www.flugwetter.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a6:e4:1a:50:37:1b:14:77:87:f9:17:2e:84:24:c5:30 was issued on by GEANT Vereniging.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): a6:e4:1a:50:37:1b:14:77:87:f9:17:2e:84:24:c5:30
Serial Number (int): 221836224681999084875508619166443947312
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c4:37:dc:ea:aa:fe:86:ab:f1:8c:c6:cd:81:70:85:4c:3f:ba:8b:76
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f1:18:14:2c:4d:72:d6:e1:f0:2a:9b:62:10:68:20:a5:82:ef:db:e6
Fingerprint (sha256): 79:ca:27:d7:ba:c4:2e:9e:08:d0:28:7b:8f:11:3e:1b:82:0f:df:9a:cc:12:e7:59:21:31:bf:f3:c6:5a:09:12

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.flugwetter.de

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.flugwetter.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.flugwetter.de
flugwetter.de
www.alpenflugwetter.com
www.alpenflugwetter.de
www.alpenflugwetter.eu
www.alpenwetter.eu
www.deutscher-wetterdienst.de
www.deutscherwetterdienst.de
www.fewis.dwd.de
www.flugmet.de
www.flugmet.eu
www.flugwetter.eu
www.met-briefing.aero
www.metbriefing.aero
www.pcmet.com
www.pcmet.de
www.pcmet.eu
www.swis.dwd.de
www.swis2010.dwd.de
www.wwis.dwd.de

Other certificates including the domain name flugwetter.de

(limited to 100 certificates)
www.deutscher-wetterdienst.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.flugwetter.de
www.deutscher-wetterdienst.de
www.flugwetter.de
www.deutscher-wetterdienst.de
www.flugwetter.de
www.flugwetter.de
www.deutscher-wetterdienst.de
www.deutscher-wetterdienst.de
www.flugwetter.de
www.flugwetter.de

Certificate

The complete raw certificate details for www.flugwetter.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221836224681999084875508619166443947312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.flugwetter.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3948737500525381793760615150192769586426064967091087733916570316412780539345286094932383085125445023891937193784426452847849652547663071263513119877784327237891646207343821852188521328183018143028648815408852683995978289886562170578603380092231777239484624817285615920297369530568775111352205447001669520283883638243888205373783485378884273565445844902575343811489609753057498294366184174674345611344125886279944166981390188747153773324819146693291945552523912953435245891399178792086525309014612212699820106767998141675612864603062679544451694877382172785611640722074210264005156568009770423817011808225137345491081333956947882838175555726540435101916785533261562503816470513973992281674104057503650658232714858100798527129122892349144858818957155696216399829413385331769561701667737437965574409720710971665231078205443964630700189689976276010643267973018352359609585909616138728251905813345829717133823491619086058493420631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c437dceaaafe86abf18cc6cd8170854c3fba8b76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d11916bdc0000040300473045022059adf2ea10621f34894edd9c80bbef75df824db45f3c6919343c82211338d424022100b2badb144054ce096e8e0b58915a284ecfd3edb8efd885040c9b2c26fdbf48e9007500a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018d11916c67000004030046304402202e4a808c196dbe35d05421f8026af42976a55a88118a33c44f33e940553d47b702206071e63caff504fa3fcf928eea0b5be3de6b433f63b75936edae31802c054b810076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d11916bb80000040300473045022100a66d4f3a3bc42f3d6081a56ac67ece51068e8ccef1497689bf78da3c7e9b7577022018a1590384cb34d9a639778872b7cfc32b07b4329fad53cf52c8ca0c95bcd567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (404 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flugwetter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flugwetter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenflugwetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenflugwetter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenflugwetter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpenwetter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscher-wetterdienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscherwetterdienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fewis.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flugmet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flugmet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flugwetter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-briefing.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metbriefing.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcmet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcmet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swis.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swis2010.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwis.dwd.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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