asp-unesco.klopotek.de

- Klopotek & Partner GmbH -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number b3:fb was issued on by GeoTrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Klopotek & Partner GmbH

Company registration number: qMITYVcp2DurF/oyXeDWfFcjP/Y-8d9y
Organization: Klopotek & Partner GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b3:fb
Serial Number (int): 46075
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: e3:54:3a:a6:f7:17:46:64:af:e8:3a:71:ea:f1:64:6f:33:4f:00:4e
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): b7:0b:e9:b6:21:91:e4:bd:bc:fe:d9:1f:a2:a8:4b:c8:ed:85:5b:e5
Fingerprint (sha256): 91:b8:fe:eb:39:f5:d5:1b:61:84:f5:c2:6e:5f:4c:9b:63:94:f5:90:d6:ca:63:4c:bc:8a:a4:44:48:cb:17:63

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate asp-unesco.klopotek.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asp-unesco.klopotek.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

msts01c04.idcb.klopotek.local
msts02c04.idcb.klopotek.local
msts03c04.idcb.klopotek.local
msts04c04.idcb.klopotek.local
asp-unesco.klopotek.de

Other certificates including the domain name klopotek.de

(limited to 100 certificates)
*.klopotek.de
klopotek.de
webmail.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
webmail.klopotek.de
klopotek.de
www.klopotek.com
klopotek.de
klopotek.de
*.klopotek.de
www.klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
saas.klopotek.de
asp-unesco.klopotek.de
sip.klopotek.com
saas.klopotek.de
klopotek.de
autodiscover.klopotek.com
klopotek.de
mail.klopotek.com
klopotek.com
*.klopotek.de
klopotek.de
*.stream.klopotek.com
asp-unesco.klopotek.de
klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de

Certificate

The complete raw certificate details for asp-unesco.klopotek.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-06-28 18:58:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-29 13:39:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qMITYVcp2DurF/oyXeDWfFcjP/Y-8d9y'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Klopotek & Partner GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asp-unesco.klopotek.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918961492758954182651694960905293067940060111019560930453806553641292310868442632572112892493712793019080711757778458948337577080491455199457902132138690163437162886228871879880526253717771806042688628204633729635774034385559955136472695171477398893640141726904110062656705113007545048708195189890746052018693967684094195073604594685014008335170508206578245050276927258088472872544493761554995344068770015590101155493427811934451014748632572867365279325233461311767617374253264852752473920320759135797847366220171126240487986595244924039413351662359861328436263597375906295716086270142873129681809411807682064579678213162420733903155046864794466576428267183498514435930216587301351713599770517508265805182972123987151134633126948308408876221094029511233935988845012099509630501592249072064330109589917383687274939658674008800293109606427734323568399405274870159788977878001059917513415636094072118359017861418784229344052776332330643572523439927326514927290610185754255142557873929754614184241758551064179557470906888123993151817551988658486433645117502211716893656521665906217409494129934326314770946976789364622619305337968760365890854890038745595959383180180121058956075285099238917758630047541683349587844088394949557397387430181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msts01c04.idcb.klopotek.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msts02c04.idcb.klopotek.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msts03c04.idcb.klopotek.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msts04c04.idcb.klopotek.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asp-unesco.klopotek.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3543aa6f7174664afe83a71eaf1646f334f004e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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