www.dimarketing-salesconsulting.de

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:dc:02:cc:33:79:79:df:01:02:c7:6c:18:5c:5c:98 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.dimarketing-salesconsulting.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:dc:02:cc:33:79:79:df:01:02:c7:6c:18:5c:5c:98
Serial Number (int): 19751553993161435557298889124296285336
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:a7:f3:07:6a:e1:52:84:1e:01:92:ae:f1:aa:11:73:0b:e6:7c:b1
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): b5:84:77:83:22:96:1c:27:35:e4:9f:4a:e4:65:a1:ee:02:89:61:73
Fingerprint (sha256): 8d:b5:0e:54:aa:de:c5:db:1f:b9:ac:f7:d2:e9:5a:11:f0:78:d5:5d:3f:6a:ed:cc:09:78:ba:ad:49:b1:e5:88

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.dimarketing-salesconsulting.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dimarketing-salesconsulting.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dimarketing-salesconsulting.de
dimarketing-salesconsulting.de

Other certificates including the domain name dimarketing-salesconsulting.de

(limited to 100 certificates)
drive.newtonbates.com
documents.dicodata.it
workdrive.demmerys.com
documenten.yntro.be
businessportal.oostendorp-autogroep.nl
workdrive.agenciacom.com
cliq.astaris.co.uk
documents.motormarketing.de
www.dimarketing-salesconsulting.de
workdrive.gam-bit.com.pl
businessportal.oostendorp-autogroep.nl
intervention.thotela.com
workdrive.charly.co.uk
cliq.cp-werbeagentur.de
workdrive.dimarketing-salesconsulting.de
documenten.yntro.be
businessportal.oostendorp-autogroep.nl
workdrive.citetech.fr
businessportal.oostendorp-autogroep.nl
workdrive.dimarketing-salesconsulting.de
workdrive.charly.co.uk

Certificate

The complete raw certificate details for www.dimarketing-salesconsulting.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr8BODms/uWIU0uU+QV6
jB5eJrcJn9bWkX/+nUVNQKyfLqhmENN9ZdvaZv+/yHv95XBAd4otqz/pVNOaNrmh
A6CVP3Wbc3C0AW4LNZ5hNEbjQH2cqDoAHi7p6YOGFjg/KVOYyjqcmwB8Yx/P51EH
H2gEdNnMUTqIoS52321pQi6bpH1lIX+u1cU7V4kob5/U3+axLMditQKDhbIGeLxG
Y/wN+VKcZwJMvKLBij1kafBgla7RBiLQngPGYIUElVY0g9GYWQIoPAfx9HvWayeh
Nz2QEzTH+FiT2fswGs/ckjqxnZTTbeM85mli0FWikSeQ58VhxxH4EStvGJRmEQay
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19751553993161435557298889124296285336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dimarketing-salesconsulting.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23069559463473123289173933056245114981525144873808292407890799291785281077374323245069347384044213995548390545401972781277714153192996288597292105735885168546055385231204565498852937803099361363428511397102908705859559192451225840884474776034388132402588915842249625759256222477433495763758928668679863876624160744477806220350999935998975300823677492558001353144867860142010638375559668449925724772284863866912014941067133039010280507619950478143677386006846683240635568085597651823111677170190375098357333465520362642099073158159349260716372124846056273254614522689340886859296881665778023929307911298673592643269233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ca7f3076ae152841e0192aef1aa11730be67cb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimarketing-salesconsulting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimarketing-salesconsulting.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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