shop.hebammenverband.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7d:30:4e:69:93:e7:03:aa:11:3f:f0:c4 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.hebammenverband.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:30:4e:69:93:e7:03:aa:11:3f:f0:c4
Serial Number (int): 38744024959160918434977411268
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3e:73:d8:e1:4f:d2:72:2f:76:1a:55:7a:ee:b4:a4:d2:ea:0c:4a:4c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 2c:c6:50:26:36:c1:d3:f6:96:c4:fc:12:3c:3f:c6:e0:93:28:1c:28
Fingerprint (sha256): a1:db:08:83:4b:50:48:1f:ef:ca:3c:c7:90:c3:ea:93:89:d4:a7:73:d9:da:f7:55:2c:e7:98:c1:17:74:cb:cc

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate shop.hebammenverband.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.hebammenverband.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.hebammenverband.de

Other certificates including the domain name hebammenverband.de

(limited to 100 certificates)
events.beymedias.net
portal.perfusionsakademie.de
hebammenforum.hebammenverband.de
portal.perfusionsakademie.de
daten.hebammenverband.de
events.geocat.net
www.hebammenforum.hebammenverband.de
events.wep.org
clients.ndigo.be
events.beymedias.net
2023.ibizamicesummit.com
agenda.pmc.nl
www.matomo.hebammenverband.de
shop.hebammenverband.de
www.hebammenverband.de
shop.hebammenverband.de
ims2023.ibizamicesummit.com
clients.ndigo.be
forum.hebammenverband.de
clients.ndigo.be
clients.ndigo.be
www.hebammenforum.hebammenverband.de
www.acusticaytecnologia.com
hebammenforum.hebammenverband.de
www.matomo.hebammenverband.de
www.hebammenverband.de
www.hebammenforum.hebammenverband.de
veranstaltung.hebammenverband.de
www.amz-online-summit.com
eventos.neurosenser.com
2023.ibizamicesummit.com
www.hebammenverband.de
clients.ndigo.be
veranstaltung.hebammenverband.de
eventos.neurosenser.com
www.hebammenverband.de
agenda.pmc.nl
*.hebammenverband.de
hebammenforum.hebammenverband.de
2023.ibizamicesummit.com
events.wj-dachau.de
ims2023.ibizamicesummit.com
clients.ndigo.be
www.amz-online-summit.com
events.wj-dachau.de
events.digiseed.de
www.acusticaytecnologia.com
agenda.pmc.nl
clients.ndigo.be
events.wep.org
clients.ndigo.be
shop.hebammenverband.de
eventos.neurosenser.com
shop.hebammenverband.de
agenda.pmc.nl
www.hebammenverband.de
events.beymedias.net
www.hebammenverband.de
whatsappday.whatsapping.org
www.matomo.hebammenverband.de
clients.ndigo.be
*.hebammenverband.de
hebammenforum.hebammenverband.de
festival.educatefor.life
events.wep.org
daten.hebammenverband.de
www.hebammenverband.de
www.hebammenforum.hebammenverband.de
hrevolution.charismaschmiede.de
whatsappday.whatsapping.org
agenda.pmc.nl
hrevolution.charismaschmiede.de
www.hebammenforum.hebammenverband.de
agenda.pmc.nl
events.geocat.net
portal.perfusionsakademie.de
hrevolution.charismaschmiede.de
clients.ndigo.be
events.wj-dachau.de
ims2023.ibizamicesummit.com
www.hebammenforum.hebammenverband.de
ims2023.ibizamicesummit.com
www.hebammenforum.hebammenverband.de
sachkunde.perfusionsakademie.de
shop.hebammenverband.de
www.hebammenforum.hebammenverband.de
events.wep.org
events.netwarx.com
clients.ndigo.be
eventos.neurosenser.com
shop.hebammenverband.de
2023.ibizamicesummit.com
events.geocat.net
www.amz-online-summit.com
www.matomo.hebammenverband.de
www.hebammenforum.hebammenverband.de
whatsappday.whatsapping.org
festival.educatefor.life
www.hebammenverband.de
agenda.pmc.nl

Certificate

The complete raw certificate details for shop.hebammenverband.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjel8/B3RIDt9g8sbbLl
Rb8detxM5NnLaACv02SEviE8BOaxLHR9oT3hfKa7bNVRtUGvXUEAx7+Tbmu8Z0CE
PpMR6XOutMnA15kVFkMOz5MzbRPI81O0pN5NHNGWoCcNZFkujZlVcSbDZpevFpni
LcQTtXu9BIUURA/tauxiSM0SCuwTeXqZvIxZjGXG/FiIJolKy+DCVYK0/tS7SOyd
wbPfSd++Gg4RVPbxjrKBSuRFPfOAKA5vT/MP13iqjD9dyqjWRaYPv5Hba9D0kERs
TXpo6Z4Abo4944OPuxc+e1qd9WK1IYdho9n1xqiHrQf72lpRuLv/iflebX2HQSN4
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38744024959160918434977411268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 16:55:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 15:59:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.hebammenverband.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20982999800897766254043497727449682140644401880270018771556038514106449831706962613766574154228625285049574701525658646658769352878500580581461164988530924935513542511812224820391713851345764099914614126584639762816103573187532950657556725245694780597124082337455959429494374383061179788236062420882325046517065364414312693744532016020416111029301645862424440350324571051165246848236127923644099046199923212549377505071731202774830328279821414354700367589547052834839796769245593786702821502970741529776477335738944349888513034110552612237384271354756259270223406276146024026138475750136734690587819091612984422922413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hebammenverband.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e73d8e14fd2722f761a557aeeb4a4d2ea0c4a4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064eadfb382774a2d3ac3aaf47e5c43a8c8adc57d08cddfe61af9177b0d51fc6613407ad881c7c756d8867fd431cdf99f23e569d185ccd480ecf1c0c06347948265b50e26312d9ab4e3d6ef08f7ea77fa34e6cfb6d1d32aed43285d1b85856ceb5d1d261677a58715777b0a53bd7dd44fcd869e77a3b78f0d13441b019894d99aa705d43bcecc8eb1fe21ba8b5dfca4f322ba4fa875b955dd8e8b8fdcc821b04cb917e74c6b4435ded7fba7908014d823bad558345d32d01e4b8eaa4b86613d4f4117663be2df28f63dc73b07763d0cc5dce7e6e9cdf4e3309d90272f1a5dd0536f376b61cb073d7e7191520d3216fa831b38b1e1afb4bdd3f22355034e51a649