www.tunero.de

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 12:59:1c was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=NBz2ipfA3w36gParN08ejinBh62t44q7,CN=www.tunero.de,OU=GT87013914+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:59:1c
Serial Number (int): 1202460
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: bd:80:7d:13:3a:4c:0a:70:e9:4b:7e:43:15:d4:04:d2:13:e6:1a:64
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 26:03:af:40:1b:40:42:79:ba:ab:ad:7a:b8:66:af:bc:70:8e:93:50
Fingerprint (sha256): 6e:f6:a2:bf:40:c7:7b:75:d9:db:58:28:da:05:cd:3d:ff:93:7f:30:4f:5c:c8:08:dc:2e:57:a2:0e:be:19:77

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.tunero.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tunero.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tunero.de
tunero.de

Other certificates including the domain name tunero.de

(limited to 100 certificates)
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de
www.tunero.de

Certificate

The complete raw certificate details for www.tunero.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1202460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-22 07:03:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-19 18:18:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBz2ipfA3w36gParN08ejinBh62t44q7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT87013914'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tunero.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723256681623335708878533606674882862759855360473297387631758853215726640142621175121451980742841061789098025723631796027800779626199563299546019410023893126609742315094553530695117863113954842928887229195929108158127844648759350287663212048546520410481649633501355896332984634187538106560511857396152416816340840060947247238706875276455167104298418927109670995527312199945978044427670959834979432102033035910526563953990168311419017369988792634083050483184622820232597327708491795384650728984883665491892189208038830698266343419108159587601956586043024541012733380838325144490392706919491534964787441554469343834983868714408210217379395491095154505945288609775177235409196470865774124691519629187427464406570755988661582311999636196397017516094371214951785657796029247985778574555443267953504972784227190505782905424503995286557092597432683669318297264255837624711444303170883385442819081031521190790755077839551694416577043038605125547433819181314374533156097403531748751349208585162035518042427900888807799319002692020797962332863393237864782001920520623382441798789596780749213825592185709094074518217417481945101065580956402288143361059293674086302977688846938359936322001379621112088504772566569654126447982211573894093082056691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunero.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd807d133a4c0a70e94b7e4315d404d213e61a64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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