fitcustomer.freudenberg-it.com

- Freudenberg IT SE & Co. KG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 49:f2:59:25:48:0c:72:bd:70:d0:39:80:d9:14:d2:a2 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Freudenberg IT SE & Co. KG

Organization: Freudenberg IT SE & Co. KG
Organization unit: MCA
State / Province: Baden-Wuerttemberg
Locality: Weinheim
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:f2:59:25:48:0c:72:bd:70:d0:39:80:d9:14:d2:a2
Serial Number (int): 98291987620258994695845475900531724962
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 27:03:39:8d:34:38:da:11:7c:0f:c4:8d:cb:4b:b9:e9:8e:bb:06:13
Fingerprint (sha256): 89:c9:4d:c7:cb:66:1d:ed:93:6b:0b:bf:0c:68:bf:28:1b:06:3f:88:35:65:aa:39:4b:e8:e3:1d:c8:21:6a:23

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate fitcustomer.freudenberg-it.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fitcustomer.freudenberg-it.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fitcustomer.freudenberg-it.com

Other certificates including the domain name freudenberg-it.com

(limited to 100 certificates)
Webmail.whm.freudenberg-it.com
infomail.freudenberg-it.com
*.freudenberg-it.com
74.123.36.235
support.freudenberg-it.com
webmail.us.freudenberg-it.com
infomail.freudenberg-it.com
mdm.freudenberg-it.com
webmail.cn.freudenberg-it.com
www.freudenberg-it.com
fcm.freudenberg-it.com
sip.freudenberg.com
itsslvpn.freudenberg-it.com
sip.freudenberg.com
info.freudenberg-it.com
panopa-websap.freudenberg-it.com
webmail.cn.freudenberg-it.com
fitcustomer.freudenberg-it.com
downloads.freudenberg-it.com
webmail.cn.freudenberg-it.com
itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
pool2.freudenberg.com
info.freudenberg-it.com
fit-as-ssl-vpn.freudenberg-it.com
www.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
Itsslvpn.freudenberg-it.com
webmail.us.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
www.var.freudenberg-it.com
www.freudenberg-it.com
*.freudenberg-it.com
info.freudenberg-it.com
servicedesk-qa.freudenberg-it.com
itsslvpn.freudenberg-it.com
servicedesk.freudenberg-it.com
www.freudenberg-it.com
pool2.freudenberg.com
integrationtest.freudenberg-it.com
sip.freudenberg.com
*.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
infomail.freudenberg-it.com
webmail.whm.freudenberg-it.com
*.freudenberg-it.com
itwlc240129-29.freudenberg-it.com
downloads.freudenberg-it.com
infomail.freudenberg-it.com
webmail.cn.freudenberg-it.com
info.freudenberg-it.com
webmail.whm.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
panopa-websap.freudenberg-it.com
downloads.freudenberg-it.com
crossgate.freudenberg-it.com
fcm.freudenberg-it.com
webmail.cn.freudenberg-it.com
beapartoffit.freudenberg-it.com
*.freudenberg-it.com
www.freudenberg-it.com
aw.freudenberg-it.com
fitcustomer.freudenberg-it.com
fitdemoic1.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
info.freudenberg-it.com
integration.freudenberg-it.com
servicedesk-interface.freudenberg-it.com
info.freudenberg-it.com
businesscards.freudenberg-it.com
downloads.freudenberg-it.com
boextern.freudenberg-it.com
Webmail.whm.freudenberg-it.com
PoolEU1.freudenberg.com
*.freudenberg-it.com
pool1.freudenberg.com
mail.freudenberg-it.com
itsslvpn.freudenberg-it.com
info.freudenberg-it.com
beapartoffit.freudenberg-it.com
info.freudenberg-it.com
www.freudenberg-it.com
sip.freudenberg.com
PoolEU1.freudenberg.com
mob-erp-m4s.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
infomail.freudenberg-it.com
downloads.freudenberg-it.com
webmail.us.freudenberg-it.com
fitcustomer.freudenberg-it.com
fcm.freudenberg-it.com
downloads.freudenberg-it.com
id.freudenberg-it.com
saperion-asp.freudenberg-it.com
downloads.freudenberg-it.com
info.freudenberg-it.com

Certificate

The complete raw certificate details for fitcustomer.freudenberg-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZNGnN/HkRorzuKewG6e
u5FVXvEW+9FbeWX4cdxNSVfz8lSmYajMQ5dKZ0C8YctMJN38s55WakPJ98mVORz7
5WejVT3nm6gIbSlDwLrGfgvTqG4R/UantCc4JBiZi4MxHVmM+JSdBGjkjM46KiZF
Cmly8np8VPQDMFWlBXm2Hjcp5ZckId0gqjHUpk6EyLXdhn+mvFIftF1j+XLXTR4s
AgmLfUPbNcrB+3yHAg31sL97GiaN20hqF7hK6dy2/WUS4Vz9dDSGTweVr4ND9TY7
ACKpMvca3GjzHKFvYVBIs6n+9D+iehyMItxJEYM4igi+Rtp5A07ZExyHm3XCYhOw
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98291987620258994695845475900531724962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT SE & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fitcustomer.freudenberg-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22416804398110897060853825367887888038040286941106575686174871854480322309196855188948551716756455682534456786052447830207143754590995521722451288550489272282998494810535721647266682806200895486091105894229420455364315073039290648047461217872276803370769608937989061481422378284244727739612913772816150841041950681479557808571334132613636973543124459296517236917944432281975292754061988072810587552540755432009056052122249489738690436603695698231737612645308755965003161709469355500850733936989191317703296636867906093810705444967520185108063886119470437898730758742961256066493024484463711463992487900452469268000919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitcustomer.freudenberg-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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