kundenportal.tg-verlag.de

Issued by thawte DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 42:0a:37:f7:97:a8:9d:0e:95:90:df:99:81:ac:4c:65 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=kundenportal.tg-verlag.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:0a:37:f7:97:a8:9d:0e:95:90:df:99:81:ac:4c:65
Serial Number (int): 87782105839210215454389224049692396645
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a

Fingerprint (sha1): 8a:65:ec:bf:e5:af:ee:52:76:14:05:50:0a:d6:58:01:25:dc:6f:d9
Fingerprint (sha256): 7d:22:c1:7f:9e:95:f9:6c:83:0d:40:ba:ed:79:f7:85:23:ae:68:47:31:50:d4:10:d2:75:28:a5:25:78:81:d1

Issuing Certificate URL: http://tm.symcb.com/tm.crt

Revocation information

OCSP Server: http://tm.symcd.com
CRL Distribution Point: http://tm.symcb.com/tm.crl

Check the revocation status for certificate kundenportal.tg-verlag.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kundenportal.tg-verlag.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kundenportal.tg-verlag.de

Other certificates including the domain name tg-verlag.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kundenportal.tg-verlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87782105839210215454389224049692396645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kundenportal.tg-verlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710205354305837632179547168996100479916040349099312765172412683126371589885785151116497883165612550531150199098565011081800049022405778489575723352827420687221385931759340651310624840541231268170272563156541783902837626591150301458519921938884608010174174884325488886774281459484875665122241612619387248375966544612610242544978906853553491499518137631671916452468944209758831493473934506927458495847447278465060677292570830408704535176453812476586054361672158884964036764602894164404765493728677182773315101896441634928262015261265238219202810157901258836175863374770141658185297287836797751612533268230763779681417430739652961714358397318150482693868729480948534416201835850504566035665674123459374666249353994568263807145339130650158780108496404031518820834988092067791081460654922308683134912432939940589583941658630466964820012426471314434415428176452342080456432057006556660280799355970152528177755344061685975585573109379149110932761111580587145107198437925068375095004762186808460033042203018546124575054934627644386614906006549013946963895751358389523678727348182224846746239037549937478840712555741667144067242633099594084530157752259956462136002532843121474477797820992641111759302934839985691364022785044922391984587602657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.tg-verlag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001545c69b35400000403004730450220379bae7b44f6a82a37c794c0930e1fa0b1dd8f275c9d64d566e9002398e411d0022100df9224923be3f33e9275fe46e53c3d86e9d2ae012c191aafa61dde65adf4d309007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001545c69b38900000403004730450220475f31257da6a523bd394f6666baf485f7420d444fefbe889176600ec19382eb022100c9457239ecaf18194ce999fcd6bae982218a6cbc2c956eca7a0b6ade51e3570f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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