kundenportal-chemnitz.tg-verlag.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:48:0f:48:36:c1:44:15:71:c1:9a:25:80:64:9d:a1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kundenportal-chemnitz.tg-verlag.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:48:0f:48:36:c1:44:15:71:c1:9a:25:80:64:9d:a1
Serial Number (int): 11007979297611425104611038270161460641
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a9:4b:10:83:09:47:9e:dd:2e:80:4a:00:50:5e:f5:0b:a0:65:9f:03
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 74:97:44:5f:17:30:d1:c0:39:20:a9:18:bd:4a:53:c4:fb:4b:55:22
Fingerprint (sha256): 7a:81:81:97:d9:ca:53:1a:9e:49:0b:84:6d:b0:6f:50:ec:22:79:fa:64:4c:a3:a1:ac:68:03:a6:37:2a:98:af

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate kundenportal-chemnitz.tg-verlag.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kundenportal-chemnitz.tg-verlag.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kundenportal-chemnitz.tg-verlag.de

Other certificates including the domain name tg-verlag.de

(limited to 100 certificates)
kundenportal.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
tg-verlag.de
tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
www.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
extranet.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de

Certificate

The complete raw certificate details for kundenportal-chemnitz.tg-verlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1vooN8aEM2UJQ2Bxgb60
L7uKU0ZUGzPdvy3rYz+3ZeoceSgTeFdmbwHm/kbMFsB4Y57RszzNuJ0DMnBg2bMQ
2Eohj3/aoQT74MfcaqpJTM4MRbOu0ZbPWcsxc2nlGld4wp+BAq0elgS1IdFtE+Ju
fPhzZYHjoak4c5qV/LGUZxluzjKJGGm1/l3ZsUKNdQgvNGFh5A3i2Ok9oztPTpoV
TLku/4T7BtR/RdX2uCVwCQIrFvTLU4C2gJnRxuaO2GjAmT6DolapFyPKALmkzkrn
KkxKW128z/6bsT5pHQeVd1yaukLzVdzMLdg+iT0CnTrIq40Yya61k3veX1iyGaKY
PQxf1bU8hIFdtG48W+t5yyKewuftk6ap2ZvxR8wyrT0yaBD4Whal3vl3QmIBX2/C
VDQ9Xq3t0avzDZKy5X/trHeMNKAxMXHRGJSbYVclFFIaj/+qn4t3fbco6u7skcsd
QXZpXQN/fIyYPE1jfOGFweoWy02iOgZdLjFlV799g4cRL4/TjRzxicAo+XJXaCa4
pqPR6wVMKHri5izmDp1QuPSQ7WepLdqBKpyInXuXpk6ukp/0GLn+iEKKIRCpiyGG
d1Zn37D+R1fnyFnw5rWMotncCCBnx4gMhYW6533g2cmAGK74uDz7OwP4VZKAXy4I
HDHPPlxsjr1J42Zbghbw5SMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11007979297611425104611038270161460641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kundenportal-chemnitz.tg-verlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877030361546293908575865091994987145767248858378977925599096041566625821525725610527546865497930912017432640665445604849849392264666461024302297221075234256766225794690011080071417318836220127062856485475902450520484585930792282288082482051375797101755630629690105095555561427426357091539874149052290689348209212470065664450380733331953317266610441102086765661397351779671156007236372197628076652676311394239094749948789939499282586848407562008647033027754365745618575005239742923642983570939775428137254314342727333927074107043533262547388339777894327582939918170974295684318268168591792953431108698633840387526085997548312587145965634807757074579552455919657787692929020965086281131287858508081389441149822061071716963016805885744292578684303475752958466172631681533424885640784510326964372873405649555436343946741563470292678277725885323137977582845741028456374243474304257831839773312310396848112906806469451363915762489213445633379499425644348555130138400048473207384526701917064369402333234930695249996444275478864917677882614721423106472776884145730848901157002348854128452170930113810221476788398058595249343838548291083799786901505257454438605321688750882770741887990911234256962231103830996347813520215058333920271027725603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a94b108309479edd2e804a00505ef50ba0659f03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal-chemnitz.tg-verlag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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