*.clinton.de
- Clinton Grosshandels-GmbH -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 77:60:b1:00:d7:e5:63:fa:eb:6f:69:b4 was issued on by GlobalSign nv-sa.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Clinton Grosshandels-GmbH
Organization:
Clinton Grosshandels-GmbH
State / Province:
Brandenburg
Locality: Hoppegarten
Country: DE
Locality: Hoppegarten
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 77:60:b1:00:d7:e5:63:fa:eb:6f:69:b4Serial Number (int): 36945608921847485923387730356
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 81:56:29:48:ec:34:bb:fd:14:ba:41:44:27:43:d8:91:4a:2e:b7:70
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): bb:97:41:3e:eb:d1:b6:ec:b0:d2:4a:92:f7:6f:18:28:b4:e2:2a:b9
Fingerprint (sha256): 7f:21:ef:b6:f9:44:34:13:ff:5c:cc:bb:b7:22:2d:d7:dd:49:3b:20:76:17:22:94:cc:b8:33:60:c8:20:c0:df
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2Check the revocation status for certificate *.clinton.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.clinton.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.clinton.de
www.clinton.de
clinton.de
www.clinton.de
clinton.de
Other certificates including the domain name clinton.de
(limited to 100 certificates)
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
dev.clinton.de
www.clinton.de
emm.clinton.de
dev.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
filetransfer.clinton.de
www.clinton.de
www.clinton.de
*.clinton.de
*.clinton.de
filetransfer.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
emm.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
dev.clinton.de
www.clinton.de
emm.clinton.de
dev.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
filetransfer.clinton.de
www.clinton.de
www.clinton.de
*.clinton.de
*.clinton.de
filetransfer.clinton.de
www.clinton.de
www.clinton.de
www.clinton.de
emm.clinton.de
www.clinton.de
Certificate
The complete raw certificate details for *.clinton.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIMd2CxANflY/rrb2m0MA0GCSqGSIb3DQEBCwUAMGYxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMTcwOTA0MTMzNjA1WhcNMjAwOTA0MTMzNjA1WjB0MQswCQYDVQQGEwJE RTEUMBIGA1UECBMLQnJhbmRlbmJ1cmcxFDASBgNVBAcTC0hvcHBlZ2FydGVuMSIw IAYDVQQKExlDbGludG9uIEdyb3NzaGFuZGVscy1HbWJIMRUwEwYDVQQDDAwqLmNs aW50b24uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+c6GCSap YHF2mW1LEJ5TQSWyXtXlny2QOkWEwe6ooanZtw4B4bqbB01Y0PgVKEMD13UVoLRe PaWU7g3GBVDT6toEDJlgJFpTqHvhfet6/hMbdxKnFojSPGW8Ntm6fBMOw4XW1Y42 WQw4UfIf9ev2DwCYCLqhdwQyg4L/Qaon1Q+TuL7sS9r7rGX49HLgNUgZlqYWU8Tj vXswQzqNLNVW07yo+HckuutRUdRwhth85D5oYw5QZI0oPx9D2yAuFdldmuCuvOg1 9kYoYBt8m/v6gpQNVNY/b6rfTNgpMYEnd7WJWf/9p9H8991Wf5iQl3dKaJ003Gng 4LwdPX+jsy2JAgMBAAGjggGuMIIBqjAOBgNVHQ8BAf8EBAMCBaAwgaAGCCsGAQUF BwEBBIGTMIGQME0GCCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24u Y29tL2NhY2VydC9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEF BQcwAYYzaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9u dmFsc2hhMmcyMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEW Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEC AjAJBgNVHRMEAjAAMDMGA1UdEQQsMCqCDCouY2xpbnRvbi5kZYIOd3d3LmNsaW50 b24uZGWCCmNsaW50b24uZGUwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB0GA1UdDgQWBBSBVilI7DS7/RS6QUQnQ9iRSi63cDAfBgNVHSMEGDAWgBSW3mHx vRwWKVMcwMx9O4MAQOYafDANBgkqhkiG9w0BAQsFAAOCAQEABE70gWO5yoeEQp/5 Re2V7NSZGkK9xlrU+XljajPywgVSLL0r+b1DXTX3gx4vg12Be3mMWuE8drIMn9Ye QI8I//PIalzx6BosVxU6b4w4vO6DeBTyPl55lDrTYSd0+hrGDp7nm06vfd2skR9y s3TskHMuTNZISL9BK8gQThCNLBJKpHFQ62wNrcPIaECK6qC6P+hOOs3Ah8xtvx8C fqnKXiCLrL3ZQNLMxzXjJd+IhAKqUfCOaJefMMGYXFTuctjehqOp2unuz4n2xK61 w+JLR+4SsOCvOWV45ICnbejvHMgbWXE09wfFPPog46ugK0zAsTNVnboROXhEs4ch h7Im6A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnOhgkmqWBxdpltSxCe U0Elsl7V5Z8tkDpFhMHuqKGp2bcOAeG6mwdNWND4FShDA9d1FaC0Xj2llO4NxgVQ 0+raBAyZYCRaU6h74X3rev4TG3cSpxaI0jxlvDbZunwTDsOF1tWONlkMOFHyH/Xr 9g8AmAi6oXcEMoOC/0GqJ9UPk7i+7Eva+6xl+PRy4DVIGZamFlPE4717MEM6jSzV VtO8qPh3JLrrUVHUcIbYfOQ+aGMOUGSNKD8fQ9sgLhXZXZrgrrzoNfZGKGAbfJv7 +oKUDVTWP2+q30zYKTGBJ3e1iVn//afR/PfdVn+YkJd3SmidNNxp4OC8HT1/o7Mt iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36945608921847485923387730356 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-04 13:36:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 13:36:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brandenburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hoppegarten' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clinton Grosshandels-GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.clinton.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19563883255820227882880172262730638109789865131430347711518455688526321950485010937114614031504288093793351532189134616082335803268441493376085328052528578377849171223011671179349955539135168304810329325334728413885992457251406100986541710052793663107879239129529634958800673935752697080072444479831830871680454151638172864088499112681188632720701667169252995638815751831318554952656006117577093183800152932558910334925049599893195228109309175779834719694324092325089351310567738724876633820992944031541729057856340627505004348211855441066197831054016553667543940849720082177891100352810943836965274573649625031585161 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinton.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinton.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinton.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 81562948ec34bbfd14ba41442743d8914a2eb770 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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