demucexpe01.nemetschek.com

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 51:7f:df:2a:d8:a2:4b:3c:b0:f7:57:16:a1:66:5f:e8 was issued on by GeoTrust Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=demucexpe01.nemetschek.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:7f:df:2a:d8:a2:4b:3c:b0:f7:57:16:a1:66:5f:e8
Serial Number (int): 108331415731581512136869185123852378088
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): 01:df:6d:7a:90:0b:57:98:53:b5:0f:ac:54:6f:67:86:07:48:f7:79
Fingerprint (sha256): 96:3d:07:5d:38:fe:74:8f:de:18:03:8d:55:da:35:43:60:93:3d:b5:79:aa:fa:95:f8:64:4a:bb:2c:06:94:b4

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate demucexpe01.nemetschek.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demucexpe01.nemetschek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conference-2-standaloneclustera0f04.nemetschek.com
conference-3-standaloneclustera0f04.nemetschek.com
demucexpe01.nemetschek.com

Other certificates including the domain name nemetschek.com

(limited to 100 certificates)
intranet.nemetschek.com
nemetschek.com
www.nemetschek.com
site.nemetschek.com
intranet.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemo.nemetschek.com
nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
nemetschek.com
nemetschek.com
one.nemetschek.com
site.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
www.nemetschek.com
one.nemetschek.com
ir.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
demucexpe01.nemetschek.com
nemetschek.com
docuware.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nrldev.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
*.nemetschek.com
inside.nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
mucconnect.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
expe-muc-01.nemetschek.com
nemetschek.com
nemetschek.com
nemetschek.com
portal.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
demucexpe01.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
docuware.nemetschek.com
matomo.nemetschek.com
nemetschek.com
inside.nemetschek.com
ir.nemetschek.com
one.nemetschek.com
intranet.nemetschek.com
nemetschek.com
nemetschek.com
inside.nemetschek.com
intranet.nemetschek.com
news.nemetschek.com
matomo.nemetschek.com
site.nemetschek.com
piwik.one.nemetschek.com
intranet.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
intranet.nemetschek.com
nemetschek.com
inside.nemetschek.com
mucconnect.nemetschek.com
nemetschek.com
piwik.one.nemetschek.com
matomo.nemetschek.com
inside.nemetschek.com
nemetschek.com
ir.nemetschek.com
intranet.nemetschek.com
matomo.nemetschek.com
nemetschek.com
intranet.nemetschek.com
inside.nemetschek.com
*.nemetschek.com
intranet.nemetschek.com
nemetschek.com

Certificate

The complete raw certificate details for demucexpe01.nemetschek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108331415731581512136869185123852378088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'demucexpe01.nemetschek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693328049294049486079220563531671737267550888777037914850408725357510073849098520375301343546656101070841625359338921088171728671217122307239584498396250596282389720758762835595775768293633150321144586169876727031830064338905146574760615982892649963015997061107592630167848285041997072777624696911611450405372462762278268754236022866338322092852608745420319070234777255024937001160721140586788992252510934617354112250903615739916440361776072701382769900782215892559204298085106940826044728244848759574580732350840423465368131485463161627142551724656355155568961301095789682289782560746328876252778516346932463206984215597130335832460086840605911233022712320421444691896642375896749053190169512579413029684397117321157252994685316151179006317659326997563244909509031227353773311995858240491228584428443657484462377615081021489916650915347375214178473860120326847866467262141391948142306494229372202183386401952093721238623313563540009055728591620953104971101233655737271691316927651267042280262234753200392362241424849973313816819711609985823488082145730230370965706039616592634726841163308810717193482692072404790009236244692976133568783851916308234512049123692271928808758791218077544168384939719284498799901610295353227508536976763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-standaloneclustera0f04.nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-standaloneclustera0f04.nemetschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demucexpe01.nemetschek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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