mzvc02.corp.ditsch.de

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 5c:2a:55:54:d7:ed:bb:6e:35:0a:34:50:29:b6:b4:e7 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mzvc02.corp.ditsch.de

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:2a:55:54:d7:ed:bb:6e:35:0a:34:50:29:b6:b4:e7
Serial Number (int): 122508782807079362304072850140288169191
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 65:1f:c0:cc:df:0c:71:a5:bf:18:0f:c8:ef:79:b3:d3:42:4d:9b:61
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 9e:c2:5e:ec:17:c7:a8:47:45:08:22:b9:fd:41:d3:04:ae:0c:ba:12
Fingerprint (sha256): 5c:e1:c6:07:53:d6:47:72:17:24:2c:12:ad:60:0d:8d:94:b7:71:5f:c5:5f:b2:be:ac:34:0f:44:89:a4:6e:70

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate mzvc02.corp.ditsch.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mzvc02.corp.ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mzvc02.corp.ditsch.de

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for mzvc02.corp.ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWaqa1RUPBZNsxLupfP1
8LtIfPQJjJS5WUmVwAccBJLhqGhWe2Zd5q1kEK8ixfoGgyJd8qq0cJA86qTZOBmS
k7+Hv/L30DQeEx2uNYJr27dj8SyFSM+AMTom7jqXbOzJhAi9LbUVbDXxB8sQzSCl
+YpINK4+YKRB+V7aBfBs2j4/G3EDaT8dMnzWjE92L8EwrVbWv1ScUfWrttI4SwnY
RfQ6mgmPMqug+/FWCrQEgDc/8kakY8ypKFUANBflwyN5zwjoLNzEGyACQze/J6vI
+z0V2Ld/orvLHAC5wqQSsrAbGRY7U7UmLbR0taOkXNoA4eBzM64tQEQK9c30XiQ4
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122508782807079362304072850140288169191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mzvc02.corp.ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22394806322638963731851502862923628047654034326458325176307506322685593529646982981976124522365149036533498131135131432759451554265528941556260372007618259861909541571885076842183881153954763263296637154154433404537115933968441153930699847100157504279007994396885117066930444687553848706674203478928851727376336858476496841730687113231072687680272848134601047484416127798135124367447423274200743872274406910223095212635990523389974228992256963661456031677489226036482258214003551530722903919780824395555410091165133951260978560980778124161072560125015992283320553969686941444966003451187669053328185676546357164521679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							651fc0ccdf0c71a5bf180fc8ef79b3d3424d9b61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001800b51f5e10000040300483046022100fe2d87699fbe2f43f0c1dddb2cc029145a6e97b32f883ba113822cd27f262e53022100d9529687b4fa38b45f8a9bf9aa8627e0ccbe7a178d6dee193b713db583920ac200750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001800b51f5be0000040300463044022003c410c5401fd3d005d71f89928758aeb5666cc2d62fc4d3c9a16851b565f46602205c8ff4958db0754923af2c995c119f59322eed08cacc9b6eabb5110225cdd872
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzvc02.corp.ditsch.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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