meindev.bitmarck.de

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0d:5f:a7:15:96:bd:c4:a4:5d:cc:eb:34:89:d8:65:c8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meindev.bitmarck.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:5f:a7:15:96:bd:c4:a4:5d:cc:eb:34:89:d8:65:c8
Serial Number (int): 17776621019612104669936409103532844488
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:76:77:5d:d1:15:73:23:43:44:96:e5:17:a0:20:73:44:44:2a:8c
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): a3:75:55:66:c8:d9:ed:c2:f5:21:24:b8:6c:8b:09:e7:be:b1:a2:f2
Fingerprint (sha256): 73:ca:28:ed:84:44:56:36:64:e0:5d:dd:31:9d:6d:23:6a:42:a7:c1:0e:24:bd:4d:7e:9c:d2:da:be:9d:be:0d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate meindev.bitmarck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meindev.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meindev.bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
*.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
siplync.bitmarck.de
lima.bitmarck.de
sts.bitmarck.de
apigwtu.bitmarck.de
vcsebravo.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
tango.bitmarck.de

Certificate

The complete raw certificate details for meindev.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17776621019612104669936409103532844488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meindev.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780338937412016419869353042433130230691298338325659468873780035400384723076327609471423568982637358973936007676655986245382979854626880898283803305725266892375580345628666850954948993972582279311575764307849721984507094314031372950499617290669359502835425256814583716753054722961628003553093373909622717284562831200979449284999592737683575956660978030093355853833634814020329600544097525876343112973259786745534549160443998603467750879271783512553571038552395602347792382970671991311024782130313849397563159275613898278888187111237464400859619847311590898206075895563903509413909307960026328697726012190867041106831719233748655298306465300821957592931992840591927798975245780680668972101857045499886334324079277531078792110359075704330236572254747120891323267929426307054927590281887343333826932747934213909519889871616217916025734184243976214219420483871965013978874623838782578606111612699972179052363337938821030168095812772930331144649774254064584108335108941442339312823210836172016102523623662858785175769588204109336598222545047014655498340131433476615137672816053349554808088074632769418239374333302924147494490847599537592163369039774826333283121669068966505925308788378282263320718349509446250372943668209211592309894624241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a76775dd1157323434496e517a0207344442a8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meindev.bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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