DV SSL/TLS Certificate for xphone.grafgermany.eu

Certificate is witin its validity period

Issued by DigiCert Inc (Thawte TLS RSA CA G1)

About the xphone.grafgermany.eu DV SSL/TLS Certificate

This certificate with serial number 05:2b:b7:40:45:45:26:fe:ed:57:6b:76:30:6d:18:8e for xphone.grafgermany.eu was issued on by DigiCert Inc.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for xphone.grafgermany.eu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:2b:b7:40:45:45:26:fe:ed:57:6b:76:30:6d:18:8e
Serial Number (int): 6873125516839511832878854166490716302
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 31:35:f0:af:56:2c:f2:fb:09:0b:57:d5:89:be:dc:f6:74:cd:0e:b8
Authority Key Identifier: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (SHA-1): 05:85:72:df:55:b6:9d:c5:a7:02:58:9f:79:2c:d8:a7:bd:7a:b7:af
Fingerprint (SHA-256): e4:0b:aa:84:22:63:a8:a1:46:cd:99:f3:e6:19:6d:38:71:4f:4e:d7:d5:4c:bd:b3:d4:bf:33:00:fe:f4:f6:3f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate xphone.grafgermany.eu
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xphone.grafgermany.eu

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

xphone.grafgermany.eu

X.509 Certificate

The complete raw X.509 certificate details for xphone.grafgermany.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUUaDArUkZx5U6vAS3hD
HyxnRPHdwlVOFDBZtnernUKn0lfOfeAKYnwa5jM1jiCgjIH6VFrvugodctnC0Vka
iWY8qSMStS5H6gMxLdFymrALxBHuTZXjA2YcdrXY2dn3HySlFe8LTsFZaJKuDLkg
oNgFtKtkQkRjwzG2J73RmII9J6clVSm08PIxwPMU0M2tqpxCS/f8vsgWslkT4K8M
zTJOUtR/R4kyJCQBbaMop5HqpPUJdCnD4p4msB+VFq9bumArTqG2iK7/C6GSafLi
1UdORFWZYy14WZpjpfwBcOztnVCI/UjtKLTlbU/wFtfYj83l8AFzvowPkPECh/wZ
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6873125516839511832878854166490716302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xphone.grafgermany.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23388161759802571336484176599923221286351865621585577878717169694530595415924857311780619839712758245828895543402056201697553064128197568032928818960804837334701038274012005975458147846704049503065889388499703483628453792739109603827141336840155559689335258891205975575987246033070326280665967702591356270173341456115541600840279889033941980111784415401918709821089669663580791880220250610149093019887121777438528099709737462014820258718138884272859133527728964297900578923015744877074726941933441998765685256511343235343117992819160640579263710230720639020417786327192411435697517260299477368728268433922924190898557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3135f0af562cf2fb090b57d589bedcf674cd0eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xphone.grafgermany.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c06e473588e8fd046a170a51b5643f277103e8f12231709d602c36f528a3dfeb88c14c7a0956d037cca539446a60f386a04e076c140c40a3982b3e5591f7ab5c816515fc4c20d3f60757c08273c875933e384050ce5889c4e5f8c0ec7eaf515be82fd0cf736c6b4f2c692318941f57776ac7cbe37e6874e873dff432a77a4034a50f88595912a9a330a6a4cf4b574d2712a895477693bfe89dc3e04d0670a899ffef3695812633b9ace75d13acbf9cc9707d4c5024fb956052e95f2f20670c4e286d970892c6f2eab9ae515cd91bd40221cae47841827a1d427b0e4357387e256e5645e8ba8b3e6d0660540efe337019a9aeb41155c30f803139cae946b3f18c