mail.a-rosa.de

Issued by GeoTrust DV SSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 04:8f was issued on by GeoTrust Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.a-rosa.de,OU=GT94250097+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f
Serial Number (int): 1167
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 8b:c3:fa:bc:d9:a8:43:1e:91:fc:08:4f:9a:cd:34:cb:9f:df:ff:a4

Fingerprint (sha1): 2a:07:b1:0d:0b:cd:3a:27:c4:94:08:2b:5d:bc:c9:95:f5:9d:59:43
Fingerprint (sha256): 64:2b:38:bb:e0:04:ad:63:c7:d2:03:ed:be:a5:f5:e3:38:55:ee:4d:00:03:63:eb:16:17:5c:79:b9:ea:e2:23

Issuing Certificate URL: http://gy.symcb.com/gy.crt

Revocation information

OCSP Server: http://gy.symcd.com
CRL Distribution Point: http://gy.symcb.com/gy.crl

Check the revocation status for certificate mail.a-rosa.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.a-rosa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.a-rosa.de
ng-mail.a-rosa.de
mail.a-rosa.de

Other certificates including the domain name a-rosa.de

(limited to 100 certificates)
www.a-rosa.de
kurs.a-rosa.de
webmail.a-rosa.de
webmail.a-rosa.de
sslvpn.a-rosa.de
a-rosa.de
afleet.a-rosa.de
a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
a-rosa.de
mx01.a-rosa.de
mail.a-rosa.de
kurs.a-rosa.de
m.a-rosa.de
afleet.a-rosa.de
kurs.a-rosa.de
blog.a-rosa.de
a-rosa.de
a-rosa.de
a-rosa.de
a-rosa.de
booking.a-rosa.de
blog.a-rosa.de
blog.a-rosa.de
kurs.a-rosa.de
blog.a-rosa.de
blog.a-rosa.de
webmail.a-rosa.de
a-rosa.de
mail.a-rosa.de
mail.a-rosa.de
old.a-rosa.de
mail.a-rosa.de
a-rosa.de
booking.a-rosa.de
mail.a-rosa.de
webmail.a-rosa.de
a-rosa.de
www.a-rosa.de
kurs.a-rosa.de
a-rosa.de
a-rosa.de
kurs.a-rosa.de
kurs.a-rosa.de
resort.a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
mail.a-rosa.de
a-rosa.de
a-rosa.de
webmail.a-rosa.de
www.a-rosa.de
m.a-rosa.de
www.kurs.a-rosa.de
a-rosa.de
afleet.a-rosa.de
a-rosa.de
a-rosa.de
www.a-rosa.de
blog.a-rosa.de
a-rosa.de
a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
a-rosa.de
blog.a-rosa.de
a-rosa.de
www.a-rosa.de
kurs.a-rosa.de

Certificate

The complete raw certificate details for mail.a-rosa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-31 12:00:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 03:43:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT94250097'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.a-rosa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712483225365449694034088181119242462576046194936520223129680023319280731532259265728079056584726977882603072845634662942166076718647766087292024992285769293241554949180425624758099334583237456339132408850430040502298300104524046659872532207595942553052241227173904681526399893464629086501284441196894517224910073258054664301193647519212270940953312247147835712851185770722377738188459269727421517434908340136179019163694594903145611051847258838027659737663207424311677149549766782114540517116464958046612346540121841307674827160419005769764559986194662291345713436092528271275089660798293756211539681249904136934706932573538194576498158098048794575873175500490511141557656080951515100028283487876105512683250791885875939454390410891298426691417034181603785836084935461738786849237106893772916237976688837345481007348059303234448140552023010765965901328447562034320944040316157227157668558743408100488219233049007369803323540518884916104175936649892421966210067742458517369030786949292509193797606515607308494902797305413053382213659034943954183346239835715018302903280701121600661984600492427519998653407104965056052880090689225885498495747199910898738921898932761101676638296947179860209616324827456123520364889272165262155456005339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8bc3fabcd9a8431e91fc084f9acd34cb9fdfffa4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gy.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gy.symcb.com/gy.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.a-rosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng-mail.a-rosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.a-rosa.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gy.symcb.com/gy.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006cc1d9121e7968d842b459e43124eeea0aa1f3aebd680967958c0c1c3500887665e0e7609be7cfa0fe37186a9c303abc4bc877b51696e6781750460797816c51a6bfa44d6a5ff1916734303e661652490f2cf6b96037362deb68d09946633eb0f085cbc4a543f09b9662d805a9f2fda9309e807a6b9c2976b1a619990f6d9d23d7c660d876a26ce5d5bc4ffddcdffbacb50381bf4a3e76fa4067a5d84f8c185962d73d67dcc1f78c5ccb003d1865b03900c813b8cd4ad8c4095cc4fd728a9880ca8112ed3f29ce251b42f554f79606414cf578452ebe0b6e759cae2c538a68cdd4749b42386432968d71b276d92309e788f27fa137c683dd0296d2849cef93e4