kumasta.buendnisse-fuer-bildung.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 62:c5:f1:bf:3e:3e:7d:cf:13:2d:4e:49 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kumasta.buendnisse-fuer-bildung.de,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:c5:f1:bf:3e:3e:7d:cf:13:2d:4e:49
Serial Number (int): 30568830967091548952707550793
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 83:e9:cd:19:c2:29:b1:c4:43:ba:74:b5:21:85:c7:a4:01:08:10:3c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): f4:12:aa:6a:ef:c2:9f:be:e4:a1:c2:39:02:09:e9:cb:71:ee:94:11
Fingerprint (sha256): 64:d0:83:70:41:9b:5b:29:15:a8:75:2c:54:c4:e9:e3:f4:b0:af:81:cf:f4:b5:4e:d2:57:b2:a5:3e:91:72:77

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate kumasta.buendnisse-fuer-bildung.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kumasta.buendnisse-fuer-bildung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kumasta.buendnisse-fuer-bildung.de

Other certificates including the domain name buendnisse-fuer-bildung.de

(limited to 100 certificates)
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
www.alphadekade.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de

Certificate

The complete raw certificate details for kumasta.buendnisse-fuer-bildung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA065IaBR+tm9F00yhZIwJ
RpQhBrUIgkzQ8t6M+A6CDQPM9NLAx/ooCK8VqarMrTF5kTjeN8m75Xx1bavieLIk
2LjPKDYvTLnBkBOG/zDjSbXpphF+oxSejLgiD4NDglPJQ7jTvwVT8vEzImbajpd/
tNMdQZEELnZGvhlsyxcSAjhJYRiHk1rJW1c1fsvEnU5FsmbC0Z8a7wwZFbBSxpVF
iqOqO0GrDf06i9Ddhc7YZRf6JR+EMgxf+kWuQvZojqMYFOFe47Q6zEmxMTK1vamx
5V5Es9+J75du2xrVbJZ4L89BR6+PPO6jVV2odzNi49oejNQDPmt78HPjqR2Gp/as
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30568830967091548952707550793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-07 16:17:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 16:17:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kumasta.buendnisse-fuer-bildung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26722224418427898297890407263046314854214902327155563071902250720433330619336012095493290530609366166011545705265731674422432598742207479353899125846592147180631937226296047287749696098193324637710741993947816014296498982136285960819507764036298297270121008047538038544441672598532579658589443587025442996928126715741976296833236069302180285240543996618196483222348080722773714321906003613755196714504661638201767682734680968982550122342912737924219230868226017085193920095337831253950847771871183311969482684553002834384475740830241564228852332289759406435855625460522864599969013982697258243724339032934361112947751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kumasta.buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e9cd19c229b1c443ba74b52185c7a40108103c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a16ac6d3ef1a7fa47a5b9f1d20929131b75be02fc82915021b3c9e27519e702bd4390b04fa006637b3c3e4c2c5edbad85d4917d5baca13b074ebc07299d5f0fad337e588fbbb8f3b2cff6f836e26fa0ef0bcad1ebf5e6e8428772fc262a966feb33b82f3d207e7043c98ccf7e2f96a1dfcdc2f5e0cf2c06e5fec9d4e5f2f20992256fdc5fa5ff0f39802f24d0983c047fc15347460427877565c8e8010973c32bcb489b633595908259d6ad939e84ccb47d2690ee69e8076c1fed208e7e412a79c56864b215ebb3cdb8474ed36ee9157d00d635f090cecf08cdb3890b67480506d3981241b4ab4b4e883a05a0b81d50f6119ac197c5c0e96e721123e771734b0