e-room.roxcel.com

- Roxcel Handelsges.m.b.H. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 40:e0:ed:e1:81:98:56:bc:fc:44:9e:51:96:37:f0:77 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Roxcel Handelsges.m.b.H.

Organization: Roxcel Handelsges.m.b.H.
State / Province: Wien
Locality: Wien
Country: AT

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:e0:ed:e1:81:98:56:bc:fc:44:9e:51:96:37:f0:77
Serial Number (int): 86238491024066781011219095297791094903
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 2f:e2:16:5a:b3:e6:71:b4:d2:0d:b5:0e:da:e1:99:a0:4d:0e:75:0f
Fingerprint (sha256): 67:3d:69:66:25:e0:83:c6:9d:1b:92:f2:63:cd:88:23:d8:35:c0:92:09:de:1c:25:f2:3c:bf:22:87:a1:12:0e

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate e-room.roxcel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-room.roxcel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e-room.roxcel.com

Other certificates including the domain name roxcel.com

(limited to 100 certificates)
offers.roxcel.com
servicedesk.monaghancoco.ie
support.bong.com.pl
offers.roxcel.com
helpdesk.porvairfiltration.com
helpdesk.llyc.global
roxcel.com
offers.roxcel.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
webmailce.roxcel.com
servicedesk.endrich.com
servicedesk.monaghancoco.ie
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
confluence.roxcel.com
roxcel.com
roxcel.com
servicedesk.monaghancoco.ie
roxcel.com
e-room.roxcel.com
pomoc.lekam.pl
sd.kormotech.com
cexp.roxcel.com
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itservice.roxcel.com
servicedesk.endrich.com
e-room.roxcel.com
cloud.roxcel.com
itdesk.solargis.com
roxcel.com
helpdesk.nauit.lt
help.idowa.de
roxcel.com
roxcel.com
webmailce.roxcel.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
cexp.roxcel.com
helpdesk.aldaholding.com
servicedesk.monaghancoco.ie
confluence.roxcel.com
itdesk.solargis.com
cexp.roxcel.com
servicedesk.monaghancoco.ie
roxdox42.roxcel.com
help.idowa.de
confluence.roxcel.com
helpdesk.porvairfiltration.com
roxcel.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
roxcel.com
servicedesk.endrich.com
cloud.roxcel.com
roxcel.com
roxcel.com
roxcel.com
cexp.roxcel.com
www.roxcel.com
roxcel.com
confluence.roxcel.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.idowa.de
confluence.roxcel.com
itdesk.solargis.com
monitor.bene.be
servicedesk.phmg.com
servicedesk.cerealis.pt
webmailce.roxcel.com
roxdox42.roxcel.com
roxcel.com
servicedesk.cerealis.pt
itservice.roxcel.com
ithelpdesk.ocugroup.com

Certificate

The complete raw certificate details for e-room.roxcel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86238491024066781011219095297791094903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roxcel Handelsges.m.b.H.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'e-room.roxcel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856702994549087159740807128952723569913278759675877698355120289514755787837690204332277585008401213227004212199037058153848559527548608636190626741171121735102936727170736480516359764584591759167771493893973896819193911124362863369832220526746915735495226104024516334345373356476328058187077637406123073300122483320284956418784870680028742249112992548128687298736454101094953920773461584304510401985861158850354277026950179883110797642077263879338092879153168500359632639225938035324251892271040064933960322410783315918562619149925433609700525572476412220112749262048983605420391775194441335347229618136842695741204829182716192540053774259505132689804618401369257839129056603902495657594130117031600160133602671049567740726644579405442384050632795152909337000871328342866988559283119015254035064534919576066463384905367449136689906984288627179183725915386203293349095265704594868252692244524398873010102057508069240778309112442240542762867807599159647459640449501450012583237320499427133826241920089561675648005628268437903744587337417200622646686295745319005787465398434468830488219965570781468532700138585612011451117420445130649453028804222566988039694882222017700198917771466272196192887021521690409330414513411565966660852522597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-room.roxcel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b041a83aeb04825d4aaaa6296d69276063cd9052dfe99869b7b60808531e186bccca12f30e65260ae2fb8a4e31c396d6d112f5385811251fccea32414a7e97db5ec59e21af115807e2d99bc8b60c428995c50d4d449caae490f6291b7dd5886fe53e9987c6c8bf6041396181563af5109c718e069c1c518b343f01a8bda9f23dd5f371b79950f8e3c825ec1bd64513bfac6f443e32ef7b667dadc25887bca2dfcae9862d4d8038f5da9015f4e270aeaecaf707eebc28eaffdf3f9b8b38aea684d2ac60112b0fddc5fd45d212322b21a5c16a1b180cdab6cf8bb7b5e95a64d177c464735d7d1d5b2534a0da5fe67d9a1bcd02067c236379e2ff5f6390436ae09