social.wmf.com

- WMF AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:42:d3:2e:ac:ee:ed:4a:11:a5:39:3d:0c:06:7f:ed:ff was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF AG

Organization: WMF AG
State / Province: Baden-Wuertemberg
Locality: Geislingen an der Steige
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:42:d3:2e:ac:ee:ed:4a:11:a5:39:3d:0c:06:7f:ed:ff
Serial Number (int): 1492227004517366147601106579145960194043391
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: f8:bc:12:33:31:9f:b2:16:c6:d3:26:76:44:c8:e7:be:26:bd:ef:83
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): ce:ea:e9:d1:e0:6c:5e:fe:da:9e:b5:c0:67:bd:39:5f:53:f3:9b:8a
Fingerprint (sha256): 53:f8:ca:1a:d1:1e:40:5a:c1:1c:9f:28:73:41:77:20:03:ef:81:44:09:16:8f:f5:62:51:b0:c5:40:0e:0c:9d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate social.wmf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for social.wmf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

social.wmf.com

Other certificates including the domain name wmf.com

(limited to 100 certificates)
confirmation.wmf.com
www.wsp.wmf.com
marketingportal.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
cmservice.wmf.com
www.telemetry.wmf.com
news.wmf.com
social.wmf.com
sni.cloudflaressl.com
wmf.com
owa.wmf.com
www.wmf.com
www.wsp.wmf.com
*.wmf.com
*.telemetry.wmf.com
sni.cloudflaressl.com
digitalguide.wmf.com
wmf.com
mediacenter.wmf.com
*.wmf.com
news.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
mediacenter.wmf.com
parts.wmf.com
marketingportal.wmf.com
*.coffeeconnect.wmf.com
*.wmf.com
coffeeconnect2.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
*.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
owa.wmf.com
account.rcu.seb.com
news.wmf.com
sni.cloudflaressl.com
*.wmf.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.wmf.com
www.telemetry.wmf.com
www.telemetry.wmf.com
social.wmf.com
login.coffeeconnect.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
news.wmf.com
wmf.com
*.wmf.com
account.rcu.seb.com
www.wsp.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
www.merchandising.wmf.com
*.wmf.com
logintest.coffeeconnect.wmf.com
coffeeconnect.wmf.com
mediacenter.wmf.com
citrix.wmf.com
sni.cloudflaressl.com
*.wmf.com
wmf.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
coffeeconnect.wmf.com
coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
*.coffeeconnect.wmf.com
www.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
www.merchandising.wmf.com
logintest.coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
wmf.com
www.wsp.wmf.com
wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
*.coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
account.rcu.seb.com
image.20210419.201008.s50.et.yellsatcloud.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
sni.cloudflaressl.com
*.coffeeconnect.wmf.com
www.wmf.com
account.rcu.2.seb.com
account.rcu.2.seb.com
wmf.com
sni.cloudflaressl.com
news.wmf.com
wmf.com

Certificate

The complete raw certificate details for social.wmf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz/PyQuBnl/SqXw4l99o
/P2nWUEena73rSJZAJfp0wECNlkkAqDYZvjxqhjWt6UdaQBT4magS+99joqIVQ54
gVjoQ2YhBbq6aTcEh2tGHs/hfEvXJVAaXsHP97MIksjKccfeqA6FVl1jqvskCtF+
JVPyOgGY4SdLEZaDwwIHYSNS2QF0aLJlYRrzgLNthFKLDL6p5S4ocRm9U+LXhMCQ
3gK/ARuNx5W1RDlAIYYzb4eISXrdfoJYctYdAKluTMsTQrGsX35gAwj+/pcAg+yB
/MxeRJJw8d44VC/l0pi9RNn7CIU7hbUaUsnqw2waz9uIU5ED99/zigEX+5WaTix/
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492227004517366147601106579145960194043391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-22 14:00:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-22 14:00:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuertemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'social.wmf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22123170072102536158680746974450815398595759753756964903227128511225460520094962022674478052009101651397033874929448236052582206500273393598894727598631934171701019613712051637226343934463897443579027482874431796721596532957797073526836057224402419121966792875675257695579311585981186882535950091016333515476143460233703746624004225839245546311215989475930446885895773549025065013492945331658973924285359778352754739694405632355886644235782640494977693764168047839866227766966386716402261901925957219801447985240852249147236604857177343206562244045402628062040345859225202391045302115515203127171557096486817418215387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8bc1233319fb216c6d3267644c8e7be26bdef83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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