owa.chiemgau-arena.de

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:12:c0:ec:53:45:ad:31:bb:d2:26:92:a4:64:ab:b3 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

owa.chiemgau-arena.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:12:c0:ec:53:45:ad:31:bb:d2:26:92:a4:64:ab:b3
Serial Number (int): 18706566230704193188622886145538436019
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:78:00:09:c8:ff:60:19:aa:9f:42:41:c8:00:ed:76:22:53:99:de
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 71:13:9b:70:e4:b0:fe:21:59:e4:8f:86:55:3c:64:4c:90:96:2c:52
Fingerprint (sha256): a2:54:c3:55:5e:38:dd:2a:ee:53:d0:9a:ea:f5:2b:bd:35:42:ce:c8:fa:4a:46:88:1d:49:2d:6b:24:f3:d5:d7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate owa.chiemgau-arena.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.chiemgau-arena.de


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.chiemgau-arena.de
autodiscover.chiemgau-arena.de

Other certificates including the domain name chiemgau-arena.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for owa.chiemgau-arena.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1wGT04blsY3h3+ZDMR0Z
cDMtihGFruzCHZP52wxLVl/7BHvZIPARjx3thRgNsS56AqqgW2x0vBUZtz0lL/zB
t6INbHUOC6HnnKcnsFgyfXIMwvv+yro/5gyZZgcdOtK8AFLfMfJTHW/tulb4Npda
OiIwY4RZh+7Zd0NobuAYcP6t1RqxfYQq+tC8q4xpKhrTBeHf2pY1ULBGM9PidcJl
5q4SUa0dTw2Dwqc3Qvh5/o41u/ezGyuUAAQvnE70qUd/dA8Tq0dYQec5adKbXPWO
Xr6sHYaExgqHjAARvkpUeaFYiU79dm1NmIWuDhGSqrrZi4iFSILHApOzBTNkSwRa
dFsJF4GVd606ZNX290IQCffqHIJVsJRLsRSrP+l0+qJYVMWxA4GRWanlDGbqspyu
guFyXduUW29DlmfDk14Z2TMT3eydD0hxeKEdxUFlVMpcT2155tLwnqF4T82ATlVh
KvWH+3bgT5VERjMRjePTV6MaaSKqEfYEnsd30LbROH13jk4ZNRt6MvXJlJELLvJG
uSL9mnbjascXmgD+hCX2Go9nIbsKsYLgIy9grSy/FH52AwFX17zrzsK2YmjfhkJ6
z6tOxvnFh5i/Qqd/Hg+1lxppLShDJxzvLE1dFvqc9Cx8iSz4+GaYjNLgbe1Ioygl
qzNa1uxEbCttMmjW8eZtjmkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18706566230704193188622886145538436019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.chiemgau-arena.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877148612983030262209839160943850721331685168861321437722888212866821982889438043982262571017306953897873006268703917734247675706023128083007831055314717785060037230428966672487446610512341185099061162106275361660311810607160161546708509277785621851483611056876763494760399147036292016772629816970263743799699929952054072595639365820216062205299042796106936201940474695165586075134380359971165747461558019408843424322452706631905664694945701398273090486204672167461556702280082227504536114694460160313008272150349549560171236870536175816987506036865794002481586958443236823759358735200303231048957320504501142104257018825520557207069478463005240911101879256270994475929888043635889370283126650464326964600309586300063294330870574264556833627918429096911711431623314647095924443005001176724079975249129122092193400583722128377743189133259119269923650075551882070676226074725888207168061437382261902888910934090425752545065036132582295589230818797322012007337333219187452149934116484203893413597712266382536035326256776490669346640449486834863563007665166161299642145428303519411876400802377533901689302413389494620470566990436887875906969513986587853854429629381100157054464319805026677503265756654210454067312224992565399218767629929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef780009c8ff6019aa9f4241c800ed76225399de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.chiemgau-arena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.chiemgau-arena.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d9eaaaf58b7a9daf91dcd076d45094228feaa55635118e778284e9645d15014bfb1158637389cf9204325e24502e31e6597a6d9268443bb37db9485d23c4d5f79542e5873ad27ff9c4f6269f381537cde1424558217ae3c8ee6acbc0008d3afe3878fdb62807ae53f024825ccbd875bd9d1d13aec26fd0ca4b3b0f6a1a32d96f5b9338934e5b21212a33e6efcf8c85193c1bbb9d4190e42beb67165fd4495f38da0052efdb0d5a67ec4b956ca015ffad3307530a13d877800616d6e4a6f4ba1233b530ded06bca45fb31c51e4d6207dbf69357a2f3f6ba005d01c718f8b80763f1940f6d3f3cfa7ff86aa6bd4a9c6b887278c1839c448da77c627d6cc6ffc0e