erp.felix-schoeller.com

- Schoeller Technocell GmbH & Co. KG -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 3e:e3:40:1f:68:55:b9:9c:14:62:51:20:79:f4:79:b4 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Schoeller Technocell GmbH & Co. KG

Organization: Schoeller Technocell GmbH & Co. KG
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Niedersachsen
Locality: Osnabrück
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:e3:40:1f:68:55:b9:9c:14:62:51:20:79:f4:79:b4
Serial Number (int): 83592087688129937873861421066744002996
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 45:03:71:51:0e:05:e1:eb:8f:d8:82:9b:57:78:01:39:bd:61:cb:f5
Fingerprint (sha256): 87:0a:f1:6d:57:fe:dd:9a:3e:60:3b:6e:dd:97:1f:44:a9:08:23:3f:53:72:c9:d1:93:58:58:8b:27:a6:4c:ac

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate erp.felix-schoeller.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erp.felix-schoeller.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erp.felix-schoeller.com

Other certificates including the domain name felix-schoeller.com

(limited to 100 certificates)
logon.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
mobile.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
edi.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
mobile.felix-schoeller.com
sslvpn.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com

Certificate

The complete raw certificate details for erp.felix-schoeller.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Eu4Yt9xenyA5iMJXzum
6IceijzdNRmZRMPfSSBMVAdpGCqNrmxmQZgLf3pYqoT7FnOr3kVnC5ZL6TCODNsd
HX66L5owCTe8e7fp7wgeKg5DylDM2iD5GDRl9rR75Iz2FZ/SyOjrLgRPiVYecTnW
zMzP0ZmDgiCweV6GfKa9xTnUdEs8GT9/CdIhQ1NnfRQq7bXi65s6wph2MkZWcIQo
FmDp13sSU/+nIqACiQScBhaCLtqwy6gIqfS/Pi0tK8QYOKzB99kFWPQOwLu/SU1K
vqQAApW5en4wzArIneB1GmPuk0SacfhmHJQ9aZQfYjtTNuTxZEj2R0SxQXxmcuVe
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83592087688129937873861421066744002996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Osnabrück'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schoeller Technocell GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'erp.felix-schoeller.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31849391902647172501023115630372947631704150606799319327203803188781707695457744360653032971305414597695828620418842923914061542251102266003426914191300057398117579127804368816824462017773951113383875244726405766651229049785624269713429710419748296719294023871655772979550879489412994055583244705474455814223248027133073326412033275344724315600003995909955555079271739449842152571472170929401257461211241055924599295648053443456755382308508519166011884832149424639132984019568914622413350043435935823463518233999083099801560528431246558533073383040466373262344167552628814294561995292773284895116400292718881236410039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.felix-schoeller.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00023cadf7140c74e932c58d0a16fed07a691aaff19e525cad744b7a95d183fa205571f8d324944b6b160b98133b877e0621c8b998728cc351613d4a97e15c3099771ec6df6ceefa3aa38d500b067829ac4d939c89200ad591452137500e8dd71df395a690c2ee4f869c61b6fbbcbd64dc72e044a3fe8267e580394072dc7e9d897e9f603000d7bdd51ff901d999efa49872191c925ee22409902076e996f8358bc9f6eabde7c8815600a54e34d2edbf9e9876802acb05bdf17b4d3a3e4ef2dfc936feba8c1517e208bac2e39b2ef0fd2c76f9bad8eea875c4aa9da14344645a3987dbec3ac27fbc095a63150dcac201cf36012090650573fb5a366653f9577625