www.weltfussball.de

- HEIMSPIEL Medien GmbH & Co. KG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:66:34:e4:6f:8b:cf:83:36:6b:1c:82:5b:95:d7:92 was issued on by DigiCert Inc.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HEIMSPIEL Medien GmbH & Co. KG

Organization: HEIMSPIEL Medien GmbH & Co. KG
State / Province: Nordrhein-Westfalen
Locality: Münster
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:66:34:e4:6f:8b:cf:83:36:6b:1c:82:5b:95:d7:92
Serial Number (int): 13822967021262011015681620816480819090
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:75:81:1a:d2:7f:30:34:6e:07:70:b3:05:30:38:b9:cd:e6:2e:50
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a1:5c:44:73:80:7e:d5:13:8e:92:be:22:56:d8:27:2c:b4:b9:40:63
Fingerprint (sha256): 59:12:a5:58:73:f5:42:35:4e:3f:3b:70:ca:74:e6:20:4b:d2:e4:b4:31:76:04:a5:9b:a2:0b:4c:39:b8:81:4a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.weltfussball.de

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.weltfussball.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.weltfussball.de
a.ergebnis-dienst.de
a.hstrck.com
apa-json.c.ergebnis-dienst.de
bet365.hs-edge.net
bwin.hs-edge.net
e2.c.ergebnis-dienst.de
interwetten.hs-edge.net
json.c.ergebnis-dienst.de
ran.c.ergebnis-dienst.de
s.ergebnis-dienst.de
s.hstrck.com
sap.c.ergebnis-dienst.de
sportsapi.amazon.c.ergebnis-dienst.de
www.livefutbol.com
www.voetbal.com
www.weltfussball.at
www.weltfussball.com
www.worldfootball.net

Other certificates including the domain name weltfussball.de

(limited to 100 certificates)
weltfussball.de
*.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
*.weltfussball.de
www.weltfussball.de
*.weltfussball.de
*.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
weltfussball.de
*.weltfussball.de
www.weltfussball.de
sni.cloudflaressl.com
weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
www.weltfussball.de
*.weltfussball.de
www.weltfussball.de
www.weltfussball.de
*.weltfussball.de

Certificate

The complete raw certificate details for www.weltfussball.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfQU6tLnRkkmI+Fhiob
4cRrSdp0Zv048AfeWJqewv1DCvXrzsVL8yDuU2y9pnlx8p4N18rMB5LXLUG/vt2J
v+/iiHKA7XsqeMwXTKbfQoDRKJ4/7lS5DSNas3THIkidw6SJP8Bh9pWGEWGEy2Xe
0oHcbaMeiZ7Q5Tc/eK1iGqYDvPiy/0HVkzQF9Jx9YdHH2QvQt9w2pR4ett+L7JLE
8uVZLyEaqFSjP+UTeEHos+HUcGFD0ixyvc5t5Xm62giLT4NMtoH0raII++g7UZnJ
wZV7CV8ZVPRouGlfMf8FYQNWAReOuh//Sru0L1TDx/0zPlSLQpC6yN/4IMtq7uEk
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13822967021262011015681620816480819090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Münster'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HEIMSPIEL Medien GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.weltfussball.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20801613860051379594394686880430043937766594078473320874932768935880117189951804901132794754727762079116404408132520565919478813392861440880755495424098175476924188478047536012149218341904002039195634512887994097340231304509477751787735571422053595670658722737319862008749579120309804953264408618348531173752462619879638380272092096003759984301981952453291202024673671424160254073410863232546245245165412245402965626379867100794392731982985167539133384739852684872919688395467994027538957756508088876469461394597826434824662058419891282247590857643792113775707217491187690802754260718613285373092159968735134297957383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4775811ad27f30346e0770b3053038b9cde62e50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (437 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weltfussball.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.hstrck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apa-json.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bet365.hs-edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwin.hs-edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interwetten.hs-edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'json.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ran.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.hstrck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsapi.amazon.c.ergebnis-dienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livefutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voetbal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weltfussball.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weltfussball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldfootball.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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