secure.mdr.de

Issued by MDR CA

About this certificate


This digital certificate with serial number 19:70:1a:72:9f:21:00 was issued on by Mitteldeutscher Rundfunk .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Mitteldeutscher Rundfunk

Organization: Mitteldeutscher Rundfunk
State / Province: Sachsen
Locality: Leipzig
Country: DE

Mitteldeutscher Rundfunk

Organization: Mitteldeutscher Rundfunk
State / Province: Sachsen
Locality: Leipzig
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 19:70:1a:72:9f:21:00
Serial Number (int): 7160133312258304
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 1a:3f:ba:46:39:41:67:5a:4c:08:20:9f:dc:32:62:17:28:de:98:b9
AuthorityKeyId: 96:f4:38:bc:ea:50:6f:44:d7:59:09:f6:90:12:e7:f9:ae:be:74:81

Fingerprint (sha1): f6:6a:7d:75:83:a1:13:af:d8:90:8d:08:96:97:3f:7d:74:f2:74:0c
Fingerprint (sha256): 99:ad:f2:22:b8:c8:1f:e5:ed:c9:d2:af:1c:ea:f6:fd:f9:ff:b9:04:6e:4f:c5:9a:91:5f:f1:12:2f:fb:5c:1b

Issuing Certificate URL: http://cdp1.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/crl/cacrl.crl

Check the revocation status for the current certificate on secure.mdr.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: secure.mdr.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIHGXAacp8hADANBgkqhkiG9w0BAQsFADBBMQswCQYDVQQG EwJERTEhMB8GA1UEChMYTWl0dGVsZGV1dHNjaGVyIFJ1bmRmdW5rMQ8wDQYDVQQD EwZNRFIgQ0EwHhcNMTUwNTExMTIxMzIyWhcNMTgwODA3MTIxMzIyWjBsMQswCQYD VQQGEwJERTEQMA4GA1UECAwHU2FjaHNlbjEQMA4GA1UEBwwHTGVpcHppZzEhMB8G A1UECgwYTWl0dGVsZGV1dHNjaGVyIFJ1bmRmdW5rMRYwFAYDVQQDDA1zZWN1cmUu bWRyLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KOpYVKNTQLY YzaYRwORXpk+IywXyglbBqJOiVhV5n6bDiYuZWriXCNd5MNbcLuJyIcB6fDpTL4a 8N5HRLgXZIq0yUL50CULjOYlukg7DZLHI+S7Vrv0E85pha+jQ3p1YsK7L6/6rLXk P8k+Lshe+CcoynB+0hCaFZd8RPsbac1CpzyleaWWyI2OkY+1OxzwsMBcfqVgDJYs w8oUCjHNEmewlf00T5kPoVnic5ZPQ0mcqx6RtS5Eet3qDlbeRweD38r/xTHx0pQu g5IVTOt6PUPjWG1OHtLV9gVXhJSqH3U2j+Sup2Og9a3q7m9+WEGTn2VixUTwMvsB 4jC5FtQGZQIDAQABo4ICdjCCAnIwTwYDVR0gBEgwRjARBg8rBgEEAYGtIYIsAQEE AwMwEQYPKwYBBAGBrSGCLAIBBAMBMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGB rSGCLB4wCQYDVR0TBAIwADALBgNVHQ8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUH AwEwHQYDVR0OBBYEFBo/ukY5QWdaTAggn9wyYhco3pi5MB8GA1UdIwQYMBaAFJb0 OLzqUG9E11kJ9pAS5/muvnSBMBgGA1UdEQQRMA+CDXNlY3VyZS5tZHIuZGUwgaMG A1UdHwSBmzCBmDBKoEigRoZEaHR0cDovL2NkcDEucGNhLmRmbi5kZS9taXR0ZWxk ZXV0c2NoZXItcnVuZGZ1bmstY2EvcHViL2NybC9jYWNybC5jcmwwSqBIoEaGRGh0 dHA6Ly9jZHAyLnBjYS5kZm4uZGUvbWl0dGVsZGV1dHNjaGVyLXJ1bmRmdW5rLWNh L3B1Yi9jcmwvY2FjcmwuY3JsMIHxBggrBgEFBQcBAQSB5DCB4TAzBggrBgEFBQcw AYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMFQGCCsG AQUFBzAChkhodHRwOi8vY2RwMS5wY2EuZGZuLmRlL21pdHRlbGRldXRzY2hlci1y dW5kZnVuay1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwVAYIKwYBBQUHMAKGSGh0 dHA6Ly9jZHAyLnBjYS5kZm4uZGUvbWl0dGVsZGV1dHNjaGVyLXJ1bmRmdW5rLWNh L3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQsFAAOCAQEAeaC8GqKQ 0JwrOqj3vzImxhnGsI3l5Mg4w+YJxCUAKjrn5+KAy53Pgr1Bnz8vY1DvB43hBcgy 49huVtGusZazqLS/XVCOyJEuLRwabOO/f1BaWq57KJN3ghVQKbuNfbRUbl8rFiz6 KskgaDH/m2GyGBUBACOyNzwplsy4Axgai3sZnRbjaBSzZECsr2XfKh1d0Koc2PNH s7KEEOZAVQ9ZqedtbRCQIZt8dHPIdnCHBlBcD4dO4oOxOOq/VV6VfzCA2TW+2q/i 5/bpqtz8zTbQmc9bkywjw4MuAXBfcmANhcVjZa++4nZKmzJeOoNoiulDXmSA12GJ 4GH/RH3cdNoJ8w== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KOpYVKNTQLYYzaYRwOR Xpk+IywXyglbBqJOiVhV5n6bDiYuZWriXCNd5MNbcLuJyIcB6fDpTL4a8N5HRLgX ZIq0yUL50CULjOYlukg7DZLHI+S7Vrv0E85pha+jQ3p1YsK7L6/6rLXkP8k+Lshe +CcoynB+0hCaFZd8RPsbac1CpzyleaWWyI2OkY+1OxzwsMBcfqVgDJYsw8oUCjHN Emewlf00T5kPoVnic5ZPQ0mcqx6RtS5Eet3qDlbeRweD38r/xTHx0pQug5IVTOt6 PUPjWG1OHtLV9gVXhJSqH3U2j+Sup2Og9a3q7m9+WEGTn2VixUTwMvsB4jC5FtQG ZQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7160133312258304 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mitteldeutscher Rundfunk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MDR CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-11 12:13:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 12:13:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leipzig' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mitteldeutscher Rundfunk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.mdr.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28863038095473354437081255571442663857389862101570059087638544008279134351442262703409719764326931830797719782613908779725514160751989983377810571342396370480155378092149661607674381140793891200782834699864673063458305938600963279817796924473096805309259552938710767744855709409100333095670619903676779271150541727031555809565696389503536773092017580002002892682261218031873502431355362518419913151057051828838302023226888681443253586701918273402888886868908520814129526747817396263159179238384851955959620026453554714121016094408162105317878159925886823603385510446917970224990607330178632485569602327719552606275173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a3fba463941675a4c08209fdc32621728de98b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96f438bcea506f44d75909f69012e7f9aebe7481 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdr.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (228 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mitteldeutscher-rundfunk-ca/pub/cacert/cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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