*.omc.net

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:3c:b1:48:fb:22:7d:03:6e:19:34:a3:68:50:c8:44 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.omc.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:3c:b1:48:fb:22:7d:03:6e:19:34:a3:68:50:c8:44
Serial Number (int): 1644361575946984205421512902340298820
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 48:d5:2e:c5:6d:5b:62:38:92:ad:ae:c8:c5:6c:8e:34:c8:2a:e2:f5
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 04:95:9b:e4:17:4b:56:27:23:22:dc:07:5d:ad:ee:0e:1e:e0:3e:9f
Fingerprint (sha256): 6a:3d:ac:5b:33:df:d9:1f:fc:a4:a9:e1:24:c6:5e:aa:34:8c:ab:4a:59:24:41:c9:de:04:6d:93:9e:13:d9:a4

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.omc.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.omc.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.omc.net
omc.net

Other certificates including the domain name omc.net

(limited to 100 certificates)
webmail.omc.net
swg2.omc.net
sslp1.omc.net
sslp1.omc.net
*.omc.net
www.cluster1.igefa.omc.net
mx-cluster.omc-mail.de
www.cluster1.jpre.omc.net
mail-cluster.omc-mail.de
sslp1.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
mc01.omc.net
*.omc.net
sslp1.omc.net
www.cluster1.jpre.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.omc.net
sslp1.omc.net
ftp.mvg.omc.net
mx-cluster.omc-mail.de
*.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
omc.net
www.cluster1.igefa.omc.net
*.omc.net
ocp.omc.net
www.cluster1.igefa.omc.net
www.omc.net
www.cluster1.jpre.omc.net
*.omc.net
www.cluster1.jpre.omc.net
omc.net
*.omc.net
www.cluster1.jpre.omc.net
www.cluster1.jpre.omc.net
www.omc.net
www.omc.net
*.omc.net
ftp.mvg.omc.net
*.omc.net
www.omc.net
sslp1.omc.net
www.cluster1.igefa.omc.net
www.cluster1.igefa.omc.net
sbund-www2.omc.net
ftp.mvg.omc.net
www.omc.net
www.omc.net
www.cluster1.jpre.omc.net
sslp1.omc.net
webmail.omc.net
*.omc.net
m.testing.cinemaxx.omc.net
mx-cluster.omc-mail.de
sslp1.omc.net
m.staging.cinemaxx.omc.net
*.omc.net
www.omc.net
*.omc.net
www.omc.net
mc01.omc.net
www.cluster1.igefa.omc.net
www.omc.net
mx-cluster.omc-mail.de
webmail.omc.net
sslp1.omc.net
vmm1.omc.net
www.omc.net

Certificate

The complete raw certificate details for *.omc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1644361575946984205421512902340298820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.omc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 602099628015761784436556859056712907977475303728012488129355691751429477644284988133811703413955310467774640468088186625521613575785816871495736345261268429053579318674054272680017583559117965009318096142377564268012064799447010592898771916823550553904329913219705829171869551295568289975043014653869648913189832313372627519518558928465298580120363815226505752271842783083726719075905343480402244030176137423035978312045094337021646556760078738301834434647031008387535620625371930445512101882363212563839875519460955492789413657491008862540387070671994862695819120782751997479079525148476842544582384513139379236377532875758876667868134662240022829910713299766530335457197643427747339243071984932780997770676997096338141006534287475734393886889146138496473552126763487107571004831120504549553365098302413954984437117449130362088917485705026331945436194247215449218702370722662377014765490859256531104154383303926376930056456420223755286815541516838056746999712521383566611170888337023959104945300092751986503920186961633934734411229461621734818580052831892415608389476335599363919420632249084338162579549336125906845876724228508389303631754754472910809832810862193051132735204271152848179978107143828873490485020006669153676968536381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48d52ec56d5b623892adaec8c56c8e34c82ae2f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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