*.festivalshots.de

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 06:c1:88:5e:f4:e7:d3:b8:f9:f2:5e:e2:36:e8:b6:d9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.festivalshots.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:c1:88:5e:f4:e7:d3:b8:f9:f2:5e:e2:36:e8:b6:d9
Serial Number (int): 8980247199354694030033152123913942745
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 90:38:29:4e:80:d1:e9:1d:4b:d4:95:bd:f7:69:58:05:0d:12:24:72
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 74:55:13:f6:aa:cd:3e:92:c6:2a:45:59:47:44:31:84:72:c3:e4:2c
Fingerprint (sha256): a7:a7:c0:c2:73:e4:6e:a8:78:ac:c7:19:eb:95:9d:37:82:3f:49:95:5a:93:30:b3:c1:c4:dc:d3:12:08:b6:99

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate *.festivalshots.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.festivalshots.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.festivalshots.de
festivalshots.de

Other certificates including the domain name festivalshots.de

(limited to 100 certificates)
www.festivalshots.de
*.festivalshots.de
*.festivalshots.de
*.festivalshots.de
www.festivalshots.de
*.festivalshots.de
*.festivalshots.de
www.festivalshots.de
www.festivalshots.de

Certificate

The complete raw certificate details for *.festivalshots.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4ALoMvFs317BX6+xWT
rHbEBQcy8QgCkz4M2p4iFUz+vzZejYx4WD9UQmmCqvB1e7i8FUt5QslAWuBjKb0x
fCpwGi16FONJ5Ti/ivp7wIGkJArbcDf+qlrf6PGm5VBbZQGkc1N4OKWgdWPdOCEX
fUGm+sdP8WfKTPfGcCUsoguyTjsaf95LP/9rdC0ImQP0HscNylW+KhnsQ1+4H98J
FAGJjCLD6+IK3hOtc0Ua7NsSc3EHgKnsYIqUNb64OOd5+VRYTdlC3wwvEamNvwWx
V2XKubw4y6T3dvvlH143h4nJc0DlOieO1dus1D2b7bEtDbvw73Hl9lH0CG1eS5Ti
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8980247199354694030033152123913942745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.festivalshots.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22516771761540845884924659523662087380287354320112123463086487795329714665396520568856077372518614421864328313724125236706367861582008072261320841244981936460681434316897867271998560703281433713212459855794928700677872174619500076665378878848722599172452668375242539414632819271036468107556776640794380735695014496941177444605185035834568360174957278452840308978811444154235222046216306798665814249392861557068985611942361970141646303888442368748454673306874669675777669232133499768591177586315720394194658926178104728144258407733400035269180274031318437809415105380703254397157683158307942308657163900563658361856653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9038294e80d1e91d4bd495bdf76958050d122472
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festivalshots.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festivalshots.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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