*.zwopunkt0.de

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:4f:8d:69:8c:cf:aa:22:7d:5b:af:5f:cf:d2:09:19 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.zwopunkt0.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:4f:8d:69:8c:cf:aa:22:7d:5b:af:5f:cf:d2:09:19
Serial Number (int): 15034567587748457326053941267747965209
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:23:ac:ad:84:a0:bb:ce:bb:0f:0e:b9:8f:21:60:92:38:39:a7:43
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 4b:92:0b:75:74:c3:b6:5a:6a:3c:57:05:5c:35:73:ca:5d:b7:c7:e6
Fingerprint (sha256): 50:8c:14:fc:20:71:93:f0:a6:22:23:16:2c:a7:ba:c8:06:7a:75:e9:43:13:21:9f:f9:f5:bd:aa:7c:ce:64:91

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.zwopunkt0.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zwopunkt0.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zwopunkt0.de
zwopunkt0.de

Other certificates including the domain name zwopunkt0.de

(limited to 100 certificates)
*.zwopunkt0.de
zwopunkt0.de
*.zwopunkt0.de
zwopunkt0.de
*.zwopunkt0.de
*.zwopunkt0.de

Certificate

The complete raw certificate details for *.zwopunkt0.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJzCCBg+gAwIBAgIQC0+NaYzPqiJ9W69fz9IJGTANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTIzMDUxNDAwMDAwMFoXDTI0MDYxMzIzNTk1OVowGTEXMBUGA1UEAwwOKi56
d29wdW5rdDAuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDSLotB
jI15ZNxYHcu1oosu5JFf1e0T/nUzJ6TZa1GGFLjngCXf14AH4Yxu3Koz8nYxr6oZ
gOUpQrEKp/fgQuZcZbG3fpBYcDem8Ovrh5jeZtntX0OXjOAVo9jVezFsJ3b+7UBP
LVcv1/9nd5YUvgFsEVorsHncveFw54vwhdwSNnqOucXkpQg7QVenjNuB4BgKoVl+
OyKg8vH0OFuiisIsHTopcxTfa332mzGB6fTBOkTL7uT7cro/kDksEaFBHNi1lEuo
lp5Zt4AclnzKYAgDYoaXeL/CMt/8s7Y9iB53ZyK0Ef6nZBITxx1w0pB2AFFU9qJU
puHdf2EEUTxdIOPe2/TuSPuEVpBUj62QFqGNS18EOzqoKbc2dvc6aVBkcwjh64Ac
s3uT0sP5dhGJcmb6icU4QA9WwWYUKUafylbLlAaziRQfyD/XAvhYBLsB8Y7Cw9Ds
VwYRMhgL4ZJzzbBxfjGEcMi1jiSWPnJAfdWzZxfkEVHbH7fh6uF/R3DWd6Xmpvec
2SCbGnE26MznqAPHfFG5OSWNqAlbPWGqD5ouPRBv5i7D6G4QXYGebeDnB64enVwn
tX/hvl9goMAe/rOpL0VkzrC8xoySBwBqQauMTyMX7W2Lvg3L44lsKae5xYQXv7uc
Rk36gPGux3hVsYqU8upWtr2Vh8R9NmljsOt/fQIDAQABo4IDIjCCAx4wHwYDVR0j
BBgwFoAUDNtsgkkPSmcKuBTuesRIUojrVjgwHQYDVR0OBBYEFPsjrK2EoLvOuw8O
uY8hYJI4OadDMCcGA1UdEQQgMB6CDiouendvcHVua3QwLmRlggx6d29wdW5rdDAu
ZGUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBp
ZFNTTFRMU1JTQUNBRzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRq
MGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD4GCCsG
AQUFBzAChjJodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNS
U0FDQUcxLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgA
dgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYgZvoAuAAAEAwBH
MEUCIDWT0maWIYO2sXBVsWh8zr3XpbGAsx+6h9HvWyMyjxnDAiEA15qwhWcPDCCI
qt0lzL31uTUwOaKXAZnHPqwp0o7gfcMAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bd
LIHZu7+rOdiEcwAAAYgZvoAtAAAEAwBIMEYCIQCpjM1TpKDcjRmlTaKPx5CPzYAS
eFe9m3I58aZbUg2TPQIhAO1w+J+/0WpCJeYYscJK9YhlsNg/6Ddl1WeJ5dX0BdMp
AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGIGb5/1wAABAMA
RjBEAiA6giPemNUqtpzm39ETg8ugzyTlNcE2CBAw4S3TyVSU0QIgakcChYqTQXZE
KpHgCANjGdZt3B1Dm7xHRV4bdnJ7OQ8wDQYJKoZIhvcNAQELBQADggEBAKo0wjrl
RAgQnQbejdYbg0ZJQucDr5rYwPE8XYycrZ7KHJDFTfs14T/dHkhJTKkH68Q5f9Hs
Fa24drShE91NYTYjLUMPtgjiZUNmnY5zV++SjeotVH681rnr/Ad37p/HZNViHUwF
pJNlr1rSlDbjHLeLqunscYJEHsGLdeyvN/7ophGPtL206lpPxoxQPKxoKmojf0q4
WXcVsTP8a/14NgRAkC33EiSpXleRVldosa9q7N39q+OV2xL07P63n3tr57pjpqzc
B6wPpY8sS+CJXcrzv1Bzu7UaS59e6euhV5GTmjsgaPEnSJ+JFPE4xu8DEAAu4/Lm
G6kMsmv0pSRnnCU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15034567587748457326053941267747965209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zwopunkt0.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857466984076509504012218845231567365828928023984504049952941008807947269428827162019278482003707565439602071715131425510009043459697935029788717330501648427733982409922829339588807630672965190163395279008920513515204161862072806010433611483307574793437099109582106174395834053482701327431639632544241741883163274943120464970317656653545792271532613238826990621253883622499539739578267988642591849937957796774580345611870896017900052573893944031699788887886427151977296738253900617459616463805362749305954314670574380810434443623079626046411710946689936558253841692422250999836269919331892016341453534667693419479884768191320104232856004202603121879099810142816736801268273637479008144731725229087975566340697307507617134508141265354913847631401219712491961444835345710591170995626365583463144611429143271499111368675526685399353033398791743846084406308016877948363735516093195347102217843758818082977093614746565635598120603884311939361280701080087863372232579574262125672536754462570788077190703365916681752550793411280751912302247066967648421354548857885138339097239047776542142794627699219125280473248054268125691271459576395447027330606045691553938695348941677220497888776037946172795099675889310408935798173640767904248993906557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb23acad84a0bbcebb0f0eb98f2160923839a743
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwopunkt0.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwopunkt0.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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