*.gba.msg.team

- msg systems AG -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:43:0e:97:89:b5:fa:84:9f:1c:06:bf:22:70:47:48 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

msg systems AG

Organization: msg systems AG
State / Province: Bayern
Locality: Ismaning
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:43:0e:97:89:b5:fa:84:9f:1c:06:bf:22:70:47:48
Serial Number (int): 14969687802962343787284836410041845576
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:13:d4:f8:23:3f:97:87:df:8a:a0:26:b4:74:10:9c:93:6e:21:df
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 3b:c6:ad:3f:59:a1:3e:bd:b2:ff:99:90:ca:28:51:6e:2e:79:1c:bb
Fingerprint (sha256): 68:78:2d:6e:5a:f4:42:20:ab:91:51:d9:35:23:c8:a6:9b:34:3d:d0:f5:7d:21:5f:21:34:0d:e4:44:ec:4b:47

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.gba.msg.team

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gba.msg.team

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gba.msg.team

Other certificates including the domain name msg.team

(limited to 100 certificates)
servicecenter.msg.team
*.automotive.msg.team
*.de.hub.msg.team
*.spielwiese.msg.team
customer.gbc.msg.team
*.awsdev.msg.team
*.spielwiese.msg.team
chatx.xqt.msg.team
*.dnstest.msg.team
*.xt.msg.team
mep.gbp.msg.team
ct-dev.hub.msg.team
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
vote.xt.msg.team
*.gbp.msg.team
*.rt.hub.msg.team
*.dnstest.msg.team
*.spielwiese2.msg.team
support.ethos.ltd
*.dnstest.msg.team
*.dnstest.msg.team
apps.mro.msg.team
*.spielwiese4.msg.team
*.xis.msg.team
airflow-test.zt.msg.team
*.spielwiese.msg.team
*.automotive.msg.team
*.zt.msg.team
minnosphere.com
*.dnstest.msg.team
*.spielwiese4.msg.team
*.publicsector.msg.team
operations.gba.msg.team
minnosphere.com
cd-dev.hub.msg.team
guru.msg.team
*.spielwiese2.msg.team
*.xis.msg.team
guru.msg.team
ai.msg.team
*.spielwiese2.msg.team
*.gbm.msg.team
*.gba.msg.team
*.gbg.msg.team
guru.msg.team
status.msg.team
*.ipw.gbv.msg.team
*.spielwiese3.msg.team
customer.gbc.msg.team
*.spielwiese.msg.team
*.gbl.msg.team
guru.msg.team
desk.locster.fr
aditoapi.bsm.msg.team
*.publicsector.msg.team
*.myapp11.spielwiese.msg.team
*.apps.oc2.msn.msg.team
support.42nerds.com
support.evocion.fr
*.apps.oc2.msn.msg.team
*.msg.team
guru.msg.team
customer-test.gbc.msg.team
chatx.xqt.msg.team
*.gbl.msg.team
*.demo.hds.msg.team
servicecenter.msg.team
guru.msg.team
*.spielwiese2.msg.team
support.fyooz.co.uk
tamara.msg.team
aditoapi.bsm.msg.team
minnosphere.com
zoho.profitroom.com
servicecenter.msg.team
*.gbp.msg.team
*.demo.hds.msg.team
vc-dev.hub.msg.team
training.xt.msg.team
*.demo.hds.hds.msg.team
support.xn--musikverein-grningen-2ec.de
mep.gbp.msg.team
pm-dev.hub.msg.team
guru.msg.team
*.xt.msg.team
*.xt.msg.team
*.dnstest.msg.team
support.tpc-group.com
sd-test.msg.team
*.gbp.msg.team
*.gbv.msg.team
servicecenter.msg.team
*.spielwiese2.msg.team
*.spielwiese4.msg.team
support.crmsocius.co.uk
soporte.esycontrol.com
support.bimequity.dk
*.dnstest.msg.team
minnosphere.com

Certificate

The complete raw certificate details for *.gba.msg.team in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14969687802962343787284836410041845576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ismaning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msg systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gba.msg.team'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782250874277711503961405553357994239143270345096878126737809060690396976114731080314692993418537147802002185785072697175617019167581836849579560254779517950059208904733517371569836822667730274140094008233951821256620119494348940663977332884751433830876773039045368919403113875425614220641189832112974027499362721762432592218024758883380779555900160699057208766715416291695743234399583064285580399998439217003619485446638639232241802693504921275210363489075540564053966419041406854461181482998653717288893166581559410939344435005592846161528293969154728600694863668332566638686419878113203283244581054876822357952111178771416050101587064889820675519622911915176911102045819085052940617815851937055606387798690531688064891964159415829599010580917941821669072718604441245905675309120639989910776394111263282711913575286832587806367965283321397235721314695073321731389723585176966112537883803209632721415109467535621627723937435122170954582592662890734976788482748216190732659132311741732063161287506891599930460585528698559945619069496174790269974993548114457586822050534331560748365112439576934152247070773108653780805649249300297914018033175255365999667561329614536818194085579421386919563962477102855134691506390935932213187205986571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c13d4f8233f9787df8aa026b474109c936e21df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gba.msg.team'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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