kusel.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number 1f:20:58:c7:c0:d5:1f:a9:48:ab:18:5c:e0:ae:ee:00 was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kusel.de

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:20:58:c7:c0:d5:1f:a9:48:ab:18:5c:e0:ae:ee:00
Serial Number (int): 41374022046933740831104675628805189120
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 31:a0:b1:84:58:25:a6:5c:9b:ed:30:4d:f5:0f:87:e4:e7:06:76:4b
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): 19:b8:26:eb:4b:2e:29:04:3e:b1:ea:cf:79:98:59:f0:fc:c6:e3:c1
Fingerprint (sha256): 5b:63:74:2f:6e:19:b9:74:59:6b:22:70:e9:e2:05:4a:9e:a9:1c:f6:c3:65:95:74:ba:b0:2f:18:bf:e3:fc:13

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate kusel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kusel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kusel.de
www.kusel.de

Other certificates including the domain name kusel.de

(limited to 100 certificates)
kusel.de
stadtwerke.kusel.de
kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
kusel.de
stadt.kusel.de
kusel.de
kusel.de
kusel.de
kusel.de
museum.kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
stadt.kusel.de
stadt.kusel.de
stadt.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de

Certificate

The complete raw certificate details for kusel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeSwkA01xRkN1TsMCJkm
S1DqY3+p/WPgP3XYzvKKwsWoyN1Rv7GhPWWbQOSZHdfNk6xfiQDnY9zfEFJS8TFE
oXz+fJ+1x7ZY+0bj5YOgJ92dKXyAXgkac52zadSSeInSFrSJFIe3sw7Fkj3Uj8EZ
Qq/+zt/ny9L+y8q0CZpDgbW9sWKghnSiziGex2mgG+pU5vTnMWMINkLogGceflCN
CKrc8mX5MUO8qkQ7iO4eE12dfxPQC+Pf+oTV8MoEOfLY8kCfrYU/hGiurksPAvOy
I6bufDtsqh2QwwrnioSzqrpGPn4BhCvZIVVpIg+Rn+h+JYPbnVJWvkDSBVIVLWnA
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41374022046933740831104675628805189120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kusel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19427231752953106182556335051741637476541757234317787124189534140330995441348120634862163358104797010776589248926690867736975644262499564282593662560088733125697174795844154403525025625261632751869256676789912621763121537291393204105452720392383808692401846717309021133590343182411540873123269065734340619908547817687919877132923114994534423683988801542543173610304495470031726785887409581786396816431805986376370334594649335370360836100582336776046626523324708783365455450848115661616633847138656509879829983924350327425923278334782578477975317405663282407048098351120708240967746948293601074507720232803986594971651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a0b1845825a65c9bed304df50f87e4e706764b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kusel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kusel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f13b8534000000403004630440220187c3c87b66e129edebb0a67626e124fe4e299743f751b07d399ddfe12e1b572022055b4df86916030123e7617ab8b0b133949b32b9170cdba4fb8fd485880a89a3a0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f13b8532e000004030046304402202cb4568f56eb5208b3e985be40e0f2d9f56056386859c9e3b9d0eb0e25897f84022011febb5a79196301510db8bffbd05b2bae2b96cbbe3782277963525f3967b212
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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