*.dsv-saaten.de
- Deutsche Saatveredelung AG -
Issued by GeoTrust SSL CA - G2
About this certificate
This digital certificate with serial number 30:73:ad:cb:80:75:2c:6b:96:0b:f3:37:fe:ab:fb:f6 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Deutsche Saatveredelung AG
Organization:
Deutsche Saatveredelung AG
Organization unit: IT
Organization unit: IT
State / Province:
Nordrhein-Westfalen
Locality: Lippstadt
Country: DE
Locality: Lippstadt
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 30:73:ad:cb:80:75:2c:6b:96:0b:f3:37:fe:ab:fb:f6Serial Number (int): 64403582916341624558073565648989715446
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc
Fingerprint (sha1): 9d:7d:57:f8:45:1e:35:a9:fe:e1:33:7e:f7:24:72:42:f0:ac:d0:7e
Fingerprint (sha256): 62:b0:32:45:1e:a4:d0:9b:b8:b0:80:ef:8c:02:d9:73:6e:d6:df:80:b7:9a:05:25:84:69:f1:0c:67:5e:14:84
Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer
Revocation information
OCSP Server: http://gtssl2-ocsp.geotrust.comCRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl
Check the revocation status for certificate *.dsv-saaten.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dsv-saaten.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dsv-saaten.de
dsv-saaten.de
dsv-saaten.de
Other certificates including the domain name dsv-saaten.de
(limited to 100 certificates)
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
country-saatgut.de
intern.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
ds-mail.dsv-saaten.de
m.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
analytics.dsv-saaten.de
ds-mail.dsv-saaten.de
app.dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
country-saatgut.de
intern.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
ds-mail.dsv-saaten.de
m.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
dsv-saaten.de
*.dsv-saaten.de
analytics.dsv-saaten.de
ds-mail.dsv-saaten.de
app.dsv-saaten.de
*.dsv-saaten.de
*.dsv-saaten.de
Certificate
The complete raw certificate details for *.dsv-saaten.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIQMHOty4B1LGuWC/M3/qv79jANBgkqhkiG9w0BAQUFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTQwMTE0MDAwMDAwWhcNMTcwMTEzMjM1 OTU5WjCBizELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFs ZW4xEjAQBgNVBAcUCUxpcHBzdGFkdDEjMCEGA1UEChQaRGV1dHNjaGUgU2FhdHZl cmVkZWx1bmcgQUcxCzAJBgNVBAsUAklUMRgwFgYDVQQDFA8qLmRzdi1zYWF0ZW4u ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rxU19+Ctfs9UKrXB PIEamV73SJ6pjxwjjh+cAkOhz2Ew47vGDJquEGznaV0YSr3JzsCzheJU62zsWkYv UJRQpwHKEDs468r3wSVc04soa8Mo+iIpK8rpQgg3xvH+G0JT5B9YxUpoKopdXrmA yPon5fDcLlwYVH3jKO9WXm/CONQY3Q6dwjJBzUldyIyXZfCsUmTZrzaLGWkRAODu Bl6Uo8K89NY665lQMzSAXweAw7uByRmLmYMWMav3khEA3i50QYHNrz3eNZgmW9P/ dr9uTN6uP3aUqwreqSfCpy17JRJY0za2LE/JzBnCTbYzhfiWWJg9KVkn5ekg4cv+ KveXAgMBAAGjggGIMIIBhDApBgNVHREEIjAggg8qLmRzdi1zYWF0ZW4uZGWCDWRz di1zYWF0ZW4uZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwOgYDVR0fBDMw MTAvoC2gK4YpaHR0cDovL2d0c3NsMi1jcmwuZ2VvdHJ1c3QuY29tL2d0c3NsMi5j cmwwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6 Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFBFK0HM51VtpCFy6Pb9kmqiLHFW8 MHIGCCsGAQUFBwEBBGYwZDArBggrBgEFBQcwAYYfaHR0cDovL2d0c3NsMi1vY3Nw Lmdlb3RydXN0LmNvbTA1BggrBgEFBQcwAoYpaHR0cDovL2d0c3NsMi1haWEuZ2Vv dHJ1c3QuY29tL2d0c3NsMi5jZXIwDQYJKoZIhvcNAQEFBQADggEBACoJhwZFl1/D DZA6e5nDsfaFxKamaZdUpq8d1DZ80zDuZ1z9X24wHoTvkqrpOao0JH+0oHeO7lQc TfTuFiPhIXswswbj4dz6NzAWvYmS9eq78GA3hM2u/BXDHX9DSgoVA71LOX+/fNt7 qkJZtlmXaidJqKkMOJrzJPc6+ziqDYqyc/zQPlPotLJLjalfi+7cqFQsSjKo3LCq lu9uxscSJzAIrdkntUTv2crmip6fQw2TLnYYugb1ELc4W0C3uS4dcWlkb+CILgiN kBKXAyRykMERYsQCDg113fK/NtnzSIRjNm22AeBAT71Av/om7ZzfObz4v4f69w49 4pYaCx48JMQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu68VNffgrX7PVCq1wTyB Gple90ieqY8cI44fnAJDoc9hMOO7xgyarhBs52ldGEq9yc7As4XiVOts7FpGL1CU UKcByhA7OOvK98ElXNOLKGvDKPoiKSvK6UIIN8bx/htCU+QfWMVKaCqKXV65gMj6 J+Xw3C5cGFR94yjvVl5vwjjUGN0OncIyQc1JXciMl2XwrFJk2a82ixlpEQDg7gZe lKPCvPTWOuuZUDM0gF8HgMO7gckZi5mDFjGr95IRAN4udEGBza893jWYJlvT/3a/ bkzerj92lKsK3qknwqcteyUSWNM2tixPycwZwk22M4X4lliYPSlZJ+XpIOHL/ir3 lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 64403582916341624558073565648989715446 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lippstadt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Deutsche Saatveredelung AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.dsv-saaten.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23692899602133652929566923044064667877230626724745259428768129996944126931604852183892364180209213095192623312373135246491567751662740887241783179547554575302317032611587134848268106995152358155459746339864370044381318948847648021757806069959431046995185352175078274852540172887026113876986262493265606447655514224700390335360540485543572071368521985736466351093837531803497647474586618226253623346154720478822973962709052589952694664555633607540969520108799607698199291798976504845085285595856070709785804609686800073471842278240202708962806921288345643099296177980253553187724355187890222155969836151770621619664791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsv-saaten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsv-saaten.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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