intranet.felix-schoeller.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:bf:bd:bf:42:e5:18:d2:5a:5d:f1:53:be:cb:a4:38 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.felix-schoeller.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:bf:bd:bf:42:e5:18:d2:5a:5d:f1:53:be:cb:a4:38
Serial Number (int): 3654033220247086091079540262396732472
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ee:9e:7f:88:9c:94:11:80:5d:b5:b8:57:7c:2b:74:8d:ec:01:21:25
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 45:ef:a9:16:25:9c:69:46:44:e2:30:b0:7a:22:a9:c8:d0:d5:12:57
Fingerprint (sha256): 5a:b3:21:cc:ef:d3:62:c8:a6:44:fd:a9:08:a3:24:46:91:e8:5f:9b:3c:71:09:19:9c:88:18:38:4f:63:e8:59

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate intranet.felix-schoeller.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.felix-schoeller.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intranet.felix-schoeller.com

Other certificates including the domain name felix-schoeller.com

(limited to 100 certificates)
logon.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
webapp.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com
iam.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
vpn.felix-schoeller.com
mobile.felix-schoeller.com
intranet.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
kombiverkehr.felix-schoeller.com
edi.felix-schoeller.com
simplifier.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
itmon.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
simplifier-test.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com

Certificate

The complete raw certificate details for intranet.felix-schoeller.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy+FiUVVisSGCh/1pp3OT
wh+asCbNqLX1PImRB5PzCxl5+3BrpsL0CBFhN8U1BEHFakD8J4Gcdko1cMBzEAMC
5b8g0Vw1N5opYxIhAwUprneiR2Lo4PGq1OVv1qN1qG1tKC19rhFWCTg6gbhybTSo
jCjv3IH9/4YXDC/0G5sB4DQwBdOCzZiTtapKY1qw5YesYnllQ0jAKWFSGNOHzStf
CT4lmQ6YEDqeL1C61VSywLa9bn2HzZoHDAxPZUjcrpACA83MKzOaka1gelwzUS2P
H506THUavyzfOLy0jWAHX8Mz1BN7sFcPmsuYyPWIe07JmCTLwfraBl5Ic2BNlCB1
4kqfMtfr1Wqq77iDUMw1hLyqmDn6JzD8KCaKbBFfqJtsnVFlmArHYz5yIbuiIooH
QyB+v5uAzEroCcFx4PiAqdM6S9FKIBmkORlCRlddA0osh4/hrEQx9yL5gGAXlAbM
6lNtCFri2NXcQnIjstd5MUPSTh/TyfRfMCqQuEXHi0xcu4VkfX5snznIq7vrPOOS
UKEsDq8KsjGnuzmxz6Afyvi4Ja4d+8U88YOxnUuJP0PaQ1FTH+ujQPeHRBrGdMHV
G9+TngHegz2whC+cw9dPPhOjdj41lGAMPRVAb6Tih0wscljAhAlue0DbZIziw6I5
AGpOnmeXsNu1EausXboyXqECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3654033220247086091079540262396732472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.felix-schoeller.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831759490796745308655733328883989080279355712495465318961004293398101324072510729596814485845325784279939937401009035141659669485996771012447582845141298674016217248790170702878677094238347361570020227341931687267877432798387691318704500566561391123916463926320146970629105497280165039530911267810648930269167535328174686293724270962708633848288047849396819988594432327998311359096871933700667157186177753141459041078654206396774936007522019388472292392786006830678107774333122303442600717719246291383870173656638047140357058649027863263614869761851152445499028145261182989825412824056982125363073616670169183675476763230168485250389456532977875173271730613869663380345567671227824208871345931430647825375852552524958673538090299152161854999343559140586423737558612215541997980134092123433997081987585292550669035351379362871476327783956071374455000496860483064766187297134435279889583351611181149891380094475931445647154341699682344233422346810959636940146784755066856166741666768098502762847787406672530745850051947812260677228173315502024766974543224706702175939770014163307098106299873393430603149271118396114056767352895499770692028563481589531759508627876410131642611326995056677454712976650791097723861836016773044043833826977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9e7f889c9411805db5b8577c2b748dec012125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.felix-schoeller.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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