ediservices.freudenberg.com

- Freudenberg IT GmbH & Co. KG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 2f:b7:2e:b6:b6:3b:c3:c0:21:cf:7a:39:9f:38:89:88 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Freudenberg IT GmbH & Co. KG

Organization: Freudenberg IT GmbH & Co. KG
State / Province: Baden-Wuerttemberg
Locality: Weinheim
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:b7:2e:b6:b6:3b:c3:c0:21:cf:7a:39:9f:38:89:88
Serial Number (int): 63424853593768787871966343933583722888
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 35:83:c2:10:f4:50:dc:76:a5:b4:f8:48:fa:63:c5:31:db:91:5b:39
Fingerprint (sha256): 9d:59:e8:1b:61:93:f7:26:0f:18:b3:7b:04:28:ef:23:e4:37:2e:cf:a5:c5:30:30:12:ae:b1:44:cc:e4:42:c3

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate ediservices.freudenberg.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ediservices.freudenberg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ediservices.freudenberg.com

Other certificates including the domain name freudenberg.com

(limited to 100 certificates)
otp.freudenberg.com
branding.freudenberg.com
transfer.freudenberg.com
jobs.freudenberg.com
fcwebmail.freudenberg.com
vpn.freudenberg.com
sip.freudenberg.com
shop.freudenberg.com
login.freudenberg.com
sip.freudenberg.com
gtc-test.freudenberg.com
freudenberg.com
webmail.freudenberg.com
conferencing.freudenberg.com
pool2.freudenberg.com
jobs.freudenberg.com
webconf.freudenberg.com
www.freudenberg.com
*.freudenberg.com
webmail.fnt.freudenberg.com
mysite.freudenberg.com
fcwebmail.freudenberg.com
freudenberg.com
ausbildung.freudenberg.com
freudenberg.com
fsvwebmail.freudenberg.com
a-day-with.freudenberg.com
www.tir.freudenberg.com
freudenberg.com
fctsg.freudenberg.com
a-day-with.freudenberg.com
pool2.freudenberg.com
portal.freudenberg.com
sip.freudenberg.com
transfer.freudenberg.com
conferencing.freudenberg.com
freudenberg.com
webmail.fnt.freudenberg.com
Etweb.dev.freudenberg.com
*.apps.freudenberg.com
webmail.fnt.freudenberg.com
webmail.fnt.freudenberg.com
adfc23.fcoads.fxdir.net
*.freudenberg.com
fc1.freudenberg.com
webediservices.freudenberg.com
Gtc-test.freudenberg.com
fsvwebmail.freudenberg.com
secure.freudenberg.com
freudenberg.com
gtc-test.freudenberg.com
fsvwebmail.freudenberg.com
enablenow.freudenberg.com
mail.freudenberg.com
fcts.freudenberg.com
Etweb.dev.freudenberg.com
ediservices.freudenberg.com
fc1.freudenberg.com
secure.freudenberg.com
trm-netting.freudenberg.com
stage.ein-tag-mit.freudenberg.com
gtc.freudenberg.com
*.freudenberg.com
branding.freudenberg.de
fsv.freudenberg.com
esquared.freudenberg.com
ideas.freudenberg.com
jobs.freudenberg.com
streaming.freudenberg.com
fctsg.freudenberg.com
Serviceportal.freudenberg.com
fcwebmail.freudenberg.com
mobile.freudenberg.com
gtc-test.freudenberg.com
ediservices.freudenberg.com
cdb.freudenberg.com
branding.freudenberg.de
login.freudenberg.com
ediservices.freudenberg.com
mysite.freudenberg.com
*.apps.freudenberg.com
webmail.fnt.freudenberg.com
PoolEU1.freudenberg.com
pool1.freudenberg.com
vpn.freudenberg.com
secure.freudenberg.com
www.freudenberg.com
webmail.freudenberg.com
webediservices.freudenberg.com
jobs.freudenberg.com
secure.freudenberg.com
*.freudenberg.com
fracco.freudenberg.com
esquared.freudenberg.com
webmail.fnt.freudenberg.com
sip.freudenberg.com
freudenberg.com
PoolEU1.freudenberg.com
freudenberg.com
fcwebmail.freudenberg.com

Certificate

The complete raw certificate details for ediservices.freudenberg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lwqk+oz4YmcBe8sW1f7
A+vo/nCKEaGKMyNLVJt0/hDIY8SCQ/4Uz6gtk568GjcifB4DrUEDOwc9HUrgMaY7
JhT0+IkhwXV1bPluLufuzsvim9KpXq2SjMv73vg+y+I5hH0xfGXYqnPqpqUm3lJv
MJ2mAl2tUh/fg2mZeAYmzDWgY+ViZiI49aEre4HQPo50KnCubyl8TTsygapzjHAK
0QLw4wAqjVtMfYGdQedEjcYZ6RFSlDbpZOBjJr1PftkLOSZSw/NDyBYgNHCUQzrW
mIJT+7P1gK8l7kflBkDJWBqlWKPk81bgNHgXYWuC3snnSD5yNcowm1YtP6mzwfDR
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63424853593768787871966343933583722888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ediservices.freudenberg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27360262143081078708641059249528787287565117218824728688820349908299311809927548296855467742911335774423047230980550445400956949458703996912851198026893263472631194314464679120031803814228617025948423121016193439081805252733810350632940803971941020209981994711016164278843312733676435134573517667218385918825067229563771159578522212333588996128137673551296430767841415046813535757597568795669863987562916533875606138723566087297508244189032548892383968795024426525401829583390315926055821250360529589437761481406276489831019667083240057675815666282681127456276383889118031866856035054224833394689913819850033094250847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ediservices.freudenberg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0035e06f209a2b980ad33d734eeb727b6d87d72e7ce2968bb788eca805590aa54ca8acc87f0c757a7786c8e1298d49adf13c2f8e11c62409e8bfa1a709029bde8964e90e6c683b21ace192566324fdd4954d6808b79858061ae946db017d409b5c67231b03950bad6014d044f04c634153e98aa2436865ec24feb8d90e8cedcf590a80fdf7a4da287f6005e3c6199fc9b3b2a838489fc97461397564b0b173512fc79a7fa71ee308db08c6211e2339ae14d366599c7d03ec5ff6c9efa6ced953035e811b41dee1cb98d0be1d5764cca530a4638b1da434ad9f2c8c7350a847f780b72124dbcbd942849b39b731044790f51c380e1f30602a4717a3eab886ee821b