mobile.grafgermany.eu

Issued by thawte DV SSL CA - G2

About this certificate

This digital certificate with serial number 62:a4:32:c9:78:a4:87:12:77:1c:74:01:da:7c:ae:19 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mobile.grafgermany.eu

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:a4:32:c9:78:a4:87:12:77:1c:74:01:da:7c:ae:19
Serial Number (int): 131116910354399418099382797672036216345
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): 7d:1a:46:e4:b7:ab:7c:59:9f:cf:09:50:83:02:f4:43:59:13:02:f9
Fingerprint (sha256): 51:ae:b9:d5:80:d1:62:5b:c2:c1:7e:e5:49:bb:8d:b3:f2:c1:25:57:70:fc:9a:47:03:a0:7c:01:f1:be:f5:c9

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for certificate mobile.grafgermany.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobile.grafgermany.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobile.grafgermany.eu

Other certificates including the domain name grafgermany.eu

(limited to 100 certificates)
mobile.grafgermany.eu
mobile.grafgermany.eu
graf-ag.de
graf-ag.de
graf-ag.de
cryptshare.grafgermany.eu
graf-ag.de
mobile.grafgermany.eu
xphone.grafgermany.eu
core01.grafgermany.eu
cryptshare.grafgermany.eu
xphone.grafgermany.eu
graf-ag.de
graf-ag.de
www.cryptshare.grafgermany.eu
cryptshare.grafgermany.eu
cryptshare.grafgermany.eu
xphone.grafgermany.eu
xphone.grafgermany.eu
mobile.grafgermany.eu
graf-ag.de
mobile.grafgermany.eu
mobile.grafgermany.eu
graf-ag.de
graf-ag.de
cryptshare.grafgermany.eu

Certificate

The complete raw certificate details for mobile.grafgermany.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJmGTwMFbqSJTofDbzvg
8bxu36FgmXrMmdwVz3koDgYkDk2sI0Wrq6yt4ILIZpfzJESyhBXqS9fDQeyjmqnk
oZK5nthfKe7luwbSRaauLs7K7k+7fByPaVQnV0bMkLhD9VXbcqMbA1WbX07ce8ZP
9RXKMo9n9EAykCsXwXAmzG340Yl5PEsdXQHTFRCql9uwEqRMf73QF9/FEp9qmKc2
q1v45ZD4AG+Jiz/DOkdix9uqgVblnhWBU6bsGvM1P5BecAR+GcMpGE//fyv7l1nh
RGo46F4OgpOhQs7BBxXYUJkg/1MN2gUaRHxitAmPnVGd9p2nrpBEbMrQATDL3DSW
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131116910354399418099382797672036216345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mobile.grafgermany.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22293647497145634597898776996943898986306793521042547425770588556458546835990755288713977434528568366649157985478580892040413090251840960706083991883390382327228284900117323699331049830918438231794085938160215243285897850144722695546244886288265320743522928781172098622384052093840915015571043086029951566679746662365563263104003569995812058930025665166640174525471250610825081870309975988275049085233484347093464471566059316215639637643450523322751223018931729943888969590865905049462408544013023713821539159572965930902114236139846479798453144368926340113130048485348312462671130579777166419410985083700318590768849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.grafgermany.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b8fe830650000040300473045022100e166f891977e7d63845985b503f9c8af7efcccd9fba401013b01402663ea0927022053c87faf35a132d662a1c2c1e3417a20b07da725402cc2c2b1316f3a31958281007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b8fe8309e000004030046304402202ec4bb207ccf10f7da28b9a126f930ea072133219adaa83f93708ffcc27cd08a022041386e0818a5797faabe11ebd0011085a29b3459ca28608a66ec6ef6ab254b25007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b8fe832610000040300483046022100e283dd1ae0b2be9b37c81e1e90a2c53f174896883fcbe959b076c6e009011a56022100d0cc0a41fa7b27798bedef085f21e4343589d2131a712028b5262fc36f2914d7007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015b8fe8315b00000403004630440220349cbc69116eb7cf636468760c19eec0ad032070ffb5148740e0be3e0f0912770220071b7a26e93436996b94ee6f56d7196549837d4098afc039da4d45fca9a03f76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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