*.viversum.de

- viversum GmbH -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 6c:eb:5c:35:11:52:8b:e0:b0:68:65:25:7d:5f:39:36 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

viversum GmbH

Organization: viversum GmbH
Organization unit: IT Department
State / Province: Bayern
Locality: Nuernberg
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:eb:5c:35:11:52:8b:e0:b0:68:65:25:7d:5f:39:36
Serial Number (int): 144778683492663785613899303064807881014
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 9c:de:d0:82:d0:44:b7:2e:59:a4:52:ae:00:44:38:10:2a:ca:a7:ac
Fingerprint (sha256): 79:11:1d:6f:af:9a:34:b3:f8:66:9d:df:74:ce:44:09:36:91:33:d7:7a:36:fa:2f:2f:9b:79:cd:e9:85:a9:94

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate *.viversum.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.viversum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.viversum.de
viversum.de

Other certificates including the domain name viversum.de

(limited to 100 certificates)
www.viversum.de
trck.viversum.de
*.viversum.de
astrowoche.viversum.de
ssl810159.cloudflaressl.com
trck.viversum.de
*.viversum.de
dev.viversum.de
ssl02.viversum.de
*.viversum.de
trck.viversum.de
news.viversum.de
trck.viversum.de
lp.viversum.de
lp.viversum.de
viversum.de
www.viversum.de
api.viversum.de
dev.viversum.de
*.viversum.de
trck.viversum.de
beratung.viversum.de
beraterportal.viversum.de
trck.viversum.de
lp.viversum.de
trck.viversum.de
*.viversum.de
viversum.de
dev.viversum.de
www.viversum.de
vivcdn.com
api.viversum.de
ssl02.viversum.de
trck.viversum.de
trck.viversum.de
*.viversum.de
www.viversum.de
trck.viversum.de
vivcdn.com
ssl02.viversum.de
*.viversum.de
viversum.de
www.viversum.de
api.viversum.de
www.viversum.de
www.viversum.de
viversum.de
trck.viversum.de
viversum.de
trck.viversum.de
www.viversum.de
beta.viversum.de
adventskalender.viversum.de
viversum.de
trck.viversum.de
adventskalender.viversum.de
trck.viversum.de
ssl02.viversum.de
beta.auramind.fr
stage.viversum.de
www.viversum.de
viversum.de
www.viversum.de
lp.viversum.de
ssl810158.cloudflaressl.com
beta.auramind.fr
trck.viversum.de
ssl02.viversum.de
trck.viversum.de
*.viversum.de
*.viversum.de
stage.viversum.de
www.viversum.de
*.viversum.de
media.viversum.de

Certificate

The complete raw certificate details for *.viversum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144778683492663785613899303064807881014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nuernberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'viversum GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.viversum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735742298625957851322736162830560760448289941855708692389521444843876751645665115323877272732625079372175645397936720093229685247015746386931871825250887558948494808609310504596230287628722533931822587357743957633027799460472953757619727318602203818785380911062732795802730714685611424798983566687617960315552993511549221756721187774800955617580672166728903809058464127876232125875991318220335162721767223856867849859057507152648163256050908413444728501784081857330377408787405236487877532289704858870730456159462035343810748156408767842964521151436207481180124424097373555129754544085182852749248499880605821769297034629479172341607757517374672107084304470878435236359146005357346981314661004774725865927189205375292409430093494410831778144793290723958218365520808652772546158825656992190706014484444648304740829702554552231829439756196294415794470622024435793514009285128916967876527239030599486892578086183442146081171899504880909161639822433348135266114540131860608128875607044614636477650766787611315056455443777118812316872017867267533138201187987577170520655664462042858056690443592701474050648956507991779539927418305387260266130699431567881302127196581335278712390807981817359188051360628915803852518277657024897277036025581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viversum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viversum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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