naf.desy.de

Issued by DESY CA - G02

About this certificate


This digital certificate with serial number 10:c0:2c:73 was issued on by Deutsches Elektronen-Synchrotron DESY .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • ERROR: Certificate doesn't contain any subjectAltName
  • ERROR: Certificate CN is not listed in subjectAltName

Deutsches Elektronen-Synchrotron DESY

Organization: Deutsches Elektronen-Synchrotron DESY
Organization unit: IT/DV
State / Province: Hamburg
Locality: Hamburg
Country: DE

Deutsches Elektronen-Synchrotron DESY

Organization: Deutsches Elektronen-Synchrotron DESY
Organization unit: IT
State / Province: Hamburg
Locality: Hamburg
Country: DE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 10:c0:2c:73
Serial Number (int): 281029747
Serial Number lenght: 29 bits, 4 octets

SubjectKeyId: 58:37:11:9c:25:05:4c:2b:bb:ab:c4:49:4b:78:ca:d5:7e:22:d4:03
AuthorityKeyId: 94:97:e7:c7:73:80:82:22:8e:72:fa:ff:dd:9e:34:85:e3:b4:76:14

Fingerprint (sha1): 3e:1a:1e:5a:cc:5f:4f:f1:ce:4c:6e:41:cf:45:7d:28:5c:23:0e:f3
Fingerprint (sha256): b6:f6:15:06:de:f9:b5:61:99:61:f3:49:73:ae:83:7e:78:e5:63:b4:4b:4c:1b:29:ab:97:b4:17:0c:e0:59:6e

Issuing Certificate URL: http://cdp1.pca.dfn.de/desy-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/desy-ca/pub/cacert/g_cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/desy-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/desy-ca/pub/crl/g_cacrl.crl

Check the revocation status for the current certificate on naf.desy.de
0
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name). [email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIEEMAsczANBgkqhkiG9w0BAQUFADCBgjELMAkGA1UEBhMC REUxLjAsBgNVBAoTJURldXRzY2hlcyBFbGVrdHJvbmVuLVN5bmNocm90cm9uIERF U1kxCzAJBgNVBAsTAklUMRYwFAYDVQQDEw1ERVNZIENBIC0gRzAyMR4wHAYJKoZI hvcNAQkBFg9kZXN5LWNhQGRlc3kuZGUwHhcNMTAwOTI3MTQ0OTA3WhcNMTUwOTI2 MTQ0OTA3WjCBhzELMAkGA1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcxEDAOBgNV BAcTB0hhbWJ1cmcxLjAsBgNVBAoTJURldXRzY2hlcyBFbGVrdHJvbmVuLVN5bmNo cm90cm9uIERFU1kxDjAMBgNVBAsTBUlUL0RWMRQwEgYDVQQDEwtuYWYuZGVzeS5k ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANlDZrXLDQOQ0G35ltmo cQMUoynnnXpCU0kzgDyydy93oaYQviTT/M01/1z/VZkoCt/DhIf5bwCIqMS6tJUd bv5RQWjnC+FLNqveXVh12fb23yF6NQ266oPtOQ0523iQI6UZ2QkQD7OKlEumOeEx 3u6IusmRRyBFQIGlS9WKzWJyy5HS//ORjxD0R7OSWDuvBAZB3sRLwF8myeSgZAyV yNMT4wu3EMHl/p8h7DI0ABZ+qtfxH8cRgtkHNVVM34U+j7/2CSkNxIeaZJSXSjhg /aLB9EjeyK6TcslXml3cbkYl/zp4XUC/4q6GnADFZeRb3/wcDOnjIyQGp8MAnBNh B1MCAwEAAaOCAakwggGlMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgTwMBMGA1UdJQQM MAoGCCsGAQUFBwMBMB0GA1UdDgQWBBRYNxGcJQVMK7urxElLeMrVfiLUAzAfBgNV HSMEGDAWgBSUl+fHc4CCIo5y+v/dnjSF47R2FDAcBgNVHREEFTATgRFuYWYtYWRt aW5AZGVzeS5kZTB9BgNVHR8EdjB0MDigNqA0hjJodHRwOi8vY2RwMS5wY2EuZGZu LmRlL2Rlc3ktY2EvcHViL2NybC9nX2NhY3JsLmNybDA4oDagNIYyaHR0cDovL2Nk cDIucGNhLmRmbi5kZS9kZXN5LWNhL3B1Yi9jcmwvZ19jYWNybC5jcmwwgZgGCCsG AQUFBwEBBIGLMIGIMEIGCCsGAQUFBzAChjZodHRwOi8vY2RwMS5wY2EuZGZuLmRl L2Rlc3ktY2EvcHViL2NhY2VydC9nX2NhY2VydC5jcnQwQgYIKwYBBQUHMAKGNmh0 dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZGVzeS1jYS9wdWIvY2FjZXJ0L2dfY2FjZXJ0 LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAEF6MGHmjxlITcPSlKFkPjl9FVtSU1nuL RyNFBCfFf2+U3egMl2QPpyh6+e4TwPM7m26Ix7GCEx3NBh9+MbQUDOd+mXeHhoSg uUuQtiP/yxQ+AKeKMJOpvfbDIA7O95AaBZXba5rcQotaBIplIrq7ucp28Q32Es36 PbRDjucDbIALCIKrd0AbRYw5eBI8ACmlzHFgk6wQJKiZ8PsimPhvogqX0pRXxbOx Z/SC205g/gFQbcCxp15nZABmMTvhVHR3/xqGbBPVA9NboNORKFlx3zM6rCwSlA1D kFA2fOhXbc+m9OC+6oEM7nMxUiEY0Sgsq0JoQi9Q3j83LdDa0hvd5A== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UNmtcsNA5DQbfmW2ahx AxSjKeedekJTSTOAPLJ3L3ehphC+JNP8zTX/XP9VmSgK38OEh/lvAIioxLq0lR1u /lFBaOcL4Us2q95dWHXZ9vbfIXo1Dbrqg+05DTnbeJAjpRnZCRAPs4qUS6Y54THe 7oi6yZFHIEVAgaVL1YrNYnLLkdL/85GPEPRHs5JYO68EBkHexEvAXybJ5KBkDJXI 0xPjC7cQweX+nyHsMjQAFn6q1/EfxxGC2Qc1VUzfhT6Pv/YJKQ3Eh5pklJdKOGD9 osH0SN7IrpNyyVeaXdxuRiX/OnhdQL/iroacAMVl5Fvf/BwM6eMjJAanwwCcE2EH UwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281029747 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Elektronen-Synchrotron DESY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DESY CA - G02' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-09-27 14:49:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-26 14:49:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Elektronen-Synchrotron DESY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT/DV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naf.desy.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27426948953749166829741898629315688021277357608012328978992730556734224235511914436159503824401681178727133709765915077921165177214999549581335851532061019564660492763881126467708894205747194326003547591131038738779526539059730672554293783001084679838321666930947645965773121127137108973200373895643341714027287559481512587263000879109577644487022379911304365347995370226888589165470676427615110913658229710263018191413188291872827431630766808006814399313818013583456809108486819619937670512364354800163865755781108573403759541979609352729450727142747158510852602667482325455812951909001630000747329678845738137749331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5837119c25054c2bbbabc4494b78cad57e22d403 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9497e7c7738082228e72faffdd9e3485e3b47614 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/desy-ca/pub/crl/g_cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/desy-ca/pub/crl/g_cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/desy-ca/pub/cacert/g_cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/desy-ca/pub/cacert/g_cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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