createyourowncareer.de

- arvato systems GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:9a:cb:78:58:1b:d1:ba:e8:95:71:c4:f1:cc:22:f8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

arvato systems GmbH

Organization: arvato systems GmbH
State / Province: Nordrhein-Westfalen
Locality: Gütersloh
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9a:cb:78:58:1b:d1:ba:e8:95:71:c4:f1:cc:22:f8
Serial Number (int): 12766792542075961595601237674845545208
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 18:e1:60:53:48:41:1d:20:ae:ee:68:7d:f1:c0:fe:d2:a8:e4:9d:c8
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 5f:fc:99:49:7a:49:cc:b9:29:39:df:48:12:e2:69:1f:cc:1a:bd:de
Fingerprint (sha256): 7d:01:f1:6e:9c:8c:31:10:f1:ca:fb:95:90:68:84:f3:1e:ac:29:02:66:ff:c1:f5:80:18:89:7c:5b:bb:8b:a1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate createyourowncareer.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for createyourowncareer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

createyourowncareer.de
www.createyourowncareer.de

Other certificates including the domain name createyourowncareer.de

(limited to 100 certificates)
createyourowncareer.de
alumni.bertelsmann.com
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de
createyourowncareer.de
jobsearch.createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
alumni.bertelsmann.com
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
createyourowncareer.de
createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de

Certificate

The complete raw certificate details for createyourowncareer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTP8H8lU3C726Wt0ri94
i2EHtvSWjurxllc3uGb/80//tN6oaCUd+EYjw2IpK83XGgEDKTn6Z1p65z90DAqs
PDyILeyZaBr7d0UA1i9gcUowhXixkAVXtf/nZ+JlnVxtsoxcFLX09oyrLuyDdPtY
aOa46t3tosHldDmWT2j1cR7mCUn1Kqbm8bwNfRS6fZV4K3MX7Lqb/CcUCmvopT9P
/NDNb5sUpezRJScWxvNgju8dCryrzbdTNY3DcqtwWc81YDtGxfAxeQ5QR0hWAVhL
j4bAQovzwjMNwwH8wqohtY+LEiSTui9i4yUNHwCDek+/dEYkrDq9OGcGpbqzOpka
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12766792542075961595601237674845545208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gütersloh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arvato systems GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'createyourowncareer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24894580768208744320220182443759645783893587053592931092315465023079006400587558847833052743271554608169016021349639771052865294621847541827918414604711784376401160091598938017839144038842164819778414919034138207208952497910730403493751519959621712762291424748806607275985531669919102944688682053657050938278767664521800775053072832263487414365639800178494048119841423019164491306166610279612583222611333748874431641103880400976072574803398186079485728730372392864230415108735585735207682326128035749842943474422917559776981726286888840239075342291919557914591426696433029865241068971944996945469387754904876891052773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18e1605348411d20aeee687df1c0fed2a8e49dc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createyourowncareer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createyourowncareer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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