webmail.drk-berlin.de

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 6d:5b:8a:88:69:a3:11:7a:74:6c:8b:c1:ae:47:c1:73 was issued on by GeoTrust Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=webmail.drk-berlin.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:5b:8a:88:69:a3:11:7a:74:6c:8b:c1:ae:47:c1:73
Serial Number (int): 145361160334930968810140298597137629555
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): 3f:b4:f9:b4:0a:78:0b:6a:fc:e7:33:0f:09:ca:62:cc:09:c7:24:8e
Fingerprint (sha256): 97:10:74:19:c0:83:11:cc:4d:28:de:7b:50:dd:a0:7b:2b:a4:7a:a0:00:91:b8:bc:e6:6e:b2:50:47:cb:fe:bc

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate webmail.drk-berlin.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.drk-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.drk-berlin.de
autodiscover.drk-berlin.de
webmail.drk-berlin.de

Other certificates including the domain name drk-berlin.de

(limited to 100 certificates)
webmail.drk-berlin.de
onlineshop.drk-berlin.de

onlineshop.drk-berlin.de
drk-berlin.de
www.drk-berlin.de
onlineshop.drk-berlin.de
onlineshop.drk-berlin.de
onlineshop.drk-berlin.de

drk-berlin.de



drk-berlin.de
www.drk-berlin.de
mdc.drk-berlin.de
www.drk-berlin.de
onlineshop.drk-berlin.de
www2.drk-berlin.de
drk-berlin.de

drk-berlin.de

onlineshop.drk-berlin.de
drk-berlin.de
umomobile.drk-berlin.de
drk-berlin.de
webmail.drk-berlin.de
webmail.drk-berlin.de
onlineshop.drk-berlin.de
onlineshop.drk-berlin.de
www.drk-berlin.de
drk-berlin.de
drk-berlin.de

drk-berlin.de
drk-berlin.de
onlineshop.drk-berlin.de
webmail.drk-berlin.de
drk-berlin.de
drk-berlin.de
drk-berlin.de
drk-berlin.de


drk-berlin.de

drk-berlin.de
drk-berlin.de
onlineshop.drk-berlin.de
www2.drk-berlin.de
onlineshop.drk-berlin.de

drk-berlin.de
drk-berlin.de
drk-berlin.de
drk-berlin.de
mdc.drk-berlin.de

Certificate

The complete raw certificate details for webmail.drk-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAteuCOTjahbhIi5BbzccE
wqi0BKfGwciqs9BF9+ODV7sbU+UPE35byhTGLWMPQg/JZnUNn7MqyC5qRSv/ZUBs
k886lV23NiQotUVscxeOS2Xa36A7Rp1rLcheELTj+elu9+KDCGq7NQTKlFs5j3/+
S6dFQCnCiyH0h0Oy4wacBxqOL7M65Z9ix3JMNAXkrEeNEQfIZhGLHdBQKSmS4j2f
jbEkM/b95L8Fcy8pa2YCC0P+ms3eYaGU+iKkbvndHyaRpvcUIwarLpQ/agTTXuWH
1SR0E2BPZkY8yUMb5fyK0n3gJjK6Kz9gB1ADQhUPYdk9fb4IZ/iVYMAKX+wMnLPl
X0xG0VpyDkRT0BIVUBsb+nm7odvvDEoDNuMBJ4kQfmp7SKvfWdAiS4+GCFo9qfS8
5kZBwjJaVxnIyI2iHndmSeLvpwkqzodG8nceoUYf9+/1pWY83Aq33/18ebCFlwGL
D3L0iiPjBA3fc0R42KZAgfH582F1HIxHKipKlIR6wY+m8qv0EvLXGd0dtiIOPbl9
reUfYFw4HMCB4ik9jli8CEPub38ehMn7Rgtjl4CUijAHlZPJB3SmjwpcfUZR3s4C
WPxjnD5ZsrJ5n+qsKO9j6mR1MIU1Ol4zgc2r1LaeKh6fxTwc2UIEnTYfUK8Hr23J
IyQUnRa7II5ED5eFMLlGhyUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145361160334930968810140298597137629555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.drk-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742168668547335489745500101698571454544018780446186607451893193945170915272173000019604291863658603876633320437096309162524457858509248029313393652357096071249264567650008859750329600464006863507877913041590941273498304289779904849801319985985889817783120394958575766063726113797867439837626325626776547437054594630733986279986493373908162220356005539770736119661088885317543236480441748479353696601482106840825385362907242326479601592079660458942605169534016997401100260451129319133705425392620086415896502861803571366848355381425560684006390300352321090117262799711418409806296454306667107394092406587534492542073745859841420997723361408344383038680432507507206270996278190883436650762238404019052661372081694395775985771575430102982238115532662420020941580512949416877449627931623101223312842723305829081739010198510983038284861340825946388787707707116325683333534917612286018865328232977344402657283686612814117160085607922553562757402365005556139092673041484480880666632988725027261958009821464718595675631058210506011451968688776295564521702273661172750538051693363797397036169908724927415349590850781916015246429276002947069962049268172662716352915905104693232878486541113771555016742368226895109433057908187476252788649264933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.drk-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drk-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.drk-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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