wes.karlsruhe.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 39:7e:e5:dc:87:93:4d:7e:fe:7c:9a:8f:4e:57:3e:83 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=wes.karlsruhe.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:7e:e5:dc:87:93:4d:7e:fe:7c:9a:8f:4e:57:3e:83
Serial Number (int): 76424887307869136793604770213318311555
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 50:4a:be:8c:db:0e:3c:19:51:89:0a:ec:0f:14:02:53:67:32:ef:cb
Fingerprint (sha256): 74:25:49:12:87:6e:c8:e8:f0:9b:92:c7:41:76:cc:be:3d:ce:33:36:ab:d2:33:61:bb:da:f7:aa:88:16:0f:cd

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate wes.karlsruhe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wes.karlsruhe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wes.karlsruhe.de

Other certificates including the domain name karlsruhe.de

(limited to 100 certificates)
m.karlsruhe.de
matrix-seg.karlsruhe.de
www1.karlsruhe.de
*.hhs.karlsruhe.de
presse.karlsruhe.de
matrix-seg.karlsruhe.de
lernfabrik.karlsruhe.de
www.carl-benz-schule.de
*.cbs.karlsruhe.de
moodle.cbs.karlsruhe.de
wettbewerbe.karlsruhe.de
www.carl-benz-schule.de
wes.karlsruhe.de
www.karlsruhe.de
www.karlsruhe.de
wes.karlsruhe.de
www.mgg.karlsruhe.de
owncloud.mgg.karlsruhe.de
ces.karlsruhe.de
*.hms.karlsruhe.de
web1.karlsruhe.de
*.karlsruhe.de
www.staatstheater.karlsruhe.de
www1.karlsruhe.de
dienste.karlsruhe.de
kita.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
mail2.karlsruhe.de
transparenz.karlsruhe.de
otv.karlsruhe.de
*.list.karlsruhe.de
hms.karlsruhe.de
moodle.cbs.karlsruhe.de
moodle.ess.karlsruhe.de
kita.karlsruhe.de
ces.karlsruhe.de
*.ces.karlsruhe.de
*.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
kita.karlsruhe.de
formulare.karlsruhe.de
bekrujzq.web.belwue.de
wes.karlsruhe.de
cloud.mgg.karlsruhe.de
www.karlsruhe.de
huebsch.karlsruhe.de
cloud.mgg.karlsruhe.de
kalender.karlsruhe.de
cloud.staatstheater.karlsruhe.de
groupwise.hhs.karlsruhe.de
*.karlsruhe.de
*.cbs.karlsruhe.de
filr.ces.karlsruhe.de
geodaten.karlsruhe.de
web1.karlsruhe.de
ess.karlsruhe.de
*.staatstheater.karlsruhe.de
lernfabrik.karlsruhe.de
lernfabrik.karlsruhe.de
matrix-seg.karlsruhe.de
opac.karlsruhe.de
wes.karlsruhe.de
otv.karlsruhe.de
cloud.mgg.karlsruhe.de
*.karlsruhe.de
rhin.karlsruhe.de
moodlex.hhs.karlsruhe.de
lernfabrik.karlsruhe.de
otv.karlsruhe.de
www.staatstheater.karlsruhe.de
moodle.hhs.karlsruhe.de
*.karlsruhe.de
web3.karlsruhe.de
wettbewerbe.karlsruhe.de
moodlex.hhs.karlsruhe.de
dienste.karlsruhe.de
*.hhs.karlsruhe.de
opac.karlsruhe.de
formulare.karlsruhe.de
moodle.ess.karlsruhe.de
wes.karlsruhe.de
lernfabrik.karlsruhe.de
as.staatstheater.karlsruhe.de
matrix-seg2.karlsruhe.de
dienste.karlsruhe.de
moodle.cbs.karlsruhe.de
opac.karlsruhe.de
matrix-mdm.karlsruhe.de
outlook.vbk-online.de
*.hms.karlsruhe.de
*.hhs.karlsruhe.de
wes.karlsruhe.de
kalender.karlsruhe.de
*.karlsruhe.de
*.hhs.karlsruhe.de
www.staatstheater.karlsruhe.de
heimstiftung.karlsruhe.de
formulare.karlsruhe.de

Certificate

The complete raw certificate details for wes.karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtJph5GuX0zy1ulqrL+B
PqumWejzmbHIZ3gHHo6wXyb7xU5tMMwcrvKAO2D5GyQa1AeL+R0botmm4waLHlpi
XlRfepxdHiKdMLWQUNkeQeuHqM95Bb8WGBUfUYJsuloK5O+awxMjK3tFpNja4oEe
bOQSATH7zyQYeyGrjRGQEu3fhRl9FYCoiY1MVrJ38vej9aRY+zVApyvUR7AfUzZD
+mDFA6M4sK5os2hd1CCGR0pYX+8FXtoD/8mWKYq1k2tFSzUq45O90neU8v0Vkykt
zt5OZuRL+9Q6zL+zFJ/HPqRDqnyPHuzewWoPq0ph+h5u+Sd52/4CuIVwCSf5wUvk
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76424887307869136793604770213318311555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wes.karlsruhe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24089036078753092251564560675321251153565270560485684312697289742728695524751489121137849892744576791774746238788500871876410615506083087033550656925138487817577994657704195235230989575720826642839497756374266654411601469975577666333056497715986372210769118429719982541898948837184384658418818363382992280526830701333177625833670425814516327804211861074473501557393668218790717945888082970450576277451901835312460538332914002797635460158028246777286948632896687657766691472009582481140807945317370594876335611071243942115551184150329659885499662931767876950690638633216476798691646400870903041478986284562502977840159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a5d45fb1885a72b53381ad5c8d043c3a7d48689b5cc857d5f10a003acb4b9e05e2aa954be551510f091c76a2f2bda6dc5cd6d0496ff3ef7956a3c8cff7d9d1cad34aa8edbda1de803ccc38963d16ae6a565f7af866d6f684c27aa439128eb7466b0611876c7241bc18f8e0dc6f97a119c25e7746e1e97838067017659a1bb5b7f40700b4b8ce7417c496f72ab55e71d57813d673a008e500cfb8f35840342f32af987d4c9ccd1a144ab8acb37726b66919c8350ad8f9c00df885dac6d5fa52677e6fb70506b094b3f23ea40bdbb000c6e014298336fc2855eb7b19fdc92ee84a9f79ddaac22d8802bbc6d5d5d5826693d12e8412198357eeeeb73c4642413f1