www.wangerland.de

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0b:70:5f:e0:a8:e1:ab:ca:5d:94:11:7b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wangerland.de,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:70:5f:e0:a8:e1:ab:ca:5d:94:11:7b
Serial Number (int): 3540187568887375904548065659
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 3f:ea:23:6f:d6:bf:2a:b2:45:dd:d8:07:8d:1e:e8:08:74:03:00:cc
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): b9:df:9e:d1:b8:8c:67:30:66:02:bb:49:32:a0:6a:69:44:0e:33:ee
Fingerprint (sha256): 53:ad:e9:a6:60:a8:40:b4:de:c5:51:c2:b3:a9:0b:a6:a4:1a:ef:de:4d:f7:4f:fb:bb:4d:58:d8:28:a2:e9:9a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.wangerland.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wangerland.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wangerland.de
wangerland.de

Other certificates including the domain name wangerland.de

(limited to 100 certificates)
luvundlue.wangerland.de
www.luvundlue.wangerland.de
www.luvundlue.wangerland.de
www.luvundlue.wangerland.de
pm.wangerland.de
luvundlue.wangerland.de
pages.et4.de
luvundlue.wangerland.de
pages.westeurope.cloudapp.azure.com
pages.et4.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
intranet.wangerland.de
pages.et4.de
pages.et4.de
pages.et4.de
exchange.wangerland.de
www.luvundlue.wangerland.de
wangerland.de
wangerland.de
luvundlue.wangerland.de
pages.et4.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
pages.westeurope.cloudapp.azure.com
www.luvundlue.wangerland.de
www.wangerland.de
pages.et4.de
wangerland.de
pages.et4.de
luvundlue.wangerland.de
pages.et4.de
www.luvundlue.wangerland.de
wangerland.de
partner.sikur.com
www.wangerland.de
luvundlue.wangerland.de
pages.westeurope.cloudapp.azure.com
www.luvundlue.wangerland.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
luvundlue.wangerland.de
luvundlue.wangerland.de
luvundlue.wangerland.de
pages.et4.de
www.luvundlue.wangerland.de
www.luvundlue.wangerland.de
wangerland.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
pages.et4.de
wangerland.de
luvundlue.wangerland.de
luvundlue.wangerland.de
pages.westeurope.cloudapp.azure.com
pages.et4.de
pages.et4.de
pages.et4.de
pm.wangerland.de
pages.et4.de
connect.sae.edu.rs
pages.et4.de
pages.et4.de
exchange.wangerland.de
pages.et4.de
pages.et4.de
pages.et4.de
pages.westeurope.cloudapp.azure.com
pages.et4.de
wangerland.de
pages.et4.de
exchange.wangerland.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
pages.et4.de
www.luvundlue.wangerland.de
nordsee.wangerland.de
wangerland.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
luvundlue.wangerland.de
wangerland.de
wangerland.de
luvundlue.wangerland.de
exchange.wangerland.de
www.luvundlue.wangerland.de
luvundlue.wangerland.de
pages.et4.de
luvundlue.wangerland.de
www.luvundlue.wangerland.de
pages.et4.de
pages.et4.de
pages.et4.de
pages.et4.de
pages.et4.de
nordsee.wangerland.de
pages.et4.de
luvundlue.wangerland.de
pages.et4.de
pages.et4.de

Certificate

The complete raw certificate details for www.wangerland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zph54QqIKF81KYA6xkJ
lRqZ2XDNIDmXo6HWihiMaDNVUNmBb51fGPEeeU56nsu9M6yOAOSaB7QBNPC8ANcr
S/1j+qUjUQOKYTTTqRPY1TFLW4m22UfBBe8qtmxccd0pv9BC9jsVFsNF7Vwk5cxn
dIz8Xt+kWSM0UQVrrHplINQBo7LwMu3KvuRpN+32H+aXgzsUNvE0GUB4IRBVh63A
B3e5n2rS3sm0LQN0apRsEwsVvmXX58FS+CkLvSNUxyuuX5oBaDRXCpDWwyJqbFN9
twE88xsRWZ2zXTmLvcBDPm1VGSmEQaoSubtLcYtajVRXjtYU9T5d3S4X1ia90Jsj
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3540187568887375904548065659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-28 11:23:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 11:23:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wangerland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27170025021325717653724151489490837333006899805061092276023013558349760873574973770027165386701081487724838271481458687109995074166426931949952956798089923706895593393370162118282095444941342714345856161574078838461589780112886455462963404485849142052890081286354615567780213251660428467911554963338287345741833448938213323821248130732110911910657894223602953463143798498968937215317979883067003233500902731768818143410347785262439335938360086948003285169512060097165111128921968975037595001684326433774668671629260318165014140235201154543824426861714644148292925551988302420179885970397169638699816347859553481335637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wangerland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wangerland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fea236fd6bf2ab245ddd8078d1ee808740300cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							0256007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a8475f4ac000004030046304402202a6fcc0cebbb728777b08fd86ea4eb57efb596fd10fbfba04c2613297184404602202e9e79d8cf6140ba83467dc53a50d3a28f6807da1807b9e875a5db3c41f9272c007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015a8475f5380000040300473045022021f2c6d986e675772351968685c22d1e2a5db5249ca33a0418a2ce8c44fdbe98022100a470278810d5783cee7b25242ba21129740ce8ed46e62c983f955cd1f761591a0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015a8475f4d30000040300483046022100ab690a107aecd81569b276d7a992948cb46f6e05a29e8691d45d20f6e8ffdde4022100c123205798d81b612c17d8ec5e40282529571003089fdad6ce9637cdae57cb13007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a8475f4800000040300463044022014d8892161e71ae44f917f5aabf6a04f300e57cf1dcc6947e9d9fc4d2e7b72f802204724e361af511491ec294b90293c2794c0aa0d9c9b0cd20c115ec1b0afdee09e007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015a8475f773000004030046304402205409b953813a8432bbc8b3e42789ac1fe060afd098248f96e61c805e90c1081402206d8dd627c945ffcc1e7a5b616b52099962b441c149ffd209ba023458f6af5b10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d87e5ca87db41c90c58a55b955d4abcfbc513502f78b153f33f2f604a24bf68ae31b131e1318c47f5e50da357b1c0d3e10584c77586b062e8234ac96329b7e89ce3c76a4a980bc2ad0047c8e2af2ed2a1b46927477b7bbaa057d9c2f9def83a144361db8c041d29ee1f770cdb1c089b42b16d71bcb99171feb4bc875040de013deb6c5e7df9f186554f9565b28f2391812f39867a053922e54f69da1e0bce372dff13c42b4eec7231776549e27f1378c8b57d3a6e2840d4ee5964657a6062b17549cd69a7f885a7ba4056ac773055de167062126e0cfe3d866e17b5bae4470f464c8e607976ad5bd1f41eae93a4ccb4735f5428feebb28a511b66506af18f26