gw-ibz-h3.helmholtz-berlin.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HZB CA

About this certificate

This digital certificate with serial number 13:05:7a:0c:af:b9:46 was issued on by Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 13:05:7a:0c:af:b9:46
Serial Number (int): 5354046314494278
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 48:9c:f1:b6:c2:d5:8c:31:41:40:70:79:74:0e:86:f1:00:c4:86:0a
AuthorityKeyId: 5e:42:2c:b7:51:36:03:8a:c4:08:9c:81:94:bd:be:db:e3:4b:7c:dc

Fingerprint (sha1): c4:7e:90:7f:e3:8c:95:35:4c:40:5a:69:d0:34:ec:59:d5:3a:a4:f5
Fingerprint (sha256): 7c:05:cc:f5:a4:cf:60:fe:85:d2:af:c3:75:f8:dd:07:ef:01:a9:9a:ca:f6:b7:41:f8:06:41:a3:a8:fc:55:64

Issuing Certificate URL: http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl

Check the revocation status for certificate gw-ibz-h3.helmholtz-berlin.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw-ibz-h3.helmholtz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name helmholtz-berlin.de

(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de

Certificate

The complete raw certificate details for gw-ibz-h3.helmholtz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5354046314494278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HZB CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-12 13:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-10 13:07:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw-ibz-h3.helmholtz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799022293095454074334797208560944012424142990021847689345558041818719541838599027848748178938931171909097033900494957224658156978659185823965512212542348783403124996007913508141963481609667591129514988389396524487212569373515276582337870291539535936808952225154511872942012207748020254834411481255388139156229203938785202173287808644946215844298913362103295695775299160462656069919972530137288533031570601052697706334524050178770575414732267942253317864315149667848786496931499259150727852704247792038277574213619786559129899137294773488414870997148915071101254313337278174610548099867686938286013263286318208855591039996070350145585276269751132361721608911715082210474399808411246480261318334884898039142531772601133994071490965404406550114471934900881855656020858677055404731622738540327705279603802619527385650077207147452243440004637564068137289016630412963718904261356321709022254207676596466099877284624904909140455629885602448534107292349960303905370425788799236233104567621851642947829293489688536512559237462356771178626963126371849660117074896959448158457725128558702744922741978685439768173720110202711392085967699010862419519054671615357750306112079157735734366543597227882825413206945424528056605376689686803025032737359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							489cf1b6c2d58c3141407079740e86f100c4860a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5e422cb75136038ac4089c8194bdbedbe34b7cdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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