*.pkrueck.com

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 12:36:be:c8:09:fc:ca:4f:1c:e3:23:3d:97:2b:c3:b3:86:6f:ce:5e was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pkrueck.com

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 12:36:be:c8:09:fc:ca:4f:1c:e3:23:3d:97:2b:c3:b3:86:6f:ce:5e
Serial Number (int): 103982693519625797805515038340767371732911640158
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 7f:d8:8b:2b:3f:c9:92:a2:7d:ee:09:27:b6:d4:53:9e:7e:78:db:ee
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 48:31:f2:49:df:50:bb:1b:01:06:f9:0e:fe:88:d8:dc:e2:6b:7a:bc
Fingerprint (sha256): 70:a1:26:f0:fd:7c:f9:c1:87:b4:3d:16:04:0f:c6:17:fb:56:b4:5d:71:d0:77:32:0c:2f:c2:5b:ac:51:71:eb

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.pkrueck.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pkrueck.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pkrueck.com
pkrueck.com

Other certificates including the domain name pkrueck.com

(limited to 100 certificates)
pkrueck.cyon.site
pkrueck.ch
www.captureonestatus.com
status.exolink.com
status.qnbefinans.com
wattsandcostatus.propman.co.uk
konstatus.konverto.eu
status.qnbefinans.com
status.beckers-group.com
status.jp.inbenta.com
pkrueck.ch
pkrueck.com
status.vleo.net
status.tekloc.net
status.beckers-group.com
konstatus.konverto.eu
pkrueck.cyon.site
cinema-lab.status.vistamanaged.services
status.eurabo.be
status.eurabo.be
status.eurabo.be
status.waterlogicglobal.com
wiki.pkrueck.com
pkrueck.com
wiki.pkrueck.com
studiomoviegrill.status.vistamanaged.services
status.scalerit.de
status.qnbefinans.com
pkrueck.ch
status.exolink.com
status.qnbefinans.com
status.eurabo.be
wallis.status.app.vista.co
status.qnbefinans.com
status.eurabo.be
pkrueck.cyon.site
cinema-lab.status.vistamanaged.services
status.qnbefinans.com
status.eurabo.be
status2.mssl.co.uk
pkrueck.com
status.madviking.eu
status.madviking.eu
status.eurabo.be
status.eurabo.be
server.medienmotion.de
status.tbft.org.uk
status.eurabo.be
statusiq.orphea-studio.oodrive.com
status.cs.redwood.com
status.eurabo.be
status.tekloc.net
mail.pkrueck.com
status.allgreenhosting.net
server.medienmotion.de
status.eurabo.be
*.pkrueck.com
status.jp.inbenta.com
status.eurabo.be
pkrueck.cyon.site
status.eurabo.be
status.jp.inbenta.com
*.pkrueck.com
status.hotel-spider.com
status.cs.redwood.com
status.exolink.com
bowtiecinemas.status.vistamanaged.services
status.exolink.com
status.eurabo.be
statusiq.orphea-studio.oodrive.com
status.praxisifm.com
status.poweredbydivido.com
status.absis-ciborg.com
status.cs.redwood.com
status.eurabo.be
status.pkrueck.com
status.eurabo.be
status.eurabo.be
status.eurabo.be
status.eurabo.be
status.pkrueck.com
status.eurabo.be
statusiq.orphea-studio.oodrive.com
status.eurabo.be
status.eurabo.be
status.scalerit.de
status.jp.inbenta.com
pkrueck.com
status.eurabo.be
status-mena.obrela.com
status.eurabo.be
status.galwaycivildefence.com
status.eurabo.be
ssl.pkrueck.com
status.allgreenhosting.net
server.medienmotion.de
status.eurabo.be
status2.allex.ai
pkrueck.ch
status.eurabo.be

Certificate

The complete raw certificate details for *.pkrueck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103982693519625797805515038340767371732911640158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 13:22:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 13:22:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pkrueck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720848718098033414950386977090970897261985404790269443740639330429551823734772514856023615592862472135042736475754518282598921167196708870528386051074477785768693556348165207243627891556044150492302559778610992568966022448784372081605633989446776850200815150782558156729642854227757268986570827621699713698834450328155446179054940579291982918310736305393404457757111126702093684876676642254282566258694246284831106768108669002211213183020231472453085213457617893995262688212920187587577425975445883250462826879184612897152005517279176759129590725570841405079287571685543266045764564230180585274029551421289204678656212313302839217350416944417091140641785218445001735641696001448923700294895661985294761040845009955205445215931114434739026220342367564150091110149584835217773095706423081514178754819434415792306700001456003840830146086552838790926954428137469216905193591858511092883576825071696821958900378883746196430923595463085721190914271881013900252040211100406426174148933766339699125965590691600708230505433959371406486994006298113622959645434284171756686040456000256778762574812707442550363914061331520934026725989499743141809210941595406644557772170593456249774630476899938611109909251875640824638034260617415212822649756901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkrueck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkrueck.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fd88b2b3fc992a27dee0927b6d4539e7e78dbee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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