*.fioport.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:5e:43:74:d9:52:fc:c7:4a:42:57:b6:26:0e:9f:19 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.fioport.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:43:74:d9:52:fc:c7:4a:42:57:b6:26:0e:9f:19
Serial Number (int): 4477128071225890493421822224223870745
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ec:c2:31:6a:a8:8e:83:32:56:c6:25:19:51:e0:f7:28:8c:5b:a0:d9
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 35:f7:ff:9b:a4:97:d3:12:f5:4d:6c:77:7a:3e:b8:30:11:b2:47:7f
Fingerprint (sha256): 87:3b:6b:0b:8b:cb:76:97:85:56:fa:57:fb:26:d4:1c:54:38:43:af:e8:17:79:d9:cd:80:ee:a1:48:b6:91:72

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.fioport.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fioport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fioport.de
fioport.de

Other certificates including the domain name fioport.de

(limited to 100 certificates)
ssl.fioport.de
ssl2.fioport.de
*.fioport.de
*.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl5.fioport.de
*.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl2.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl5.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl.fioport.de

Certificate

The complete raw certificate details for *.fioport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4477128071225890493421822224223870745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fioport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741399630457381221417821824581872070325524515354165285366431128651347484558244559107057858236003514401084372066695558168702599557173134388491500756174212453939408609842614199845707723965778895077122074680765698984148588216000049842004633108259493995896357942289723118231267631859830646189571394058385591854077301355657105011910491032879807574318305463937216524072591439821401235760951616333321769825207659451810599587662171964198659189946238511961278174249556167909707280934374981349263921150217892248269509324102285172808275688377309917984107100495600948823930926393323566039321301078819458327137471957697206952832680248808426604116394013202970899077014971967226149601963804415022181363303154619366713906883410116614988384075663707289058637221200009998499080612305289584410596687344170289910050532820776694522997981288314480210810888968423037580074866022929144948620245836964627793208789838537336435915062207490470488154781835338695748043026074035805001645883996448235894071918928352863242232586870753569285604654466438974606782973961353080290100276660526444671383717698659185762285200523647924424249202634693119655483772138198864527621722936803468978601189058114648120556297894221381371896187681207888039774009962760887541838843499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecc2316aa88e833256c6251951e0f7288c5ba0d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fioport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fioport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001751c2eb71e0000040300483046022100dbc76150fe12836c10e571536e839fb1387f069aeba751bc7747a422c564c1a102210081a16802564bc194f4be2078e1f0cb3bb01e90ba5d962d24799d83dae65b85f90076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001751c2eb762000004030047304502201d9cec46063631e1a7554a59ddfc32e0f59824692def922d9e2d38000259480702210099b855c5539b932f57d26768b24069aac0bfdc82d755cc06d015dc890994b299
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ccd003f49fa419cf3d4e4e70ca6aeef214e8a9920a2471407815501a58c9414a650138797004ac7babfede5edc850bedaa8adffe109da1731bdef9646caacd1e2fea81de28e411b724f263499a59a35095e818f07be55cb037a64559962da1fb3d2661a7f3da82a640cc169d9d125c5f7d49f10a5ce64c5b1b1e73ab601230faa7c8df518a048e95183c4e65d2796f1af50710f803b1b0fba8f5e90081971ac63933fbe0bfa6653682ecd0e3932e100d01e719176d1f7c392dc52965389c3a6e7be54d5ee4c38ecd12ca8219ce97e68285c98648688d05856a337c9c79314b0487569d5e5b7003e79ccbe869059b0f4349f1c0860fd523f67e281eac8d170f1