www.buendnisse-fuer-bildung.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 78:8b:df:0b:89:f6:1c:d3:c8:96:8a:fe was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.buendnisse-fuer-bildung.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:8b:df:0b:89:f6:1c:d3:c8:96:8a:fe
Serial Number (int): 37307295168068871367341542142
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: dd:2e:8f:2a:fa:86:63:08:4a:85:f6:ce:bc:c0:4d:ba:b2:92:2b:c7
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 38:a8:71:f6:a4:fb:d9:e0:df:55:4b:c5:e5:9e:68:10:a9:41:69:59
Fingerprint (sha256): 9f:36:87:dd:ba:77:a6:e0:56:e9:1b:49:19:4e:7d:9e:e3:82:db:de:73:74:1e:71:a3:99:f7:a0:07:58:64:23

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.buendnisse-fuer-bildung.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buendnisse-fuer-bildung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buendnisse-fuer-bildung.de
buendnisse-fuer-bildung.de

Other certificates including the domain name buendnisse-fuer-bildung.de

(limited to 100 certificates)
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
www.alphadekade.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de

Certificate

The complete raw certificate details for www.buendnisse-fuer-bildung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gvRTyhDoJm7qgPq1xBF
WWIzUPakjXQ6LFog2J4Up49Ranm6nxisXfM/4qrpJ478HSP/qWyMGdyK4Tl/JPGQ
DWK2Etmemv2Rr0TElvGKsQyWNCo1jZRJSG3s/Vjz15mAjiNA2n7lrrT4ThdBbYvm
CBgp5xokuLZXoJX/twDYhOVtyQFZTr+KhQ7aZIZrLnhJafaBY1yqieLz7bsOMICZ
BBpVb7NEASvhpB+g8Ffofq91AREp0bZTZ0lb+PhvvaxgYUhEDcWpFnuCbXRJRCKB
rbSj5Ardowdn591jCbNJPwRIYQNCcMltldYXsUk6ouAwhiQ4x49Yodb8NxN0isH3
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37307295168068871367341542142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-10 07:44:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 07:44:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buendnisse-fuer-bildung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29040637624896621116334987731163405654710420633455250773018880251659662715509909541419569012069126180584032247510778645229480282622619454206047003882732742542664854731632204514773611398345574846085745723868395176304939247197472825388608752604705318678218327343987876169181526911597512226844401661839054876512065498504928043827958524251764453484000347245535845505577128940169480205708001335451092011972560517105103326017468342239772936633558429368453582066468081914828637257959805287368862836349234519825750590848633554621228615659562232452398526534227853678598935620124564339547900363122486923523500407008827902392289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd2e8f2afa8663084a85f6cebcc04dbab2922bc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							025a0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015987559ff20000040300473045022055f5e1479a8a8fd0a2537442d318e71026744200ad2001f63399396f8909adf70221009112a726e06ae1258a065015a640d61d1abca854f71a71d9ed8e23a98aa1f6d2007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001598755a0d700000403004730450220473ba198661871bf9599f87edd746f3ab75e3ee733762108f27b02ad581a0d2a022100b5aa2b7b758d5c66f170ad4fd279d2da521bdd17baf458b8ca96921a829d7ab0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015987559f8400000403004830460221009f1f38befc0361877e7d3680afb16edf5113211c9438fc2af59b41054022f4ad022100fb680dd94b45a2165af1fe03693f81036a8d33afbb3494f1f2c9b6aaf99df823007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001598755a0390000040300473045022100a261a10b6bb59457f987edd92b6cf8365289821c77672de1bff79007805f8ae702202ef97a99f216e802cf6b06d1081c660a81101ba42ce0aa784859e96593912e61007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001598755a2900000040300483046022100f3e4457c8d236bf7f0d52e58a340a701f7f793af286baa4deaf00503e357796b0221008ba49779f9206024fe3813ab2073e57677886db722a628cfaa15b6f6f8e5c8d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a48095e0d0456a14ffe041f1290b0dcf8acd9a00ad205859c5c3720369b246c8fc1110385c5523cf4d2b7e0539fd8428f16fb356bdcbd104262130390fdfd98d6c992131508db6ce9137ae5a6c0676ab1b403d28862cfd9ee662aa0fb3faa1a73cd10138542655dea1812276ad1b2d45e130f24db7a672baee9fec95bdd817f6fff91fd9e82dee3142a444e3878835bf76138b7c9366460fe4ada19f71090ce3c14c2895ab27fb3c5ee0693f4ca4764166c497319ed7f39a2c2e3cdf7a864dfe49739e08f5b595d2d97fae51dca2c26608375a5b69bb064aa288489e87acf07d10a94042cf1178e792de6cab0237e0a94e10cdd8ad1772b313556c9a5c8766c0