www.aribya.de
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 21:f3:47:a3:1a:5d:23:bd:8e:06:a8:49:e9:bd:ac was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.aribya.de
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 21:f3:47:a3:1a:5d:23:bd:8e:06:a8:49:e9:bd:acSerial Number (int): 176280097542803691989532759793712556
Serial Number lenght: 118 bits, 15 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): d9:17:39:11:fc:1a:b0:cb:3a:18:55:2e:f1:37:19:49:d0:35:f8:e0
Fingerprint (sha256): 6b:27:2f:93:d2:c2:83:b5:85:1d:75:db:60:59:21:a8:fa:02:0e:a4:fa:92:09:14:7a:4a:cd:4b:99:8a:28:9e
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate www.aribya.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aribya.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aribya.de
aribya.de
aribya.de
Other certificates including the domain name aribya.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.aribya.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIPIfNHoxpdI72OBqhJ6b2sMA0GCSqGSIb3DQEBCwUAMEcx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdS YXBpZFNTTCBTSEEyNTYgQ0EgLSBHMjAeFw0xNzA4MjcwMDAwMDBaFw0yMDExMjUy MzU5NTlaMBgxFjAUBgNVBAMMDXd3dy5hcmlieWEuZGUwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDC1qwGtTz5I4E7Y+arAdX5TCZa/SXtpgj+nbVAwsH+ i7triMhH5s04o8WXCjGVVIeFFeUcJLSVMQctiitcGCGCtYCjvO/IYq2tdD0IvB9Y H6glYwQZ18D76aiKgRAH5NqmyLAbAQEfCUhizuRGxKmaY3XgU+fLAnPs0hMqplS3 e5qo+2XGu0D8F5QR1ZsTH7V/NXUF8twqRRM18KlHoj1FF2lc9IIW+u2HTSCbVmly etWgR8Zy+9ThRYSOU7c30Y+Nnoq19Wg9H5l9EXNJTN7Y+YlY1mirJ1TBFXT4fkrR iatJxJO2dSbfNc9MMb17ytKTcxIwRQhQABtJSLPOatcdAgMBAAGjggN3MIIDczAj BgNVHREEHDAagg13d3cuYXJpYnlhLmRlgglhcmlieWEuZGUwCQYDVR0TBAIwADAr BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNybDBvBgNV HSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBp ZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6Ly93d3cucmFwaWRz c2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFEz0v+g7vsIk8xtHO7VuSI4Wq68SMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYI KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Muc3ltY2QuY29tMCYG CCsGAQUFBzAChhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNydDCCAfgGCisGAQQB 1nkCBAIEggHoBIIB5AHiAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbs vswAAAFeJIkHpwAABAMARzBFAiEAiQKm9H9cEXQqZYKlRO9nTcm1pHYjiHM+uxGV v3X22MECICQ70Q+GkHksp04HOE0Ijq6Co7ov78oyU4mBklQHWIr4AHcApLkJkLQY WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFeJIkHswAABAMASDBGAiEAhPuh PXrKVTawhm3hjpGh2zNSmrppJsswReWhH7TnB8ICIQD0gTZRSOkNUkrd0Z7w4g5p kcrIKlZVCnONe0cjc8NQAAB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6 qP3LAAABXiSJCaAAAAQDAEgwRgIhAOKJcNTYyfjYOEulJQ96aXqPe/hHj09CMJdA OhGnD8e/AiEAtOgNZCxlBx7NBJOUQ2/zkqrAqD0FYCql9H8v/Xi1vosAdgC8eOHf xfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/Ptm4pQAAAV4kiQhJAAAEAwBHMEUCIGUV OnE3mogBniLSTUaCYWEabppsrs75mf8bHnaVzZ88AiEA5jfc7Ancup2iQmab71cX s78BQ9nPKUrp91IygsufUcswDQYJKoZIhvcNAQELBQADggEBABOmG4ekhqHDKw2M t9GBQ/T6V33ipWxfEliAdNAT12v/dYqQ9dYLlz7LXPsmzVq684Q6lD9HLfHArSwr nHGgZKqqLlqh2QjLBlrKaKb14AbTwycnkse7lm704QIYPS6Mw5GICJSQ55XvvTTn 0ii0Q62h/qYtFxSftMWq15uXJe61fP+DzLcOKrDlJH0uI1YhI3QfHSDlpZPBEq74 hoXl9/H6BtmyMk2foU/kcuFByckIaNOtYPljgnsBTSSox8Uv74dfCruZIDgoZvXk wWfy0xnyfowZ/kPwfHVmEywdlaJ0FjWRvcpU0njbbLFdZrDaYvV2iXMh1SwDndqN T31fQlE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtasBrU8+SOBO2PmqwHV +UwmWv0l7aYI/p21QMLB/ou7a4jIR+bNOKPFlwoxlVSHhRXlHCS0lTEHLYorXBgh grWAo7zvyGKtrXQ9CLwfWB+oJWMEGdfA++moioEQB+TapsiwGwEBHwlIYs7kRsSp mmN14FPnywJz7NITKqZUt3uaqPtlxrtA/BeUEdWbEx+1fzV1BfLcKkUTNfCpR6I9 RRdpXPSCFvrth00gm1ZpcnrVoEfGcvvU4UWEjlO3N9GPjZ6KtfVoPR+ZfRFzSUze 2PmJWNZoqydUwRV0+H5K0YmrScSTtnUm3zXPTDG9e8rSk3MSMEUIUAAbSUizzmrX HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 176280097542803691989532759793712556 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.aribya.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24596089860856990763742035751445842846159009601478811835602835486255811374644382821384098102246381545783902874520215787683831278420179576928875581892922005769839746081118106567930822637955334606570620576361736508768557731661100125778947970518635472597607775591651099198352033381740929755994165901273214018133216553239691246664788782233264217878642081768051791854547942292969451853969782911477214709986281063165757947932083646921201112634619915351973955183978656440602019455752406801032961559506233052418459830279890365430119249519550850047050556740483092573172427802596519133146165454855186444153195877057119702931229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aribya.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aribya.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0013a61b87a486a1c32b0d8cb7d18143f4fa577de2a56c5f12588074d013d76bff758a90f5d60b973ecb5cfb26cd5abaf3843a943f472df1c0ad2c2b9c71a064aaaa2e5aa1d908cb065aca68a6f5e006d3c3272792c7bb966ef4e102183d2e8cc39188089490e795efbd34e7d228b443ada1fea62d17149fb4c5aad79b9725eeb57cff83ccb70e2ab0e5247d2e23562123741f1d20e5a593c112aef88685e5f7f1fa06d9b2324d9fa14fe472e141c9c90868d3ad60f963827b014d24a8c7c52fef875f0abb9920382866f5e4c167f2d319f27e8c19fe43f07c7566132c1d95a274163591bdca54d278db6cb15d66b0da62f576897321d52c039dda8d4f7d5f4251