*.aviationpower.de

- AviationPower GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 64:1c:fb:b3:c5:df:3a:65:fd:1a:15:bb was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AviationPower GmbH

Organization: AviationPower GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 64:1c:fb:b3:c5:df:3a:65:fd:1a:15:bb
Serial Number (int): 30983539535296285119318988219
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 39:da:c0:1d:23:c2:3b:e3:18:f7:a3:74:c2:a0:97:47:a3:e4:79:e2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e6:e6:b9:55:31:88:16:a5:a3:04:33:7e:46:ec:74:4b:a5:a8:d8:f0
Fingerprint (sha256): 4e:e8:59:0c:a2:fe:8e:40:65:a9:a3:59:a0:83:97:1f:3a:ab:3e:5f:34:58:4e:ff:09:c1:42:5d:91:1b:e0:6c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.aviationpower.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aviationpower.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aviationpower.de
aviationpower.de

Other certificates including the domain name aviationpower.de

(limited to 100 certificates)
www.aviationpower.de
aviationpower.de
aviationpower.de
*.aviationpower.de
*.aviationpower.de
hr.aviationpower.de
aviationpower.de
*.aviationpower.de
*.aviationpower.de
www.aviationpower.de
aviationpower.de
extranet.aviationpower.de
aviationpower.de
aviationpower.de
hr.aviationpower.de
aviationpower.de
*.aviationpower.de
*.aviationpower.de
hr.aviationpower.de
www.aviationpower.de

Certificate

The complete raw certificate details for *.aviationpower.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvkKgIc6d8RZLeyObe7/
/EqasXrBONZt6mlwYhfLq81prhCw53OA9YX7xOz+Pz99v24BjUeA38VTU8giKQyN
97jEyg+syKKQsAhtAy6D61DiJ22ZDq4RHZnbvZ6B5VIMY+X6tt/xI/OY5n3v2KWk
fqlXMz87dLw9Aq5ACptkIbd9B6ZVMIAtwyLf9EzulOiBv6t0E037pqM5IHbWKdze
L7iaNVuVz4hFMIrEK74q7rcCqtrnYgMDguwQlPVC1BXpSbepsKtm29xn5ggdNWWd
N6dxN8BoEA29FvIN9+Bys+AMKysbNAVMJ6OcN4eVPQSkOof/DVxgTCL+MWOqvO5h
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30983539535296285119318988219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 09:48:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-19 14:29:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AviationPower GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aviationpower.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22593224989806234664281380047189546766491913439485044228355331298017200366642063029233182095874125163817093528181525673678552718962544158076482327859902418850250728058640805655606561914601889347901369321094332280860291893262166045129811413916233864625500677630224151099104344024410308661826103198812214180356948139809060882649633482743238224929690703582285897114457192429617692848901248497742005633627082686535088648541920422797117960300916333978745328131435852913164883476943730973579628836713444996710305409433217718278770018523962672285400957151079287130501440207669789641872099047888294383158772861077842222277027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviationpower.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviationpower.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39dac01d23c23be318f7a374c2a09747a3e479e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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