www.correspsearch.net

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 30:77:f1:4e:12:2b:bd:d6:c5:a4:87:bf:ea:2f:3e:b6 was issued on by GEANT Vereniging.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 30:77:f1:4e:12:2b:bd:d6:c5:a4:87:bf:ea:2f:3e:b6
Serial Number (int): 64425721369976373028506163148959465142
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 59:ff:76:43:6f:09:85:b5:eb:f7:21:ce:94:cc:80:5e:3b:22:a1:f1
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): bc:2f:ab:df:05:3c:ef:e6:b4:79:84:a5:cd:14:98:14:de:c5:c6:c3
Fingerprint (sha256): 93:69:c7:e8:af:bd:62:40:dd:5c:51:5c:14:15:9f:0a:a5:3f:26:ec:3f:5a:ed:4d:20:12:71:78:cc:40:f3:52

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.correspsearch.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.correspsearch.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.correspsearch.net
api.correspsearch.net
beta.correspsearch.net
correspsearch.bbaw.de
correspsearch.de
correspsearch.net
dev.correspsearch.net
quotesalute.net
www.correspsearch.de
www.quotesalute.net

Other certificates including the domain name correspsearch.net

(limited to 100 certificates)
correspsearch.de
www.correspsearch.net
correspsearch.de
correspsearch.net
www.correspsearch.net
www.correspsearch.net

Certificate

The complete raw certificate details for www.correspsearch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64425721369976373028506163148959465142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.correspsearch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799337511503586872131567758636115878023645483982955384681844981384621159556349823997083668827611203599326744150759980799779305990935861835936947275365000345846545950325242716204396746892767656408541179127167443236889859241332743663124339545349828825309778795718906325437394139431573457486846740438577032651670627463369149312673046654696834966087513907307333363694077170707787991833733188760112369111461427764530199176120667538904095015241096773932546109881262067221047970296035019499983955601877260540774406265562932481214055606263363558280280286876139513419975833995691490623986693151416629730071770025344555538862321798768965132177106262688294540991009202341737819724337526156110903650285942557254983815046075337797406462072783394950387972699591283194814537609748791561435817734038476203271260277992876375253890764412996371011033412247644415792910926641494650596307567039679046420841941454846696076643631435474384218434099064467133646503920048472527716432842293641915124167611828336655691509004294978227242924832595709359467508087858775663966740919927261137435561774883777520855943935545444696883052971040468500797717678341494675036960900391420344572282998803458986832074041461201149843996784772414365988391431980720940076326239911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59ff76436f0985b5ebf721ce94cc805e3b22a1f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000187949f4f120000040300473045022100c3f77dc743734e1215d956f61e36d58b17b536a35d0919b77d7275457d59bd6d02207ddeb3cf0721f9fef4b10305296b82ac8117c42e3d9c5f48a8af2f2998e15ec7007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000187949f4f700000040300483046022100d744777597b1e172bef5ee21a2a607caf4f65321682344aee1da6119282bedf0022100f533411938dade4290ddca1873b73691769ad9272bb95559ab69647c23fad8c0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187949f4f8b000004030046304402204bbdc0d6119978828156432e54edfd9249a60cd23d9cfba5d00877ec93b738fd02205ece87996708f9743e0ecd91a2ffc5e22a83ae51fe2a3441427f195ee5d977c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.bbaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotesalute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspsearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotesalute.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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