DV SSL/TLS Certificate for www.jcah.de

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36)

About the www.jcah.de DV SSL/TLS Certificate

This certificate with serial number 5e:1d:db:c7:b3:80:ce:7c:df:4c:92:85:e4:26:73:58 for www.jcah.de was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.jcah.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 5e:1d:db:c7:b3:80:ce:7c:df:4c:92:85:e4:26:73:58
Serial Number (int): 125102465882340676482524846418618119000
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 9a:9c:b2:58:f5:78:33:05:23:28:77:85:c3:b8:92:36:e1:89:04:0b
Authority Key Identifier: 68:c0:12:16:18:0e:af:ce:f6:87:a6:32:57:a3:46:51:5d:cb:07:27

Fingerprint (SHA-1): 2e:62:4a:1e:28:25:df:72:1f:23:92:84:15:a6:06:28:df:71:fd:12
Fingerprint (SHA-256): 80:e5:46:4a:47:6d:9c:d6:50:38:fc:47:b2:6d:88:46:a6:4c:48:eb:64:69:dd:21:0e:b7:41:a2:c4:4d:52:2d

Issuing Certificate URL: http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.jcah.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.jcah.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.jcah.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGeDCCBOCgAwIBAgIQXh3bx7OAznzfTJKF5CZzWDANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2
MB4XDTI1MDcxNDAwMDAwMFoXDTI2MDcxNDIzNTk1OVowFjEUMBIGA1UEAxMLd3d3
LmpjYWguZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8olXRRF4R
SU6O0eL3Eh9IBfQjVOaHVRB7sk9bGg0UKSI4GG0+ncWg3SlGjnRlWhBpwtzhCObF
D42+5/a1Xpkw6hx06IyHqqBko++yauOyYvjq5FLyVVBMQiJcGBSOBsTvMCsc0kCM
Zi379AXAO412hc9yjoAJcC9WIpeSPHOzdSGkZggGXynB4LF9PbD9GnFtB2/gVTnj
LsJUgYFZl2dYwgd4GRZwk5Uqb+9imNoqc4M+nki9+8cUi7Ql7g6rOOQjNOc0zzie
xU1ThbTlizrwWmK4LihcnpNoZ/GeFRY4QAFYNuHdc1iLtEkD1gVCm9YIE2JuippF
zTa/srkNU2NZAgMBAAGjggL2MIIC8jAfBgNVHSMEGDAWgBRowBIWGA6vzvaHpjJX
o0ZRXcsHJzAdBgNVHQ4EFgQUmpyyWPV4MwUjKHeFw7iSNuGJBAswDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAgcwJTAjBggrBgEFBQcCARYXaHR0
cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGEBggrBgEFBQcBAQR4MHYw
TwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1Ymxp
Y1NlcnZlckF1dGhlbnRpY2F0aW9uQ0FEVlIzNi5jcnQwIwYIKwYBBQUHMAGGF2h0
dHA6Ly9vY3NwLnNlY3RpZ28uY29tMB8GA1UdEQQYMBaCC3d3dy5qY2FoLmRlggdq
Y2FoLmRlMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDYCVU7lE96/8gWGW+U
T4WrsPj8XodVJg8V0S5yu0VLFAAAAZgIM7Q7AAAEAwBHMEUCIAVfC6ruIZ+6XJQp
JawCoTnUK+uR5JmIhG9NEM2PCqJPAiEA0R4c2Qo2sYNCSyqd7vIwLQVPjx41HCed
ki9IBzeMBZQAdgCsqzBwbOvshDH0E9L0kV8RHkIkQ7HypoxPPCs7px4CwwAAAZgI
M7QdAAAEAwBHMEUCIQDAJsJ6GeNU2RGM4foKG/ACPFXjXigA7xClTK5+/2NkKAIg
SZhtXyWL6nSSuyH4K3XWMc+o1Ctuxa83rn+2KL/z9UsAdgDXbX0Q0af1d8LH6V/X
AL/5gskzWmXh0LMBcxfAyMVpdwAAAZgIM7PhAAAEAwBHMEUCIGoDVCS+Kgn1vPUU
MJkHgpNTTakE+R+3/ifm0AQAzwtEAiEAq0EqZzT3wqdQBz/DpvPvgFpnaPm1L4iI
M9t2zs9mdqowDQYJKoZIhvcNAQELBQADggGBAG0jG+eck/9xAfkUyVxagpiXx48N
bSgKsseWlrcZDr8ORMJTz7ukKK4GdxdrOufUXNOnv0DI/H3zU8PO2XZDt8Hn13Oj
BVIwmL70cpDh301kO6RML5o4CATEoIChdCNHwuQZTXfBYg4fW9xf1grdbraZc33F
qkzayzIEsheiLx8MarxYc3eW3u4ZQo/+q6Wtel6dCOJ/mqjYr+SgUGhwec6sqvGS
fD6xdIoa47YqKj29rcBWYpCOld9EymYbekSwViwgLGDniKyPzfiz0TCsWlPvJWG3
/+woXPN9fC7aj8MiiKEu3Ek6uMo8gAExg6MTU57L8+W8S3FcKwOWkASErb2O9DVm
7CbvXH5XKaYlRXDnEp9pQ7a3CFvmePXoS3Rx3KW2GQMiNboN4R9iwdXkUiwgoBR0
AYZ8FBgDxZX7F+52D60qnm1Nft2tJ4mArHMXpF6vablARcXfeeIAymf1EW8OZ6xB
fSnXUF/JhDZSPfjUbMD4szMV15CWLTL6SBvW+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJV0UReEUlOjtHi9xIf
SAX0I1Tmh1UQe7JPWxoNFCkiOBhtPp3FoN0pRo50ZVoQacLc4QjmxQ+Nvuf2tV6Z
MOocdOiMh6qgZKPvsmrjsmL46uRS8lVQTEIiXBgUjgbE7zArHNJAjGYt+/QFwDuN
doXPco6ACXAvViKXkjxzs3UhpGYIBl8pweCxfT2w/RpxbQdv4FU54y7CVIGBWZdn
WMIHeBkWcJOVKm/vYpjaKnODPp5IvfvHFIu0Je4OqzjkIzTnNM84nsVNU4W05Ys6
8FpiuC4oXJ6TaGfxnhUWOEABWDbh3XNYi7RJA9YFQpvWCBNiboqaRc02v7K5DVNj
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125102465882340676482524846418618119000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Public Server Authentication CA DV R36'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jcah.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23812851816298892078735947753924975882691767127502568044686767319888477803939209137027810735253995992449132570967598396547157442257950310956775623342167649324126329348482886297368321007931927388295595886072033399210548848225309423963639812430070783751888277087217290257697702677027969933194178331113767483394595071667885669197616676128211758986295618501282832117337834699387079287727731633193169587355820307959119881079247699852701356482286171203881354633703532870645115073331453067669323687311479698353645467284173473356978542980714476765428196530369579954641374448750949154622550464648332672547917875750232300675929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 68c01216180eafcef687a63257a346515dcb0727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a9cb258f578330523287785c3b89236e189040b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcah.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcah.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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