webvpn.bitmarck.de

- BITMARCK Technik GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 63:ce:b6:5d:d5:e1:1a:f3:73:7d:a9:27 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BITMARCK Technik GmbH

Organization: BITMARCK Technik GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 63:ce:b6:5d:d5:e1:1a:f3:73:7d:a9:27
Serial Number (int): 30888915892812485576915527975
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a1:27:7e:78:97:95:ed:fa:1c:da:48:e7:e6:e0:af:b9:94:52:7e:43
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): f5:ab:02:88:7b:7e:9a:f0:66:7a:4b:21:4f:d1:73:ff:41:2b:51:6b
Fingerprint (sha256): 63:ca:e1:e0:39:ac:33:d0:5c:ae:8e:a4:b1:4e:3a:28:d2:45:08:aa:ac:e4:6a:65:94:fb:35:72:66:b3:cd:eb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate webvpn.bitmarck.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webvpn.bitmarck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webvpn.bitmarck.de
webvpn.dak.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
*.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
siplync.bitmarck.de
lima.bitmarck.de
sts.bitmarck.de
apigwtu.bitmarck.de
vcsebravo.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
tango.bitmarck.de
webmail.bitmarck.de

Certificate

The complete raw certificate details for webvpn.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNBHLGNIDtgp9nbV/zE
xuCk7Rbd43WjdiFC22az3yE4ny1ABl8Ptg5OuMKJ123prDkc1o0wDeHFvtRLEGCB
E1+pWv/DqzYGmXxD990o1Dpk2Tj0PQQxeHSkxxgDNsOOzTMge8tc1cMw9q4Clm1W
gZSHT8mq7o7ayF9tyT8sWqIsNk/bbeJFQyjdyaZxqBpfdhA2M1bHfKzDtUm2yClZ
CsCbmX0vWtzdImH5nZWCfgPvSSDLNvlmhzNTsabxoXmYPjQ5HZxGlHiM+XyX1g1O
zQLdscZKYJlaILE1PLGzCalfoFrATUE03xm1bJJZgnpXogEFU8Xw3EO6yXKOOhzj
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30888915892812485576915527975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 10:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 10:56:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BITMARCK Technik GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webvpn.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26361740832601311555431416166763789040051484612903818954681687951346072799577345280295933877051607053768491076026277237229314695563773529904155222942919324439043242782207238622593584572807490255499724178548987890895264173173437766757671825515715694296199997061684714038221731415176451362707071406301236777439645117432060440837084434321168187708683570110022263400099322796951389723624006858149079734739583534571801933489787395066983321314519117991019172647339704913750136258706109702899949182769930627914962728213052428585779426842766838903617713275431399969396125659666480934411134456192698576718194519969323068220353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvpn.bitmarck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvpn.dak.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1277e789795edfa1cda48e7e6e0afb994527e43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165ae865c47000004030046304402203acb7f26eee2d3fa044123dfd385132ec87008fbb9913879e16e1c82a760c19f02204730728b3feb96f3c0215d82ce99a8a9a577457bb2603583fc2601e0de6bae660077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165ae865f520000040300483046022100c5d978329e39ae0b665efbb8f4a2acc429b38c4cd9a1221569852849171fa251022100808d511a7a14ba7bea52899a7014ed191898fe93551e5365bd71a0380dbd4563007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165ae865f9d0000040300483046022100b0e8a1120eb9343543e9b4e97a9c42a0850c760e4c291ca72150e170c4403a24022100d4150619e19e7f5ad13b48ea77e3884ace56fda5ad6f12d630456c6acf3a85c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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