*.sozialgruppe-kassel.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5c:5e:a5:ca:9d:e6:d7:d9:ec:2b:aa:48 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sozialgruppe-kassel.de,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:5e:a5:ca:9d:e6:d7:d9:ec:2b:aa:48
Serial Number (int): 28587042858697516685460220488
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d4:a4:9a:55:03:01:c7:0a:31:28:26:0c:ea:9e:50:69:a7:b9:c1:d8
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 30:aa:37:bd:4f:28:97:df:a4:8a:f3:2f:1f:98:3b:87:2a:f1:40:a9
Fingerprint (sha256): 9d:16:ba:ac:6c:7c:ce:31:b8:2c:c9:2e:c0:c4:11:ae:43:ba:01:e2:df:06:7d:32:3a:21:a8:96:86:97:4b:b9

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.sozialgruppe-kassel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sozialgruppe-kassel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sozialgruppe-kassel.de
sozialgruppe-kassel.de

Other certificates including the domain name sozialgruppe-kassel.de

(limited to 100 certificates)
www.sozialgruppe-kassel.de
webmail.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de

Certificate

The complete raw certificate details for *.sozialgruppe-kassel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28587042858697516685460220488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 10:33:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 10:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sozialgruppe-kassel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840992017536112623149408239335770057415881291720891874251397248229304167213326851395777489793325154883559120261905638322684249420505100915889889963724996553982397866082327565111588940836199980358467842131709242541330320616123547030308197841106069923948574839496090547629175000000642187248877178544312287029200029705138937529647638288646245582597884728481802798233482222637104224162378387831363898091664156986932747369630381604125236137971153606834696750575857040317107077052846712955551908479403851410699772164307483709941830276946962696257572219951119115280697709776609354586293652448060549598945119050383550347292886288718874767009277608510719106955815113651166649613007614449421962041191580002674158861139070749169895300934040074105215254989849495171077168701146913640800553184806293336702298903251278264285143485869378689662922738297879398216797478698676943241326852411625007390720792706310347929609683684338101653658280586218680642040202943941777060394376077773640846377860989435840047834409931883641186077395777601484728183979329302492987039946331055140621934472559677296463194161988542685687408117936871187418345332258919330490951463194271941817123641405199571241632827678619801999030277260403953107800752980919722107189505787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sozialgruppe-kassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sozialgruppe-kassel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4a49a550301c70a3128260cea9e5069a7b9c1d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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