www.glashandel-welz.de

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 32:4a:b3:e5:8b:4c:ca:3e was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.glashandel-welz.de,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:4a:b3:e5:8b:4c:ca:3e
Serial Number (int): 3623906648638933566
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 3f:b8:60:58:2f:be:46:58:ee:e5:17:7d:4c:47:81:9c:4b:f0:c5:23
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 17:dc:0d:c6:c5:f2:1c:1f:19:58:92:47:f9:f7:fc:5e:81:85:20:c4
Fingerprint (sha256): 4e:67:ca:ab:50:0f:37:b0:c6:48:df:7d:0e:99:01:89:7d:22:af:e9:c0:da:d5:30:b6:9d:02:e3:30:8f:ba:03

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl

Check the revocation status for certificate www.glashandel-welz.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.glashandel-welz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.glashandel-welz.de
glashandel-welz.de

Other certificates including the domain name glashandel-welz.de

(limited to 100 certificates)
glashandel-welz.de
glashandel-welz.de
www.glashandel-welz.de
glashandel-welz.de

Certificate

The complete raw certificate details for www.glashandel-welz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3623906648638933566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 13:35:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 13:35:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.glashandel-welz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872671167555801642639421879330164835351332222573345571465297341359421654320676416612809648476624668714355013204378683371919026031648580524799156860913665212783310065051391830370138994002915746121036608109328259776725976956518727938944137485877163060636808045061121727021762284510703377992200017020181081046899658785617402350998011907320130957703850209489696052665367904854175557260871640459549098704823132409776380742886894880204179015527383198471904886461813554761444065259220691614340750187794946318841087021710648003878588427331150912853133725218305516874919634414153168724714055457289129333594234941461949850475879343889012129071941468310793236609810739730736811069940650399617569755504712462118847904079085092024714069652990706636878630422783424748143857424989405739885901336335065811885157585989337470940814017235382844094502308867286794906170567925986224690734542670592844789291564361751620914376453712250139391624630865836707298088764735052358074806362040662539499516295846097198655152264130241969526576059789919867029132544418154492470849773120067884193466546838072943512626524208400514962578542788300949469043832433679888922290408091059450532671399867401607266346140011796284919094515857007259416263965410608487820855059017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glashandel-welz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glashandel-welz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fb860582fbe4658eee5177d4c47819c4bf0c523
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bb2e57bb80000040300473045022100bc4295b860f91f78d15e8e0de259fb40425bb29898ac12c4dd929fba1515ef9b02202d0d47aaf7f25fabed9ed35c61f0e885b8a032b45f9084269a6385e87b11b6510075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016bb2e581f20000040300463044022011c6b1ffd6fadaad2c093b22c6405da5e4a3a781673e3559f2f7a1f2a7606c8d02205cbfe45e9e444e3c10601e7b540b7950192608de73472643d7268cc4f720ceca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065b2daa82209b01b20a65d26e9ce6ae4c7acafa3e376dd3f29790684f9e46962efe801e5e53795282308fcd4b3db4861867d156addd1559691a0007bdc9c386cb939a6c4d682df8aa731f15bf012a00dff68afde0657633f5072756e7f3f3598f5b63e2b0d03b288b41542696d9a06218e0c5ec5ce84cf8dfb038eca20413dfa416d380cbf626197a4a094da5ec01394e69916a708f63d028e8fe6993f43137ffeed0b5e7884118416a897ff2348c880713446b15487016534c63f8c79201f4a7a253e8c627d2c2bd9cf207d1fd8bf07ca5609f14c783ced443f63fa9acba5d63e08f9fb3b846110c22479b6efef3cfd812ba848db67669d45294ffe9418fd53