psm12.mbtech-group.com

- MBtech Group GmbH & Co. KGaA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8f:b0:80:2a:85:16:f8:9f:00:00:00:00:50:ea:6e:fc was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MBtech Group GmbH & Co. KGaA

Organization: MBtech Group GmbH & Co. KGaA
State / Province: Baden-Württemberg
Locality: Sindelfingen
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:b0:80:2a:85:16:f8:9f:00:00:00:00:50:ea:6e:fc
Serial Number (int): 190996047161546469254972696526471196412
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c5:56:a0:85:75:3b:f8:09:7f:3c:75:a5:54:44:2b:0c:2c:37:a4:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 77:a9:87:d6:4b:69:a7:21:39:a9:35:56:8b:7d:90:df:c1:ec:b5:c5
Fingerprint (sha256): a6:14:bf:e9:f5:02:2b:07:45:c7:c6:6d:1f:ad:c9:ef:6b:83:fb:d0:b2:86:79:19:b3:61:72:60:01:3a:4f:e0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate psm12.mbtech-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psm12.mbtech-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psm12.mbtech-group.com

Other certificates including the domain name mbtech-group.com

(limited to 100 certificates)
mdms.mbtech-group.com
sip23.wp.corpshared.net
psm2.mbtech-group.com
fahrtenleitertool.mbtech-group.com
career.mbtech-group.com
psm10.mbtech-group.com
*.akka.eu
sip13.wp.corpshared.net
sip23.wp.corpshared.net
academy.mbtech-group.com
psm9.mbtech-group.com
sip23.wp.corpshared.net
stores.za.com
extranet.mbtech-group.com
emeeting.mbtech-group.com
sip23.wp.corpshared.net
whoiswho.mbtech-group.com
polarion_apm.mbtech-group.com
mail.mbtech-group.com
tsportal.mbtech-group.com
sap.mbtech-group.com
fahrtenleitertool.mbtech-group.com
academy.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip23.wp.corpshared.net
psm11.mbtech-group.com
academy.mbtech-group.com
mx2.mbtech-group.com
academy.mbtech-group.com
logon.mbtech-group.com
psm13.mbtech-group.com
prorenal.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
email.mbtech-group.com
zzzc.cc
www.mbtech-group.com
psm6.mbtech-group.com
polarion_apm.mbtech-group.com
share.mbtech-group.com
email.mbtech-group.com
psm9.mbtech-group.com
www.mbtech-group.com
sip23.wp.corpshared.net
career.mbtech-group.com
fahrtenleitertool.mbtech-group.com
*.akka.eu
www.mbtech-group.com
sip.wp.corpshared.net
email.mbtech-group.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip13.wp.corpshared.net
*.akka.eu
vpn1.mbtech-group.com
mail.mbtech-group.com
mbtech-mdm.telekom.ebf.de
psm14.mbtech-group.com
extranet.mbtech-group.com
share.mbtech-group.com
share.mbtech-group.com
vpn2.mbtech-group.com
cadmin.mbtech-group.com
mobile.mbtech-group.com
psm7.mbtech-group.com
www.mbtech-group.com
www.mbtech-group.com
ouen.cc
career.mbtech-group.com
psm.mbtech-group.com
extranet.mbtech-group.com
prorenal.com
mbtech-mdm.telekom.ebf.de
email.mbtech-group.com
psm7.mbtech-group.com
psm3.mbtech-group.com
sip.wp.corpshared.net
*.akka.eu
sip.wp.corpshared.net
psm5.mbtech-group.com
sip.wp.corpshared.net
psm12.mbtech-group.com
academy.mbtech-group.com
www.mbtech-group.com
sip.wp.corpshared.net
www.mbtech-group.com
psm.mbtech-group.com
guestwlan.mbtech-group.com
www.mbtech-group.com
vpn1.mbtech-group.com
sip13.wp.corpshared.net
psm6.mbtech-group.com
psm11.mbtech-group.com
fahrtenleitertool.mbtech-group.com
extranet.mbtech-group.com
email.mbtech-group.com
psm2.mbtech-group.com

Certificate

The complete raw certificate details for psm12.mbtech-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq4S7VxCTzdvZ2fgoVw4
elSEZUDKB/j7ezjtmcG69t2KS+oaql326tc2HuVJzh6AM4PgAIm9GDkkFAbvK+0n
jxNNesZNW9TX6hNRkBxGX5ZmII038eBc9Npc6VZAIlMP6d/LThVrrM6nVYst11IB
QA+fh5bVPEYo+4t5aiFvAd7mdEnsg0M25XpS8lstcBoAXI7W+S+cYIxqoncSNNxI
JVVm/BAbdtyuYxtOoKJKE0iLS0H6t9Dmt2RmMwr16GeYmADfZkoMMcQvALjdl/WX
ckz4zOc3vk6qT3Mfjp0mWvVVkysmMHdCst2/zZtMRAIXD6mnK+ge9V0EyyjtuVZY
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190996047161546469254972696526471196412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 15:30:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 16:00:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sindelfingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MBtech Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psm12.mbtech-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19526538021057613844593420447281540792448977844285950367136622402826427768202991820757662383960021582210575742082375165786099664456692307878969576543903807817402922863341664928612055824480444110175682014967588653205192535313821025883562125566271948622931286090349255301276322607067757130134543629854615002271962839684648285993780382763521376822827328146270656295296149108697778632984834248196694750838293334207301297444086203749831982026701608722461191274056947681910139922605341359419662753070865030906242588909566118929971510515015500431085562304510852570021937646422194003495492234316271939947748570356710225893493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psm12.mbtech-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c556a085753bf8097f3c75a554442b0c2c37a486
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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