vpn1.mbtech-group.com

- MBtech Group GmbH & Co. KGaA -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 4b:84:5e:45:e0:c8:f7:cf:b6:13:12:be:e7:e0:43:92 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

MBtech Group GmbH & Co. KGaA

Organization: MBtech Group GmbH & Co. KGaA
State / Province: Bade-Wurtemberg
Locality: Sindelfingen
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:84:5e:45:e0:c8:f7:cf:b6:13:12:be:e7:e0:43:92
Serial Number (int): 100379394952008842076032064072777221010
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 4d:a2:72:c1:71:a0:15:73:52:30:18:64:ba:76:0d:d7:36:9f:d0:7c
Fingerprint (sha256): 73:69:da:6f:55:09:fc:8b:69:d6:57:2e:b5:e0:f0:2e:2f:fd:ad:5c:34:4f:2c:12:2e:f3:ab:5a:1d:2f:42:de

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate vpn1.mbtech-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn1.mbtech-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn1.mbtech-group.com

Other certificates including the domain name mbtech-group.com

(limited to 100 certificates)
mdms.mbtech-group.com
sip23.wp.corpshared.net
psm2.mbtech-group.com
fahrtenleitertool.mbtech-group.com
career.mbtech-group.com
psm10.mbtech-group.com
*.akka.eu
sip13.wp.corpshared.net
sip23.wp.corpshared.net
academy.mbtech-group.com
psm9.mbtech-group.com
sip23.wp.corpshared.net
stores.za.com
extranet.mbtech-group.com
emeeting.mbtech-group.com
sip23.wp.corpshared.net
whoiswho.mbtech-group.com
polarion_apm.mbtech-group.com
mail.mbtech-group.com
tsportal.mbtech-group.com
sap.mbtech-group.com
fahrtenleitertool.mbtech-group.com
academy.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip23.wp.corpshared.net
psm11.mbtech-group.com
academy.mbtech-group.com
mx2.mbtech-group.com
academy.mbtech-group.com
logon.mbtech-group.com
psm13.mbtech-group.com
prorenal.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
email.mbtech-group.com
zzzc.cc
www.mbtech-group.com
psm6.mbtech-group.com
polarion_apm.mbtech-group.com
share.mbtech-group.com
email.mbtech-group.com
psm9.mbtech-group.com
www.mbtech-group.com
sip23.wp.corpshared.net
career.mbtech-group.com
fahrtenleitertool.mbtech-group.com
*.akka.eu
www.mbtech-group.com
sip.wp.corpshared.net
email.mbtech-group.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip13.wp.corpshared.net
*.akka.eu
vpn1.mbtech-group.com
mail.mbtech-group.com
mbtech-mdm.telekom.ebf.de
psm14.mbtech-group.com
extranet.mbtech-group.com
share.mbtech-group.com
share.mbtech-group.com
vpn2.mbtech-group.com
cadmin.mbtech-group.com
mobile.mbtech-group.com
psm7.mbtech-group.com
www.mbtech-group.com
www.mbtech-group.com
ouen.cc
career.mbtech-group.com
psm.mbtech-group.com
extranet.mbtech-group.com
prorenal.com
mbtech-mdm.telekom.ebf.de
email.mbtech-group.com
psm7.mbtech-group.com
psm3.mbtech-group.com
sip.wp.corpshared.net
*.akka.eu
sip.wp.corpshared.net
psm5.mbtech-group.com
sip.wp.corpshared.net
psm12.mbtech-group.com
academy.mbtech-group.com
www.mbtech-group.com
sip.wp.corpshared.net
www.mbtech-group.com
psm.mbtech-group.com
guestwlan.mbtech-group.com
www.mbtech-group.com
vpn1.mbtech-group.com
sip13.wp.corpshared.net
psm6.mbtech-group.com
psm11.mbtech-group.com
fahrtenleitertool.mbtech-group.com
extranet.mbtech-group.com
email.mbtech-group.com
psm2.mbtech-group.com

Certificate

The complete raw certificate details for vpn1.mbtech-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwidjFUQGyPztCVTWRrSk
6iyfx0KQUjyfJjBR3OFPxJSWTXxvSFN/iEbp5jgpcUO7c7225B+ui089NduOHV2c
Cwa7aVSCdCTnnJG5klYnCNdJmlO/8DQk9TljZNMHr6AV594dKAziV2H3nz2lRi7S
EWpTMZ9bx2mtcgkg4f1eYe0/iE/BqXgqtZQmsgGiuSWMF27/QIJmgvxjJFzp19Qi
/ypW+NMw+bIKaiJHZsT5d0MJO6EG6y3Gp3SJqXQQhOYw70mchvV7rl2Pnux9iaRY
L8s5RTA2Da7vSKrHrEGmKjKpU2zU+Q7tKm4pPHl2v2+k9skRwXJeBGSkIBQdZ38k
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100379394952008842076032064072777221010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bade-Wurtemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sindelfingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MBtech Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'vpn1.mbtech-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24509653638322207841249029016163592775855603452868312725947436895836981315057050226580340668116456176859469785361527461134201608540025881473835761821907852173287274204905178355007643649402872441823535704070231330529678184076242954383178994218784592035697717588311182672387218041724698488407954009422704952533579204086876802352997974241491490337070915058283361445506948834167174707093758925198095331538157438117306914404648348487386941196426594944272574068817089260855748646608561418771189279996026471001820379685919532939001223692981748331087657135689648734900206605767604729228422416451581420444083734401519974294779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1.mbtech-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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