*.test.kdfse.com
- 111616 Opco (Germany) GmbH -
Issued by GeoTrust SSL CA - G2
About this certificate
This digital certificate with serial number 32:18:a7:d1:00:4a:bb:b9:05:59:60:1a:ca:80:ee:3b was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
111616 Opco (Germany) GmbH
Organization:
111616 Opco (Germany) GmbH
State / Province:
Baden-Württemberg
Locality: Stuttgart
Country: DE
Locality: Stuttgart
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 32:18:a7:d1:00:4a:bb:b9:05:59:60:1a:ca:80:ee:3bSerial Number (int): 66589418635030751824699318897718914619
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc
Fingerprint (sha1): 4d:6f:a2:6a:f1:fa:0a:3b:ef:45:78:4d:04:57:e9:fe:b8:da:98:77
Fingerprint (sha256): 5f:89:f1:0f:34:42:44:5a:b9:b2:19:e8:c2:ef:31:80:d8:7c:0f:a0:b8:58:5e:93:2c:18:09:6e:83:25:70:f8
Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer
Revocation information
OCSP Server: http://gtssl2-ocsp.geotrust.comCRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl
Check the revocation status for certificate *.test.kdfse.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.kdfse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test.kdfse.com
Other certificates including the domain name kdfse.com
(limited to 100 certificates)
kiosk-gateway.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com
Certificate
The complete raw certificate details for *.test.kdfse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEyDCCA7CgAwIBAgIQMhin0QBKu7kFWWAayoDuOzANBgkqhkiG9w0BAQUFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTMxMTEzMDAwMDAwWhcNMTQxMTEzMjM1 OTU5WjB+MQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV8O8cnR0ZW1iZXJn MRIwEAYDVQQHDAlTdHV0dGdhcnQxIzAhBgNVBAoMGjExMTYxNiBPcGNvIChHZXJt YW55KSBHbWJIMRkwFwYDVQQDDBAqLnRlc3Qua2Rmc2UuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeXC/uuFlkAJyZvrNy0hRtqB1U+KnthNZSG0 PY2FG1CkhutpySVOYqebrigN3k7px31vMZJBFaoX7bqsF0hZgUjXV5Z1GREgiASe WLLvM8WxjAQMpS3DPoDostZH9gc8YZx1tD5cbikqE41P6U55MGCNM06iHpiN+zbp pDOzaMkCj2Rc+jZiK2CmUaev/m6sRd+Kxx52Tp/dkyRI5juJ6pm3XTMnaL3qVIle Gs8uEoDoNZUtWFUw+lNjBWrknpFwWp+M0aeDD7fJLHuM9CUe1uqJyxdHjspzOQSp U1HAnEpRHlKf5JSVfqsegoRBPPtV5D/LBxIuwQd3hfgkIsKCDQIDAQABo4IBejCC AXYwGwYDVR0RBBQwEoIQKi50ZXN0LmtkZnNlLmNvbTAJBgNVHRMEAjAAMA4GA1Ud DwEB/wQEAwIFoDA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vZ3Rzc2wyLWNybC5n ZW90cnVzdC5jb20vZ3Rzc2wyLmNybDBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYw MzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L2NwczAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU EUrQcznVW2kIXLo9v2SaqIscVbwwcgYIKwYBBQUHAQEEZjBkMCsGCCsGAQUFBzAB hh9odHRwOi8vZ3Rzc2wyLW9jc3AuZ2VvdHJ1c3QuY29tMDUGCCsGAQUFBzAChilo dHRwOi8vZ3Rzc2wyLWFpYS5nZW90cnVzdC5jb20vZ3Rzc2wyLmNlcjANBgkqhkiG 9w0BAQUFAAOCAQEAqozNYUBSnArcAEpX9x56BQLVul1Mm/bmZ3Yw29F+l/EUBFPL sPcIIRnnFmL+1CQGHNtXynbuKVuPjhsvXc2sOgc4AqIIzGUzDP4MmZB+bq5F2tLn RbMS47ZTtn20b4uoez5stRgQZdbmdZ3FoFYqHmcujmZZCmlXmvvzHqJEPES3SsxG JaD5F0HY4I2bnDGWa6RgdJfVhUfhK/B+ETLAaquXH6KkNF+DBupR04KNKFHO8T5q czwUJI7UTvQ50PXVq43JGjn5F6v36xbMvnjPS9tKx6SVYAElHqb1z0Q0wKoUxg+q juJG4yhsLWmFjR+nqHJF7W2AecHlzTGz/3PHyA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeXC/uuFlkAJyZvrNy0h RtqB1U+KnthNZSG0PY2FG1CkhutpySVOYqebrigN3k7px31vMZJBFaoX7bqsF0hZ gUjXV5Z1GREgiASeWLLvM8WxjAQMpS3DPoDostZH9gc8YZx1tD5cbikqE41P6U55 MGCNM06iHpiN+zbppDOzaMkCj2Rc+jZiK2CmUaev/m6sRd+Kxx52Tp/dkyRI5juJ 6pm3XTMnaL3qVIleGs8uEoDoNZUtWFUw+lNjBWrknpFwWp+M0aeDD7fJLHuM9CUe 1uqJyxdHjspzOQSpU1HAnEpRHlKf5JSVfqsegoRBPPtV5D/LBxIuwQd3hfgkIsKC DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 66589418635030751824699318897718914619 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '111616 Opco (Germany) GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.kdfse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21447573257391871431478143540724927094507751825158535429389362842729133564135789410125756798343322686355951927801452515058682453186915199978711601709621255822738084031019417041800380932003479767605009751159144387757076139455742951021038782448390126466113640930274936649482165122696727512339302592609791105290120738740110123623532503140835182515439348309140017530158193051141655097828167386489592492665649134897619072845486843621913894972881812612455991735949214907798148257760988034350129003626408359964670757768279653318912870735471431109888804369211937612008375164904833218084931160935101387744616972341600432849421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.kdfse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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