
ces.karlsruhe.de
*.hms.karlsruhe.de
web1.karlsruhe.de
*.karlsruhe.de
www.staatstheater.karlsruhe.de
www1.karlsruhe.de
dienste.karlsruhe.de
kita.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
mail2.karlsruhe.de
transparenz.karlsruhe.de
otv.karlsruhe.de
*.list.karlsruhe.de
hms.karlsruhe.de
moodle.cbs.karlsruhe.de
moodle.ess.karlsruhe.de
kita.karlsruhe.de
ces.karlsruhe.de
*.ces.karlsruhe.de
*.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
kita.karlsruhe.de
formulare.karlsruhe.de
bekrujzq.web.belwue.de
wes.karlsruhe.de
cloud.mgg.karlsruhe.de
www.karlsruhe.de
huebsch.karlsruhe.de
cloud.mgg.karlsruhe.de
kalender.karlsruhe.de
cloud.staatstheater.karlsruhe.de
groupwise.hhs.karlsruhe.de
*.karlsruhe.de
*.cbs.karlsruhe.de
filr.ces.karlsruhe.de
geodaten.karlsruhe.de
web1.karlsruhe.de
ess.karlsruhe.de
*.staatstheater.karlsruhe.de
lernfabrik.karlsruhe.de
lernfabrik.karlsruhe.de
matrix-seg.karlsruhe.de
opac.karlsruhe.de
wes.karlsruhe.de
otv.karlsruhe.de
cloud.mgg.karlsruhe.de
*.karlsruhe.de
rhin.karlsruhe.de
moodlex.hhs.karlsruhe.de
lernfabrik.karlsruhe.de
otv.karlsruhe.de
www.staatstheater.karlsruhe.de
moodle.hhs.karlsruhe.de
*.karlsruhe.de
web3.karlsruhe.de
wettbewerbe.karlsruhe.de
moodlex.hhs.karlsruhe.de
dienste.karlsruhe.de
*.hhs.karlsruhe.de
opac.karlsruhe.de
formulare.karlsruhe.de
moodle.ess.karlsruhe.de
wes.karlsruhe.de
lernfabrik.karlsruhe.de
as.staatstheater.karlsruhe.de
matrix-seg2.karlsruhe.de
dienste.karlsruhe.de
moodle.cbs.karlsruhe.de
opac.karlsruhe.de
matrix-mdm.karlsruhe.de
outlook.vbk-online.de
*.hms.karlsruhe.de
*.hhs.karlsruhe.de
wes.karlsruhe.de
kalender.karlsruhe.de
*.karlsruhe.de
*.hhs.karlsruhe.de
www.staatstheater.karlsruhe.de
heimstiftung.karlsruhe.de
formulare.karlsruhe.de

Certificate

The complete raw certificate details for wes.karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ajkgkODd5++xf/kpEI
4K3EQKeH9wSHyrXvOmbdYi++YzZzmXfMt+Kz/paAIfaNPYa7b42ZenPsugCTopmu
nAFi9lhxkPqozh60RcSPDZsroSbCq80MYdBomP3HRiBOPIlsw/xke/C4NPJCRz6X
ZSjdhtOSd6rEuTgeWVECC1v6sJQfg6GwqG0y87KpNSkBTK52wNzH7pbaTiT4sipA
sU/kFm7Bmag5Yt85QiOFeSSp8ILZMet8arIKyRDzEcUPbdozllMZbSPy9xCmjYkQ
5224roDt0IC77bftvXP6mjsD+7+rv53Rmz//flwyrn5ChB5nOI8iLVFw9kbJMLpD
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262970392394453901866938485924477708859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Pro Series Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wes.karlsruhe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22150206414300270638151554450732588100833890606621146049171629874362658255388335236476105473250225787606759221818144881455579340392043231020953808002058808400250512587601703018672910559592549758264572521198807495763911497192374066205508392847406963084013575201736459262335191668343385925919402939755716544249619841429651187486867990394900696202448417175787644236915843053469440181760050820707404888605382693205202777573566002968843235268160096374323696954131251151997088828785427077217672704091340398021683118732168096842006781538073476006421275410806998009462439637299016768381401361984125917102505402283328456508373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81c5ba1db3027dc1bf56f1680ce807869c7a80c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e1b7d1c5a11e490988f3a865a2e23ef26431269
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113741.1.2.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAProSeriesSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wes.karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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