radius.hmi.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HZB CA

About this certificate

This digital certificate with serial number 11:a7:f6:1c was issued on by Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization unit: Zentrale Datenverarbeitung
State / Province: Berlin
Locality: Berlin
Country: DE

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:a7:f6:1c
Serial Number (int): 296220188
Serial Number lenght: 29 bits, 4 octets

SubjectKeyId: d9:21:c6:94:a6:e4:bd:db:63:c7:eb:13:5f:71:85:a4:5a:e8:c8:4d
AuthorityKeyId: 5e:42:2c:b7:51:36:03:8a:c4:08:9c:81:94:bd:be:db:e3:4b:7c:dc

Fingerprint (sha1): 15:3d:3c:32:74:9c:f1:43:b2:30:0a:56:43:93:93:ec:0f:b0:59:cf
Fingerprint (sha256): 73:7b:28:ff:de:c5:96:40:c6:79:c7:96:cf:0f:04:ce:9f:ec:75:5c:71:48:1e:8a:cd:b0:04:ef:d2:af:0d:13

Issuing Certificate URL: http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl

Check the revocation status for certificate radius.hmi.de

2

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for radius.hmi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

radius.helmholtz-berlin.de
radius.hmi.de
[email protected]

Other certificates including the domain name hmi.de

(limited to 100 certificates)
portal.helmholtz-berlin.de
ldap.basisit.de
dicom12.hmi.de
mail.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
ldap.basisit.de
hmi-domain.hmi.de
g-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
site-intern.helmholtz-berlin.de
sf-intern.helmholtz-berlin.de
wiki.hmi.de
a-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
np-intern.helmholtz-berlin.de
gf-v-intern.helmholtz-berlin.de
mssb-intern.helmholtz-berlin.de
gf-extern.helmholtz-berlin.de
www.hmi.de
mail.helmholtz-berlin.de
dicare.helmholtz-berlin.de
gf-v-extern.helmholtz-berlin.de
e-extern.helmholtz-berlin.de
mail.helmholtz-berlin.de
gf-intern.helmholtz-berlin.de
diprint.hmi.de
test-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de

Certificate

The complete raw certificate details for radius.hmi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+z7iIGLtqIbfoliVsQH
q377o6v/aWg0BnBe5e4ftIaIt9v94AI9tJefXDresSRLKZ9gXiZFR7TBsU/pJ5O/
ILY59Milcm8dnNXc0UlUBlyvevbYl9T4fEdt0v0wHt5WhPIbTULjSpTJ3rDB75w4
luSva/uE5946m2SPmNfjJmlAmxhmg6kn8yF4OOC3qE0j5RspLIa/oQXKZCv84Y6M
6goTBNcGuDDXzuvoMyfw1vI03XQI3FycQrSJFceZWeAhLD41F8+EQV3DUybpK0fR
CQTHzg8pW256XUd5rZQT95Qdsyc5/PfgrlEJftdSr/3CLiLhLm85TXe8oVyEizFO
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296220188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HZB CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-22 10:23:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-20 10:23:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radius.hmi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28268002459106672173944486124001670596490512266131450957604267507343916027133977101711556315540174397155643463754454679855414612729183806476626318598743300987251993079409284916428199839871125025970070659281713396226911229372317212644411126325023788682449862610577248315784969187975389899575570824457278102326548940974563573034953215761138247142019903503556896359533539540953243517554981024216925760780141569611011332089152083378263291235602472451425705101454289594460671911230861127996984945844711505869202156484163448065571117556450572203892262721580396461197299379242955429128005232226202604087931422305960969981517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d921c694a6e4bddb63c7eb135f7185a45ae8c84d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5e422cb75136038ac4089c8194bdbedbe34b7cdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radius.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radius.hmi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e0dd87bb488eb78195c6cf711960115ac35ea73539cdd11dd19174b7f5199b8256e2f9e38f8260dc4e7c3ba5e319b4736327815902e78d459b20c053c4a4a86f3683380eda767308cbc62716e7343706ba91a7b85bfc7d93b0569bd55493dc6e589921cd9239a621d8970225cfc04d2c86b45248785450096b260324f0c4db943c4cc7f152b2cf1f46aed6cd36c21b3755bdde114da2e1b71156bfd9a7694676bdbdc5731d64b4bef4c29abfc9ddcf42bdeb22fb7a873224e016597b8db01e2d9af8175805dd41339a1f7d02e694e9b9f5a08dd51ccbe220806c81fb1898a435af51ad062c9f233ebca0700a11fddd2d43a9ea61a96daef09c673b4bfe463ba