itns.de

- iT-NetService GmbH -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 47:8b:64:c8:97:f4:b9:d8:95:c2:bb:9a:46:ac:c5:59 was issued on by StartCom Ltd..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

iT-NetService GmbH

Organization: iT-NetService GmbH
State / Province: Sachsen
Locality: Leipzig
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 47:8b:64:c8:97:f4:b9:d8:95:c2:bb:9a:46:ac:c5:59
Serial Number (int): 95098961097686328052542473333700871513
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f2:e4:2e:ce:fa:46:d3:30:97:9a:91:92:75:3c:96:83:bb:93:89:9a
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51

Fingerprint (sha1): 76:3c:a1:ff:49:be:a0:c9:ef:48:1b:23:f2:b8:49:24:7b:40:b7:7d
Fingerprint (sha256): a3:b8:97:80:e5:0e:74:49:9f:15:53:0b:91:1e:e7:9d:4e:93:0e:30:cf:b5:c5:a9:4c:e3:49:fe:8c:bd:a6:e1

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate itns.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itns.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itns.de
it-netservice.de
domservice.de
*.itns.de
*.it-netservice.de
*.domservice.de

Other certificates including the domain name itns.de

(limited to 100 certificates)
itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
remote.it-netservice.de
remote.it-netservice.de
itns.de
cloud.itns.de
hilfe.itns.de
hilfe.itns.de
itns.de
remote.it-netservice.de
itns.de
piwik.itns.de
itns.de
remote.it-netservice.de
hilfe.itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
cloud.itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
tts.itns.de
hilfe.itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
piwik.itns.de
*.it-netservice.de
hilfe.itns.de
itns.de
hilfe.itns.de
hilfe.itns.de
hilfe.itns.de
vtiger-uap.itns.de
hilfe.itns.de
*.it-netservice.de
itns.de
piwik.itns.de
piwik.itns.de
piwik.itns.de
itns.de
tts.itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
itns.de
cloud.itns.de
itns.de
cloud.itns.de
hilfe.itns.de
itns.de
cloud.itns.de
remote.it-netservice.de
piwik.itns.de
piwik.itns.de
remote.it-netservice.de
itns.de
hilfe.itns.de
itns.de
itns.de
itns.de
itns.de
remote.it-netservice.de
itns.de
remote.it-netservice.de
itns.de
itns.de
itns.de
itns.de
tts.itns.de
itns.de
itns.de
hilfe.itns.de
itns.de
itns.de
hilfe.itns.de
remote.it-netservice.de
hilfe.itns.de
dyn.itns.de
dyn.itns.de
itns.de
hilfe.itns.de
itns.de
piwik.itns.de
piwik.itns.de
remote.it-netservice.de

Certificate

The complete raw certificate details for itns.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95098961097686328052542473333700871513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 13:07:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 13:07:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'iT-NetService GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'itns.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862993297683944217732279968739159070318306000510423099579523257420714938082057609103359456004205817899385401826595529171130114359429668485468190709799045240679860867371820382373203165892293318183145062104515809681767351089138606686651793255656033837920089267017032589474589531516573521735940052776175411341947684765825405096133457585786639252425793395193372115409966366270703933102064441905931545662017872961752610583605251327876618660229009684256491224300856533299934898641658755215718729699260264026751012811214616356729575393635192030698323038590285275412481803294434835383370836379693349475856282764664250729577173145836546055827057433665640014949324950367835695175459766811652650588293481831555044531895799209256512847934175455488962737921534921562571137477012946706275705722760536413377039391926406943748869201050415327326769858314756460126378691120428552194012403621985058174379523072114730517281818618056201731017920450799333348225005078896848676738004829841784335002421883557851413002309805316372467360840907071709928024641970507212496430297098184008176546303723695372823208290823643788303471650241494765436597695777506532414733535832139605969637456922544837986848755997149509163895853803139465352085626850574491056860465621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2e42ecefa46d330979a9192753c9683bb93899a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itns.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-netservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itns.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-netservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001549ae0891e0000040300473045022100cca78aaa679fe338758cc22971471db696cf632fbe755aa6d8dafd83773e42b702202af586c0d58b7c5570ede53e8ec2dcb553f24036c43bc1f800d7b86a2de4a5c3007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001549ae0877a000004030046304402200e6ab04849c196ac91fca95f8cdb5409b6846660e4ca22a1f44af9c8cec891e9022069ba669b0cf225843663a7a05b88392458d5d4e52977f49b2d05f541e1608a63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e389e454164ae4e3513ac9e9385fd0de744ffd3e1345b46f216e179b2112befaa70815c2a03fb6fae981a61364b282ba5cb67c37e7ea0b84df2cb9cd9554c13b61e8d202886feb7ced59dff50f912146e8c400c2b1366116e214535032f83c0b6192f1a1200c35a0e695bccc35ba082ad76bbf443f188a5faa7b569fe9de62be98f6d253ce53bad027105a8d258357837b83fbecc6ae0477eb6bcb92aa04b87131592e727fd0cb659d98c133b9132cbd06fe321f750e9dfd969f11e2bf3c7228ed1dde74bf6774399d51b0b1e8edd90c86d0845ef5f255611c1b09942d0aa330308b5ee9ecf2a7c5d4dac61197497a07014f050b4f417d8c897d50cadbb0e57