bis-vpnmuc.bilfinger.com

Issued by Trusted Secure Certificate Authority DV

About this certificate

This digital certificate with serial number 5c:01:13:83:80:27:66:0c:92:75:de:a7:39:42:fb:13 was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bis-vpnmuc.bilfinger.com,OU=Domain Control Validated+OU=COMODO SSL

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:01:13:83:80:27:66:0c:92:75:de:a7:39:42:fb:13
Serial Number (int): 122294563693404265162537966828679002899
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 56:90:17:b6:f9:5a:ce:8d:dd:1e:c7:b3:e3:95:51:77:c1:65:dd:37
AuthorityKeyId: 04:59:49:2a:41:5b:9e:0b:23:3a:ee:e7:76:72:59:ac:3c:4c:5a:33

Fingerprint (sha1): 62:04:a0:80:df:5a:dc:fd:e2:cf:1d:cf:fb:2f:b8:ba:cd:c2:a1:c2
Fingerprint (sha256): 51:8b:98:48:0a:0c:48:70:54:31:be:cc:b2:bd:71:23:71:f4:db:db:cc:2f:d5:40:32:c9:ed:db:2e:83:36:41

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl

Check the revocation status for certificate bis-vpnmuc.bilfinger.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bis-vpnmuc.bilfinger.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bis-vpnmuc.bilfinger.com
www.bis-vpnmuc.bilfinger.com

Other certificates including the domain name bilfinger.com

(limited to 100 certificates)
www.cusa-is.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com

Certificate

The complete raw certificate details for bis-vpnmuc.bilfinger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122294563693404265162537966828679002899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority DV'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bis-vpnmuc.bilfinger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 633920237252308277520039325647545779796247836045334863294060281053064073612503005288900382172275286086090252191435373031471873769360655805318403920472139657619063867554138668030621841834703015324752649163632225118132602229249910998296737242357180055742609059020473124618249671325019446388517170869366732239076748770206879044393709057236592835430433134996925827868639129215587146536047416744033134648835035364490671680041507347233463275440535436192828458889587194778184242542077160095068855396068840402114554277912259606377845105719264007223997411028528034154954826043151236322995900281159539747326834031596395803949248845460454865617751467054278380565534503406077116503427128147816752275104904304304052041946186319264381669276995716742251702590627094916608354119608442010547396375024473863069660838469327717884427662586862783034431464545385878765766166220610550154393021941456400330764293917701938939952660678547413413867251221730062152275370320406345262956132079148210591705378199941958903693716841626521577626467958272879883144091421053686603777148524896826095785052841651426480338364224075186594812573060371205786086345986853108275681255688491454268598212413088771599974617627659874796403536468251669909010493996410249970203569321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0459492a415b9e0b233aeee7767259ac3c4c5a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							569017b6f95ace8ddd1ec7b3e3955177c165dd37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis-vpnmuc.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis-vpnmuc.bilfinger.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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