theater.mannheim.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:32:02:52:25:97:3f:a5:a1:8a:f7:17:0e:d4:5a:8d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theater.mannheim.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:32:02:52:25:97:3f:a5:a1:8a:f7:17:0e:d4:5a:8d
Serial Number (int): 2918117907658900326843826865347779213
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d3:26:60:ad:6a:fc:df:3c:ed:0a:1c:be:91:bd:79:ee:c1:00:a3:49
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 5e:23:0e:b2:1e:6e:0f:3a:58:8e:1e:a2:08:55:f0:1a:67:92:1e:29
Fingerprint (sha256): 5a:9e:88:75:d2:db:65:d0:84:04:a5:2c:fa:ae:4e:7f:5b:99:f5:a7:97:49:b6:87:d1:a8:2f:a7:07:a9:a7:41

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate theater.mannheim.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theater.mannheim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theater.mannheim.de

Other certificates including the domain name mannheim.de

(limited to 100 certificates)
veranstaltungen.mannheim.de
red.mannheim.de
scope.mannheim.de
extern.mannheim.de
NBGstamanEXP-E1.mannheim.de
piwik.mannheim.de
web2.mannheim.de
mailings.konversion.mannheim.de
buergerinfo.mannheim.de
bewerbung.mannheim.de
www.mannheim.de
theater.mannheim.de
opendata.mannheim.de
www.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
mailings.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
bs.mannheim.de
veranstaltungen.mannheim.de
stadtarchiv.mannheim.de
*.mannheim.de
khria.mannheim.de
veranstaltungen.mannheim.de
gastwlan.mannheim.de
extern1.mannheim.de
www.mannheim.de
buergerinfo.mannheim.de
buergerinfo.mannheim.de
beteiligungshaushalt.mannheim.de
*.mannheim.de
svcloud.mannheim.de
bewerbung.mannheim.de
www.formular.mannheim.de
piwik.mannheim.de
*.mannheim.de
piwik.mannheim.de
katalog.mannheim.de
theater.mannheim.de
www.mannheim.de
www.formular.mannheim.de
www.mannheim.de
artup.mannheim.de
svcloud.mannheim.de
ccs.mannheim.de
piwik.mannheim.de
mdms.mannheim.de
katalog.mannheim.de
waehlenab18.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
mailings.konversion.mannheim.de
webco.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
web2.mannheim.de
www.mannheim.de
theater.mannheim.de
scope.mannheim.de
services.mannheim.de
piwik.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
stadtarchiv.mannheim.de
mailings.konversion.mannheim.de
web2.mannheim.de
bewerbung.mannheim.de
web2.mannheim.de
katalog.mannheim.de
NBGstamanEXP-E1.mannheim.de
services.mannheim.de
scope.mannheim.de
katalog.mannheim.de
mailings.konversion.mannheim.de
ccs.mannheim.de
veranstaltungen.mannheim.de
mailings.konversion.mannheim.de
theater.mannheim.de
mailings.konversion.mannheim.de
www5.mannheim.de
um.mannheim.de
formular.mannheim.de
katalog.mannheim.de
www.stadtarchiv.mannheim.de
umfrage.mannheim.de
bs.mannheim.de
bs.mannheim.de
bs.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
umfrage.mannheim.de
ccs.mannheim.de
extern.mannheim.de
svcsg50.mannheim.de
scope.mannheim.de
bs.mannheim.de
mailings.konversion.mannheim.de
katalog.mannheim.de
fuehrerschein.mannheim.de

Certificate

The complete raw certificate details for theater.mannheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2918117907658900326843826865347779213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theater.mannheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657365816770376441855599181791920046811362552690396392887635298328562656281353074999401679241423922166772161988328493302318982435422744568116569024276377821200852086454363652438321313289735960926013933702314865055395214724974979651107260850324357755391213820506529414373302267157286075264642520223670042085578642376166730702979519387789772094887643302448359398520515102254515727745242722770172030794472814825623870362694348396897063354712402438155261366666448823587973893542609609873250301463916425371024750762598455496645811414152756202968337318953710330651320632575127455029843423366686953352919166499121082613558842154633597290512004521757965028255039968289013091458703965097323118972572830686675436869489442311329210609259038175139233114595810045394349869645592085423718934316023490890736169480113502948576062339015405645561503118587428297632934015249059832412259641589053746824221308734034811334227047228335090176428809553696982413996484084570272810126243219500266146797254819772889269766636499835752980933232983078939405084675075269786185135062711609030674603454503478830636447440281630076681481378213782364911109441015627693499123499153474071757863355529746454453913045521854182119562909899102516942167355472015602341392827283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d32660ad6afcdf3ced0a1cbe91bd79eec100a349
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theater.mannheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165facfc1960000040300473045022034f032d90d77439de1ad03d769263668f9cbdc329c56c9c48694347c07ff5e21022100d151ea8fdf63e8a9d802a1b48d459039ecc8df3df58d5302f22b40e7f8baccad0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165facfc25d000004030046304402203d355e875795f534fc755f8205f42731b819f536a7ef80cec66b56b092e050100220780182a83f537a53cf6379992feeed7417fca84e30b20d8cde6efd469727275a007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000165facfc1bf0000040300463044022009a1df703bd341a0cd3dd0b9b8b50fa81404d62832ed34b53005d45fd935e41a022015a57d4989bd00da59525c975e2b706e3f377abc1d682920dd430ac93209c612
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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