*.login.tchibo.com

- Tchibo GmbH -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 09:de:89:5c:9e:7b:c1:0e:d9:c2:e8:33:19:b6:46:28 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tchibo GmbH

Organization: Tchibo GmbH
Organization unit: IOI
State / Province: Hamburg
Locality: Hamburg
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:de:89:5c:9e:7b:c1:0e:d9:c2:e8:33:19:b6:46:28
Serial Number (int): 13118527892813867299097263585428391464
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 0e:a7:05:db:ff:d7:ee:07:52:ee:2d:55:3c:20:b3:af:af:a3:7d:e7
Fingerprint (sha256): 7f:83:13:ea:a9:cb:2e:26:5d:a3:0b:5b:e7:2f:a9:9b:85:07:58:0c:bb:24:0d:52:35:03:ac:4a:25:24:c3:81

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.login.tchibo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.login.tchibo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.login.tchibo.com

Other certificates including the domain name tchibo.com

(limited to 100 certificates)
soc-med-agg.tchibo.com
brand.tchibo.com
recruitingtest.tchibo.com
blog-qs.tchibo.com
ssl.tchibo.com
deapp287.tchibo.tchiboroot.net
recruiting.tchibo.com
*.ship.tchibo.com
portal.tchibo.com
access.tchibo.com
access.tchibo.com
soc-med-agg.tchibo.com
jobs.tchibo.com
sip.tchibo.com
deapp287.tchibo.tchiboroot.net
soc-med-agg.tchibo.com
www.bestand.tchibo.com
soc-med-agg.tchibo.com
cloudbox.tchibo.com
deapp287.tchibo.tchiboroot.net
www.bestand.tchibo.com
blog-dev.tchibo.com
*.tchibo.com
*.login.tchibo.com
portal.tchibo.com
soc-med-agg.tchibo.com
portal.tchibo.com
*.tchibo.com
blog.tchibo.com
portal.tchibo.com
access.tchibo.com
*.tchibo.com
sip.tchibo.com
recruiting.tchibo.com
*.tchibo.com
blog.tchibo.com
jobs.tchibo.com
blog-dev.tchibo.com
www.tchibo.com
*.tchibo.com
jobs.tchibo.com
*.tchibo.com
blog-qs.tchibo.com
soc-med-agg.tchibo.com
*.login.tchibo.com
soc-med-agg.tchibo.com
*.login.tchibo.com
sofi.tchibo.com
*.tchibo.com

Certificate

The complete raw certificate details for *.login.tchibo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4zb7KpdCWOUXzu/vR1Av
vp3sJIlhcfxxig3ERwqTl9N8k+BuXK02nQaU5G+R6LdoTOfEjZbVf2w79rFdMosL
/jeF4Z5Ki9XO/7WpgLohY+ZCurZcMsarGIXZylS18nFMELU9/zb0uOpKkVGKldbg
WFIy7xpo8WdeANrHwWzSv7Chk9zidXa4Jo2YIC42a5yvonRkVarM5F8elv9vMkqL
L8njP3DEGLmWx5nno28zNZzApUcGGMW4/nfLdlcphkq6wCTO5cZJY1aQ1L+PPcU9
uPG/5KuNxliO+I9VH7blET5vzJoXzLXUcEmwMEbgc/QL2bNIkjyCXCjQeggpcJuP
WlAZ9H9OLaxAX7VIuej0fwn1xAfpSclCHCPSfrGrmFsluJYA/ivoGeLHx/YWgShG
ZOMOoqv+lPGEe6GE/1Q9PQqLSyl/lyHfAr8TfzV/hrb64/vDK2qgq9xXonwG2K6s
zV0BgLifM9AA8vFwVNMFLMErUHbF2q527a9LNsm3D/cR8ppRUqb89CDTxFd3Xf7g
Q7/LXnrGxD81HKr/QUG5qfd9NnkWbHAaQd2fIOC3bS/tNhwSg+QmZ1Jk3Jk8X21N
0tstlttLqlwtGV0uUhaWbEDRr3fu6vSyjdWKE4T9MtyV/XcwZ0DgLpSngnUDjkl5
+EteNZitBUFwsLjghhuWIXECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13118527892813867299097263585428391464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tchibo GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IOI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.login.tchibo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926955388575302958882655572683451949656992234940835433770172765545187896022520569451790835194461090464173562407876569471878336042370473192491606414552357393530034529663323092126440020555759165587378903723078028026872242579349187260304446516289573408955984568556205055877092243401192543465529333521519187002672080008923106801174087268685346651778143758777761447408026266331061477472859128034528269147746678196242061526940072414453844102751823787817941770084511793496800342257293071219585992647105196659519730243192866248094129765649494178829837626827915898281413344358576801918381962898745425197208782284000531701567769849538623012121389130897336100683386006190067106458929123076195575456405174470642667005869291176417931804380995663871462482373282433661686963967090037386159085676691700977765777088952751947834478951821583653258610370266020778545937568841065945749800973935288638916396730083390895705273371563460526313792649523133374093193876008354270332340819836295581539587397234269630588860524730042034558459482179263984073826730842269177693797188039154326856586856251515750890024214968906831523294389646858086006707676677425208389585652111451987910122767282636869086285595597408680833265461116639033631071662176150754475594097009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.tchibo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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