indico.helmholtz-berlin.de

- Helmholtz-Zentrum Berlin für Materialien und Energie GmbH -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number de:63:56:d5:fa:31:bc:35:56:e8:0a:6f:de:cd:6b:d7 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Berlin für Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin für Materialien und Energie GmbH
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): de:63:56:d5:fa:31:bc:35:56:e8:0a:6f:de:cd:6b:d7
Serial Number (int): 295604413693502179911165919575417908183
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 22:3f:25:7e:a7:7e:e9:d8:2b:fb:db:a7:29:35:cb:15:2d:03:8e:32
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): fe:a3:60:89:dc:46:79:2a:16:6d:1d:5d:39:80:8b:9a:53:b1:93:34
Fingerprint (sha256): 63:25:96:f8:5e:77:54:f8:47:7f:36:83:20:fa:ce:18:55:fe:48:cd:7f:c1:4a:74:12:c4:27:68:4e:67:9b:7a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate indico.helmholtz-berlin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indico.helmholtz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indico.helmholtz-berlin.de

Other certificates including the domain name helmholtz-berlin.de

(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de

Certificate

The complete raw certificate details for indico.helmholtz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295604413693502179911165919575417908183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Berlin für Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indico.helmholtz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679659752273858786997497646637446636523233765936467039668280902673435673696287943405055104922902379099521076219706532622403959738814363248210226178192363117688326915813410525550047645794691415222692220838702747134190113921305847526368204859870336776287452917219013338590920103178596748251788399729396290102748455428072203153751898113462366937813632839351404274166167089819120052073460927751483804139667867322011768968720747616993270824341549774894497409046820723352514741446878869744015541778495278241425892484306848646180086379404009162508600874321766353050987851973317581714051420767608572790781851523032901712592166765120201987834633267634675911846431874944788990217940890677900551071761575622418212552591724137071778028087692172296861885943673114590952564588716059359953050877834347252075195107767660745873094148915984636016086684105566355259039349165388575741914120678412255833773483231385636441996184234532900127927249844140432742532664463152096181492790023358063785929903516158021468004419594202130797015765246442548358840600586855847877327093148371357399764510176194167604076205843400437246637872159251495011610321432024558896517437531560723368995356003180322851365853946125749925515307903213658945851988196617474345720009253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							223f257ea77ee9d82bfbdba72935cb152d038e32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indico.helmholtz-berlin.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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