*.ebf.de

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 09:5a:ab:68:d9:9c:97:83:99:90:16:66:d1:f5:b0:a2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ebf.de

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5a:ab:68:d9:9c:97:83:99:90:16:66:d1:f5:b0:a2
Serial Number (int): 12433835278451058325855130872918159522
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:2d:fe:6c:ad:9d:db:09:db:ec:bd:6f:c4:a5:3e:f4:5c:9c:49:44
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 9a:ba:8a:2a:a9:03:8b:b7:94:bd:6e:eb:f0:ee:c2:bf:49:59:f5:a3
Fingerprint (sha256): a7:2c:2c:2c:38:cf:2f:3b:ce:32:ba:9d:e8:ec:57:1c:09:9a:56:3f:0e:af:18:f0:0f:63:3c:ae:a1:45:92:c6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate *.ebf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ebf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ebf.de

Other certificates including the domain name ebf.de

(limited to 100 certificates)
adfs.ebf.de
gate.ebf.de
*.ebf.de
*.telekom.ebf.de
*.ebf.de
*.emea.ebf.de
gate.ebf.de
*.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.ebf.de
*.ebf.de
www.ebf.com
ebf.com
support.ebf.com
pi-mdm.telekom.ebf.de
support.ebf.de
*.claas.ebf.de
support.ebf.com
*.ebf.de
www.ebf.com
*.ebf.de
support.ebf.de
*.claas.ebf.de
*.training.ebf.de
www.ebf.com
mbtech-mdm.telekom.ebf.de
ebf.de
*.emea.ebf.de
adfs.ebf.de
mbtech-mdm.telekom.ebf.de
*.telekom.ebf.de
www.ebf.com
support.ebf.de
support.ebf.com
*.ebf.de
beta-sentry.ebf.de
*.ebf.de
support.ebf.de
xm-test.ebf.de
*.telekom.ebf.de
*.ebf.de
*.telekom.ebf.de
*.telekom.ebf.de
ebf.com
www.ebf.com
*.ebf.de
support.ebf.com
*.ebf.de
access-sentry.telekom.ebf.de
*.telekom.ebf.de
one.ba.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.telekom.ebf.de
ebf.de
www.ebf.com

Certificate

The complete raw certificate details for *.ebf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArTjuS4+FuETtw605bk7i
z2idPrLnfsPeVTpkQVMzb1AA3CVcFpYXF3UG99gARgaREOIaWZXYbwEdSWslLf+r
7YvE4OIOpN5+MVZ17toBSPvbr8g7gPcACQYkOzwHzm/vIjn55JWK+rXLU7WPNjvB
SySDYL4bvlg7Q45mmSW6lE4aNmIIb/BstfdD+gm1O2TWMLH1syg8KrlMOXy/Bhff
5mcux+hewX73UKsyjA8Kr2ekEqH+GWfppEnCTuMUZhA/fmXJsWLdi782uZvrzXxn
Xt73q3pUfZrQKMryXg31gUQgW91OzXTPROy8sh1vgpsUdE9BfbixviIr1T0Kv4fz
ugIiYtJZj/toAMNg8S3p+b/aWvpes2cZn7xXFJngBdS8DbyCfKRIHzwEMeZ0SHnT
wX3IInzHdnf2mX9FOwLCEjmazeqsJCNMzyHRfTorMPpTxNUX8CVdDkWPiqDkHgCT
quqFRT8F+iuKOlBUffTePU+DSoo/hN8M/dUgwS3nHSdLQHfR5HAZ3NQqJkfhKFxM
XF2wrUVoa2NwugV8hGcxuLjRWBskkpTWNttRCc9PrRD1Y1YLwN9jdJwDTZRMFI/v
2Yj6BOwqHLfSLaC71cOhpyyu0KNbR04CfdDSRYVqy9AnHOzGZvYh4QAvHbAuqLcf
rpoEh88LV+9UzwKgHoHiYr8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12433835278451058325855130872918159522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ebf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706685679883050139134057922452022341114961054788741834604694096003206613813175213393204681458812298458171731789683857226072541048368217875206220829376523941415781442989803348452744255248235237322202206475096382754098776173697501489857509388506524056735286868662546614207269517606276888513208334056685258358663588154407053036216534396922625500480014016637247595605480890743968521106411555588630748710762807186815252090416748605665580405483452154305493251174926657338345465812125217019148321643445782946526783794947074033364308774354163613935981817151065695906290099920339243121777668662841199402436159272746843646973826305538478120083072156499975466989304743896123317718422724003084072665556535632708192684882182595691844312049533273381328899789413914792216917296569893872525967942089555442181778865306134110470234556025333417755661084330971771880902135989653201799905363207593480930876571878712809611691240596641069816633102446962923603670820486563225946453281130640737602812497932619872775179839824991847506986949491714065794339582672877993394685225308824019711058337837891138269127043735466243962624820513940143875160067872650836175424071439940651475501393487651859337986064522387979864559008079459538280710323496519856311115080383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a62dfe6cad9ddb09dbecbd6fc4a53ef45c9c4944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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