*.ebook.de

- Libri.de Internet GmbH -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 20:ea:33:b2:e7:ab:6e:46:db:23:0e:3b:60:7b:c1:5d was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Libri.de Internet GmbH

Organization: Libri.de Internet GmbH
Organization unit: Libri.de Internet GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:ea:33:b2:e7:ab:6e:46:db:23:0e:3b:60:7b:c1:5d
Serial Number (int): 43751341907215455723502168682264248669
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 9b:4f:7c:3c:2e:a6:38:93:81:15:29:ad:a8:88:66:cd:25:cc:23:75
Fingerprint (sha256): 60:a4:6c:da:25:73:89:c7:5e:9f:61:18:d7:0c:01:2e:57:3b:16:ca:c7:47:e6:6b:e5:12:9e:2b:6a:7e:d1:84

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate *.ebook.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ebook.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ebook.de

Other certificates including the domain name ebook.de

(limited to 100 certificates)
www.ebook.de
support3.cdnetworks.net
support4.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
*.ebook.de
support3.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
nl.ebook.de
support4.cdnetworks.net
afoykb.ebook.de
support5.cdnetworks.net
nl.ebook.de
support4.cdnetworks.net
nl.ebook.de
support3.cdnetworks.net
support4.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
*.ebook.de
*.ebook.de
support3.cdnetworks.net
*.ebook.de
nl.ebook.de
support5.cdnetworks.net
support3.cdnetworks.net
nl.ebook.de
support3.cdnetworks.net
www.ebook.de
nl.ebook.de
support5.cdnetworks.net
support5.cdnetworks.net
afoykb.ebook.de
support3.cdnetworks.net
nl.ebook.de
*.ebook.de
afoykb.ebook.de
support4.cdnetworks.net
nl.ebook.de
afoykb.ebook.de
nl.ebook.de
support4.cdnetworks.net
support5.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
nl.ebook.de
support5.cdnetworks.net
support4.cdnetworks.net
nl.ebook.de
afoykb.ebook.de
support4.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
afoykb.ebook.de
afoykb.ebook.de
afoykb.ebook.de
nl.ebook.de
support3.cdnetworks.net
nl.ebook.de
support3.cdnetworks.net
afoykb.ebook.de
support3.cdnetworks.net
nl.ebook.de
support5.cdnetworks.net
support4.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
nl.ebook.de
support3.cdnetworks.net
support3.cdnetworks.net
afoykb.ebook.de
nl.ebook.de
support3.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support4.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
nl.ebook.de
nl.ebook.de
support3.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
support4.cdnetworks.net
afoykb.ebook.de
support3.cdnetworks.net
*.ebook.de
support5.cdnetworks.net
support3.cdnetworks.net
support5.cdnetworks.net

Certificate

The complete raw certificate details for *.ebook.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++uzs52wwr3VCVCKA34v
bIPos8wa1+CcuhO+lJAGgro5Gb1uLob3Wk6BLEddGiAfSPv2vYz+C+FB2g1iORog
13vuTXAl8nFSVkq5mfY/QRuCf07661gxbSDU8Qa+8p+dCp6Gp4lO1ZWlpkANgbim
H2YR2b9IxIj0E4IR1LWzIml055ajp5/EPouL2gDrwQxa1/CZuPjEflMxTJx3uf0o
9JvZlK6QYF12Q83THR6kmhRYagPmd1ZVDZAuauO5oEjLCzlrO76vqBhZLxLpnr3U
JmYuLMZ5oSF/kLvXsO6AaCtGmL4hmuRH2mr6exR6FRabd2skbmoMyBjjKmCdAqWj
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43751341907215455723502168682264248669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Libri.de Internet GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Libri.de Internet GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.ebook.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31802043514609484389266957394029231286191566374056134120582078359350126577055210708362658473677334819539714270679017526334072211140148881091145922472984234354169449346506713811497310977284294442567430882615994687830267517607035352423468017146486753123577123564791272985360084655878399401211455956775016144402442797226286731800216772345874860271126614983056033863243361498789699410077725500007755456363152073982091893723232238132476362694710516236289752565473695335169382671773399946591215519179787305966691664151591364454410394777975340297624162875731104929513338381382366778461003582462951526489321739514700552840123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebook.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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