*.funkemedien.de

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 4e:6a:3b:7f:f3:1e:b9:4c:10:25:53:51:cf:f7:3f:f3:b4:3d:14:82 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.funkemedien.de

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:6a:3b:7f:f3:1e:b9:4c:10:25:53:51:cf:f7:3f:f3:b4:3d:14:82
Serial Number (int): 447670342279196231910529531729445247152627192962
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d5:20:bf:ee:03:82:50:de:fc:2f:d6:f9:4e:7e:92:76:fc:c9:0b:29
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 6c:c9:b4:24:72:e5:7d:81:43:00:f2:ef:fe:4b:24:d1:7c:1d:ac:04
Fingerprint (sha256): 59:25:f6:c4:f3:ea:43:56:02:72:6a:b9:81:cb:20:6e:1e:a4:18:0b:c5:06:cb:a7:1f:e7:04:81:6a:6c:0a:77

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.funkemedien.de
funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for *.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67M/eanjuCmJFnlioLkm
6+rY1ilAODe/VXagu36uBXK3W4F8gLSQsfsID6zSLDsa8FDbGgiC1xm1c0VrPYL6
ZldyR0tk0Kvln9Ah09pC/jRSP13cT8xNXcY9z0w2XcU2yZFqZs4Gj5UTMJgscu4V
UWMro+omPgjJaIzf+nxExpkP+SkM95HlxVr1i6ApAGQtrEFrB0tbvOWj9PdYUzyX
cjyR1/m4lkmDaUZ9TF4KZlToEjQMARQ0g7jIzX0KellM312Xyc/hhOfdAZT6Ru+y
1tDIfZ2B9Nnd9p0LDPPzTua0cCkqglvx45eFAzuxUVyPqijrkfpQEEpvVs78D14E
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 447670342279196231910529531729445247152627192962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-04 08:59:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 08:59:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29754392125619814939305186243373990632145208344123180810517687343032567503881891469300567770459772599850997833688086705353639145236301642978140888896605028054197089577957094425009490402594148949514441105347117665718213379328012520780717578296122260389784419184136267779741154738181565304400268953440603127244462273351753680569745114889917756553973960517327821012074879960260747546736128645094372829489884552407317874156131069799757199865153964997786008553988505735493559592377673230684609039640697177149155178332149094008015895789655214874459089624324869122824434919937566409718963263026065514409360708916046162953401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d520bfee038250defc2fd6f94e7e9276fcc90b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							03480076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001826814fb6000000403004730450221009c497b5f49edeff53a84b16630cadcee2a1e6fecb397389026949a94823aa33f02207114bdc5922e2f0bd56d62d0046c671378ef7ce9a23ef5ca5a4981b3498e265f0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001826814fa3e00000403004630440220348309ce1288b9dbb14f05685b04a65298cfcf6bf49be847e6f6136f61d17e830220089e3be059802278da66793c436f665b06ada163140640067d1974bf75e96b190075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001826814fa17000004030046304402205a0f82829308c8f7844887e2259d6fce648f82ecfeecd5d93bc6420868e37fde0220459768bd74eeb8f3fcd1322fe3705ecdeb27074a53d0f1cd1af89dd0c2d54f83007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001826814fa6d0000040300473045022100c90c833bf0c21502c0c078ad4dcf3b0681caceacc3fda15ba82df284e20b408b022032b2dd67737872410c8f1a22adb6836371ad34ad8f85226170a6832b12a8c4e5007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001826814fc7b00000403004830460221008dbed7fa476e71ec5d7272e464c7bc9d46131b17f9b5d97e40d085d5d151cb91022100bcd816de236604f588961d370e84e2109a3d37b36019650a38358fcf7cb69630007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001826814fc8900000403004730450220707783f9b43571a09f5d771a64b714a10c12929f3a9d3172137fc8ff52fa3adc0221008c69b4ef8045a87d7b770e518b5e9c2a53b796c8edf16fb4c558afaec79b6da5007700e87ea7660bc26cf6002ef5725d3fe0e331b9393bb92fbf58eb3b9049daf5435a000001826814fd3a00000403004830460221008ebe6665c5137e1c95735dc45e333c91151e7024a81baa9ce13baa7a2e6e414d022100afd2d2dc54f32bb3b8802f32f369d8836e10d6c620f411fbd1489e6e641d6f17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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