www.mwf-technik.de

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0b:20:a0:14:5d:07:94:d2:f7:74:43:80:6d:59:59:5b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mwf-technik.de

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:20:a0:14:5d:07:94:d2:f7:74:43:80:6d:59:59:5b
Serial Number (int): 14790908251998294834618502002364733787
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:3c:bb:65:5d:64:07:e5:33:81:c0:4c:c3:f8:dd:a6:3e:6e:b5:bd
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 11:49:fc:2c:fd:b0:ab:77:b8:9e:6c:3d:a1:52:9c:7b:fd:30:d7:a4
Fingerprint (sha256): 5c:a4:3d:74:de:bc:7b:ce:8f:ef:05:68:26:fb:e9:58:4c:9c:af:aa:c5:0a:95:74:b3:1f:f3:e8:06:d4:2f:82

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate www.mwf-technik.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mwf-technik.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mwf-technik.de
mwf-technik.de

Other certificates including the domain name mwf-technik.de

(limited to 100 certificates)
kiosque.flp.ch
chiosco.flp.ch
test.phcsystem.com
produktkatalog.mwf-technik.de
magazin.nivea.de
kiosk.astrosofa.com
kiosk.citytipp.org
travelshop.accessconsciousness.com
magazin.ferienmagazin-deutschland.de
kiosque.flp.ch
chiosco.flp.ch
vitadoor.mediaflip.de
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
*.mwf-technik.de
test.phcsystem.com
epapers.juenglingverlag.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
www.mwf-technik.de
*.mwf-technik.de
fall-magazine.robinsonlightingandbath.com
test.phcsystem.com
test.phcsystem.com
test.phcsystem.com
magazin.ferienmagazin-deutschland.de
kiosk.flp.de
webkiosk.die-bank.de
kiosk.flp.ch
fall-magazine.robinsonlightingandbath.com
www.sblaettle.at
katalog.lemo-schuh.ch
kiosque.flp.ch
test.phcsystem.com
katalog.lemo-schuh.ch
kataloge.basoeinkaufsverbund.de
*.mwf-technik.de
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
kiosk.flp.ch
kiosk.flp.at
kiosk.astrosofa.com
www.sblaettle.at
*.mwf-technik.de
chiosco.flp.ch
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
www.mwf-technik.de
magazin.hotelbb.de
katalog.lemo-schuh.ch
kiosk.velototal.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
katalog.klickparts.com
kiosk.velototal.de
kiosk.flp.de
handelsblatt.kiosk.plus
magazin.plusperfekt.de
*.mwf-technik.de
epaper.immobilienboerse-ag.ch
katalog.lemo-schuh.ch
katalog.erima.de
kiosk.velototal.de
publikationen.jugend-bildung.landkreis.gr
katalog.lemo-schuh.ch
test.phcsystem.com
katalog.gartenmode.de
kiosk.flp.at
test.phcsystem.com
handelsblatt.kiosk.plus
kiosk.astrosofa.com
kiosque.flp.ch
test.phcsystem.com
kiosk.velototal.de
kiosk.flp.de
www.mwf-technik.de
kiosk.velototal.de
idee.elite-consulting.eu
kiosk.velototal.de
kiosk.flp.at
katalog.klickparts.com
kiosk.velototal.de
handelsblatt.kiosk.plus
test.phcsystem.com
katalog.klickparts.com
magazines.esteticanetwork.com
chiosco.flp.ch
vitadoor.mediaflip.de
kiosk.velototal.de
kiosque.flp.ch
kiosk.flp.ch
katalog.lemo-schuh.ch
catalogue.designmiami.com
test.phcsystem.com
fall-magazine.robinsonlightingandbath.com

Certificate

The complete raw certificate details for www.mwf-technik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZAFhyT/9jQt1Wq+VbZ+
coVB3qFd5hbjV25toU6KMXpt7c2vsUoadKa5lu+c/YxQli3pkIqv9+dDkOmnD8qj
su3SFZQzUZKmrZnNS9If4ENZSbOGQggDoWliaEw5+tyyVlrjrcoi08lb1UdlTgpi
4OFKBiExqRpnAZuEFAwCq042Qfo/w6wN+EyQ5A89oMhasAqdlPg8URzwNNRQ1h8O
4zpr7vqriYnYkdWpW61GvE4aTriAeWDYdPeTasELud2IFt/QNNhEXuABjms6YBH5
BBGmZee5g97gXWnSEsQ+DH3EqGAbwQ9AvwSUYPyW5bMtvLqdVhfvpECeOh7u87GT
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14790908251998294834618502002364733787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mwf-technik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16860714255127603975153197862417751436656567347478883750880038515481641901730089683728202695393239288573546175721307144348077104860946175744168938924665593335708186771389698100455574038621740452856311546942403087124591134305617950019967254263977109883192988250911873895549496427383180290055199175069067059562669119390659227753901637950452549964717836640866673295159289659006754311188491423481553392995108312190885417739027172376142520183060545544703757778486109428657712612177585662072002114908585169968469426814364879466388474246047490412979708599859582363142128989327331949235974148366349439331523936888885571851253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a33cbb655d6407e53381c04cc3f8dda63e6eb5bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mwf-technik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwf-technik.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000177825c979e00000403004630440220311c5136f8325a0649a3eeeae04bda9b0e3b0d92811e364009180a1ab216327c0220614ea87ca95f1cd2e2bc11ecd45ebe90992c5f8f5dd362d6aa16a5a431e2d9cb0077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000177825c97f10000040300483046022100bfaf43658e52cba4792911ce4bd7548918fa70614a04c00d43aa477e93fea4e3022100bede27ecd10480baef794387e4bebb627b3d1add3e81ff82a62154d9c1e5f469
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008be61f2dc67220d6394564a3a87fe92507dd32cb06ca1c24e674d5fc2e4372e7e56a9358813bb5f8321a61d3e3ac0f35240bb008040ef69fecbdcd78f6a3b583bb5df5f7b77699248b19ce2bd1bbdd32d239eb2e84eff907bcbe0dacd6dd6e6beb0271baf25836999bc951cac502b7435ba4a3cad435b07c5a7fa3f48554f22bf088d15a9ef4b7e29a169c431eacc628fa4cabf619b5d4436d5a880ee06a1d0ed2014b55a1dabf311d40458bd0c98b72df2d11953d195ae60bb17fd880e5d048e69156fc7b3c7df3df092f0c291af9ffdcdcde05874cd7c92cdb2e15bbe69daae0bd254b9f45743f9b52830b9073e0244718996484b56c2abf8d9cab63caab04