eu.comproof.net

- COMMERZBANK AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1e:d9:10:9c:7b:b3:7a:78:90:48:53:14 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMERZBANK AG

Organization: COMMERZBANK AG
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:d9:10:9c:7b:b3:7a:78:90:48:53:14
Serial Number (int): 9546965641966130751399809812
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 6a:3c:71:5f:0c:35:fd:b6:b4:94:c5:b0:1d:73:c2:da:49:31:98:b6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ed:bf:5f:64:0d:13:1b:69:fe:7e:2a:57:c3:41:e0:73:22:06:7c:78
Fingerprint (sha256): a6:fa:8a:c2:43:ae:35:fe:2a:66:ef:6e:57:55:de:8b:e9:3c:5d:6d:72:a4:1d:72:98:d8:fa:a5:a1:eb:01:68

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate eu.comproof.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu.comproof.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.comproof.net

Other certificates including the domain name comproof.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for eu.comproof.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9546965641966130751399809812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 10:51:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 10:51:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMERZBANK AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu.comproof.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682027728222062476167234779027858793983696545337738570926695417607849437324347536851664659563901379686166118000029901727739242405702289160031437885848325797824830877770628861505267289092327316750353860096882146399393418795742587146091810440292830305914764203282803253536035849412957749536344982564734596684040709365387251811184009041322951949694917618226028975944723463515374611449532400868440604880032405649071814315436263661051912584814714041035137309878459612299460362794309869259280963652798414364630458822993664475519573737572836739708227527257260453733774994744011248967622468651410972554678627976383372420177049612076105232674724275562793261892306806234241483268475832399242988889538908019930884784482365356654756380948841493371586798806379472986925616337217328754074881187310767237371462574286102237702582841249142152261841748329804271105695400388393810716567330801152930166405250154580840372547672097475811661083771629514076221339961726042097102760105495782466285173215657358856964377196254619966140748517930826011161919135270061100107752719476324728039006118901243658071301663470510219209116238925322562752886568674091617703451092015442816510898327285850321607940965190568781641906734385998930281979437961154795502551753831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.comproof.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a3c715f0c35fdb6b494c5b01d73c2da493198b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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