*.sis-schwerin.de

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 09:11:6e:74:2b:ae:c9:30:4e:c7:2c:03:d6:ee:96:35 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sis-schwerin.de

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:11:6e:74:2b:ae:c9:30:4e:c7:2c:03:d6:ee:96:35
Serial Number (int): 12053561277701746865943187047496717877
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:ef:3b:c7:27:07:b7:d1:0c:b7:7a:a2:bc:58:f2:d1:99:12:a8:73
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 7c:12:4e:d3:fd:64:76:99:6b:06:3d:07:48:22:13:df:2b:61:d9:33
Fingerprint (sha256): 60:db:75:d9:73:ca:d5:ce:02:82:47:aa:cc:7a:75:a5:6f:da:2f:a2:e7:c9:b5:8a:ec:5e:cc:36:13:41:58:4a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate *.sis-schwerin.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sis-schwerin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sis-schwerin.de
sis-schwerin.de

Other certificates including the domain name sis-schwerin.de

(limited to 100 certificates)
cag3.sis-schwerin.de
mobil.sis-schwerin.de
sis-schwerin.de
emmtest.sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
mgw2.sis-schwerin.de
cag1.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
piwik.sis-schwerin.de
ssl-vpn.sis-schwerin.de
sslvpn.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
webmail.sis-schwerin.de
mgw1.sis-schwerin.de
*.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
*.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
*.sis-schwerin.de
sis-schwerin.de
mobil.sis-schwerin.de
cag3.sis-schwerin.de
emm.sis-schwerin.de
piwik.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
mgw1.sis-schwerin.de
mgw1.sis-schwerin.de
piwik.sis-schwerin.de
webmail.sis-schwerin.de
cag3.sis-schwerin.de
wlanportal.sis-schwerin.de
webmail.sis-schwerin.de
webmail.sis-schwerin.de
sis-ksm-wlanportal.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
cag3.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
webmail.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
wlanportal.sis-schwerin.de
analytics.sis-schwerin.de
*.sis-schwerin.de
webmail.sis-schwerin.de
piwik.sis-schwerin.de

Certificate

The complete raw certificate details for *.sis-schwerin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8LPfADxuEHRJ0xWQXUi
fOliBONvrPjO59G8ty4InjxY8cLg4znWjfPGw/vdYi/6UAroE2KxSmWM72PJIY+n
435tj7MKcg2vSmoD8PFkmjAx9jpHX9qMVWBAeRRzH2V1gbQ7CFqFc0gi3MtzEbDk
YKWqlZRgqcxeOyZYwEcLAEAWnkqZpF5lmMn2Pa1oKpIsD7IkgY0hv66bkxZZY4nl
BSDT75wWNWEdrtvTI9iJbNjkngHQmOdzqFMhL4hREGpsj21FKbf1JINNiSkHYscZ
dUZcJ8Wa1s2rEsuOcsC0mRxMnF172jUjo8V80tCIaUYgMOT6YAPOwxASIEoG2rtN
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12053561277701746865943187047496717877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sis-schwerin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21682814780169231058053340753393888443606231083017400440749456760248791910978493230105318132930382149368341965109349910841226752117758859037486233326439441803187385743979060823861024332645744143324070128250842669397039755111807101601580786340478240458935503830858641083658349576590611159723782190412637698076681376964716187110303987109306073504174593408576187692755010282552529585643449258397949706096571361573347574935084282979133840841922782974601593179918715040140983350606959814065171764263710890716100194701676696025209201295540138558433664261514799407646765342188989529053705211362910789069937639402517827374371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7def3bc72707b7d10cb77aa2bc58f2d19912a873
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sis-schwerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sis-schwerin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ee3b0d986d6675380bc6982a9082344d87f7f2f5cb9ce1f08aab02d13373d08912984d9263827934466e8c4596415c30dbfe350b4d15a2b5a0ddb7592eb7442359369ae99afd58c55a637c04ef225f34c6b720d381b435bd9115201f81e64f07d5b0017df65500d6901a47a65cdc98483c10e8b38e649a298f9296c19f819c773687a212b25d115bcc1fdaf29a6d9d70f60025065858b9e3c3eaad84177360afbe0b20cc2dda197b491d9cc5051022456a944c8b35028c9650ea39568e496fa8c969f3b710029df415e64a7184010210d5f8b10b0ace781406a7b2b45a6485368a5925461b646969a97c4dbc3c183964593c44c25c106138380da73b1b235c3