*.idg.de

- IDG Communications Media AG -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:05:34:ef:69:4e:95:8f:26:bc:d3:da:91:10:a9:87 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

IDG Communications Media AG

Organization: IDG Communications Media AG
State / Province: Bayern
Locality: München
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:05:34:ef:69:4e:95:8f:26:bc:d3:da:91:10:a9:87
Serial Number (int): 15977771087132823927479929533166037383
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:1d:c2:2f:d2:eb:5c:c8:2d:66:cd:02:33:6c:80:41:d5:6c:e7:d4
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): af:09:72:c1:b9:8b:6d:a7:69:54:12:ab:9d:a0:e3:57:07:56:b6:2b
Fingerprint (sha256): 5c:30:04:85:8c:7d:f9:0a:8f:4f:65:48:fa:6e:17:e2:6e:12:c1:f4:1f:94:eb:67:ea:31:4f:f3:f8:4e:72:f1

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.idg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.idg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.idg.de
idg.de

Other certificates including the domain name idg.de

(limited to 100 certificates)
cp.idg.de
beta.idg.de
cloud.idg.de
*.idg.de
webcast.idg.de
webcast.idg.de
*.idg.de
*.idg.de
w.idg.de
www.mobile-enterprise-day.de
w.idg.de
idg.de
10jahre.cio.de
cloud.idg.de
computerworld.idg.de
cloud.idg.de
10jahre.cio.de
*.idg.de
amazon.idg.de
adserver.idg.de
beyond.idg.de
cmp2.channelpartner.de
s.idg.de
beyond.idg.de
syndication.contimate.idg.de
tap.idg.de
w.idg.de
beyond.idg.de
beyond.idg.de
10jahre.cio.de
w.idg.de
tap.idg.de
cmp.idg.de
computerworld.idg.de
*.idg.de
adserver.idg.de
cmp2.channelpartner.de
beta.idg.de
cloud.idg.de
amazon.idg.de
tap.idg.de
webcast.idg.de
docs.idg.de
w.idg.de
citrix.idg.de
cmp2.channelpartner.de
tap.idg.de
access.idg.de
idg.de
idg.de
cmp2.channelpartner.de
amazon.idg.de
beyond.idg.de
tap.idg.de
idg.de
beyond.idg.de
idg.de
*.idg.de
cmp.idg.de
w.idg.de
tap.idg.de
computerworld.idg.de
beyond.idg.de
w.idg.de
w.idg.de
10jahre.cio.de
webcast.idg.de
10jahre.cio.de
cmp.idg.de
10jahre.cio.de
webcast.idg.de
tap.idg.de
webcast.idg.de
*.idg.de
w.idg.de
beyond.idg.de
*.idg.de
adserver.idg.de
computerworld.idg.de
computerworld.idg.de
syndication.idg.de
cloud.idg.de
syndication.idg.de
w.idg.de
webcast.idg.de
w.idg.de
cmp2.channelpartner.de
10jahre.cio.de
w.idg.de
syndication.idg.de
beta.idg.de
adserver.idg.de
10jahre.cio.de
webcast.idg.de
beta.idg.de
w.idg.de
w.idg.de
w.idg.de
webcast.idg.de
webcast.idg.de

Certificate

The complete raw certificate details for *.idg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTEbI+rIoIwVSTe87cuz
Db5AXBgXc87V7qUyewf5zkbt2LKG9/OuJLaGsML6ExUmQ5ylSOChENAdQgC5jRgt
CwBFX2wo5VO3RXHiM2VcVUKgSHkfLcdlz8oQBCyXfiKrsP6uaTfpiq3pbWvzRuoX
qDgUD3Z94CYsV31Rom25yjurZ5ZmoAnCRvRVpxyzMzT1VbnNMLea5MbxUjXto1/M
Ge3P/h4Nh9uQxGXzpJ2tgzfo/mCDohHH/X8WvmE+Y2740EjkNcMjrP4/wOsg9VB5
PvlY6JCxoQmrR/qrb2uj1NMdztDSEJwXUJCTClesFjpZuRVpj626voT1SSU1UBwZ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15977771087132823927479929533166037383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IDG Communications Media AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.idg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25398114377571127112943523281746230916700008960404744830210392530203148809492175344919085081001399652026208785034687411413806978014073672142144683968699776533401507024579051665657860074488468911306071537633406497476375144624837870683005040834403416074281462630821140504986141725767717932990687659120108132166068955689484167576527116327568653824233337062531742213266926890511083043075081508206543247459385718677808767655609932213845099753402540649734132988311919745385606988973734229526984859769832411196480046316674980602568767701557974752548924996628756533593662647145572072487996775917770193725800674133622755432943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad1dc22fd2eb5cc82d66cd02336c8041d56ce7d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007250e1a0b719110576d1d442351f95f5cf8cb88e5efb0925ebbe3a00478fd5847704f7085f467244dcee36d711fa63134ff94c4351a3347956f33b4cb9603d31adc55e2ae93c0363cd62205230db28bf5d6ca5aec14b9226428dfaf0b242115972df7715818bb8280f956d01a88c80b5a92379ba9c2a36255c756a80a04de86d3ce2bd638a4656e5dda534be01d7fff6f032b55e4c3217b4a4b6b3de9c98118f04535781e318c793f841f7b275528b5d1dda8d4a88a48a87ed92e49bb40d167149f64181414186bde002613793758f2d657fb3c770b7e9e37d1a27dec27dd94c96d22e1f6d1e223a3eca5ebe0219dd19d0b0a476a02524020a799e82fe80491f