DV SSL/TLS Certificate for office.notar-assenmacher.de

Certificate is witin its validity period

Issued by DigiCert Inc (Thawte TLS RSA CA G1)

About the office.notar-assenmacher.de DV SSL/TLS Certificate

This certificate with serial number 0c:2a:82:3f:d8:e5:bc:e7:a0:1f:4f:7d:5c:83:cb:59 for office.notar-assenmacher.de was issued on by DigiCert Inc.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for office.notar-assenmacher.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0c:2a:82:3f:d8:e5:bc:e7:a0:1f:4f:7d:5c:83:cb:59
Serial Number (int): 16171454189226664562789320721082600281
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: f2:39:15:cf:80:86:85:d4:a0:c1:55:3d:c6:4d:13:84:17:70:2c:2f
Authority Key Identifier: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (SHA-1): e2:2e:fe:d1:b3:97:97:2e:45:71:25:35:7b:55:d6:5d:db:98:3e:2e
Fingerprint (SHA-256): 7f:d6:2c:04:be:cb:e9:0f:1d:87:c8:77:80:7d:cb:e9:2e:75:81:d3:a1:71:e5:2d:90:14:41:15:a7:82:f8:34

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate office.notar-assenmacher.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for office.notar-assenmacher.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

office.notar-assenmacher.de

X.509 Certificate

The complete raw X.509 certificate details for office.notar-assenmacher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAEO8zd/aq0xH4eNdbgq
M5co+C0F2vutRmJMr8BumbxnggJ801KFS9JPFUlxM+O4JbGITsbN1FLn+yMmGy7s
bJCnKyD1o46MsOYtcXP0/QRnA1m3QjjvB2pGveWK1YlWjvasVY/aSVNYyfnble1o
CLbElziWwBpwgYzAUmPMMLFZ5opH+OOtr2X2WsflpVwhcuziqCErjSlslUSN80Sh
3yIph6zuJt1YU4+ZbStbJFWLfKBKtfsnwjk1EqHJ+hh9YnYX+4/YPdF9CcFCX2tl
X9qL/UlL/rHE1006pJ8fQtqsEd2G55pnegCoLFT7C0SFMg52+E4m1HScLjV2hrCe
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16171454189226664562789320721082600281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'office.notar-assenmacher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21208557150145764379945912547601710701689353594902692492473353145725052101532386484916133453891702998436982505140681224700456550346623325304893657031128395546278373628669914468831831345123029684598434928685220373717791037595722900799039972689755977544303517982745345421935458951484517673060362495976468908779932109518606223600935413299982960034892212790435778125722049489885551338142032383900777601168790169642721356532191238828151363195096248631608003579329175827292240236055452785132526087693992403746303474207476296162125718619492842026461441461764935537304138074158625338972743454646199457746236141110666105757433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f23915cf808685d4a0c1553dc64d138417702c2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.notar-assenmacher.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000193786f078600000403004730450221008ecbd6ef7cbd8e5b138d4eb43f527738ddcb692169e23d6886e4ef469ccefbcb02202e5d860be3609b075c776ea9b91fce8de4505f779c7744cbd637db8e65403ade007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000193786f075a000004030047304502207495cfdae98312055a1e55856dad6189664c41d56d388e78fa1efe6c9ad724660221009bd5463a259511cfc77d1c3bb3731916788a640d979bb5c45a70ce6ea0030fc5007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e5000000193786f076700000403004630440220371ae1244862536f262a352e18e770acd27728ee78419f361e6f4b7acc36bc97022066f0028ef942e89bdc995c2abda61dd2a51939d35170302db51f007912af15b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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