beta.steinberg.net

- Steinberg Media Technologies GmbH -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 43:5e:c0:47:33:56:07:12:95:76:ce:9a:5a:ff:c6:7a was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Steinberg Media Technologies GmbH

Organization: Steinberg Media Technologies GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 43:5e:c0:47:33:56:07:12:95:76:ce:9a:5a:ff:c6:7a
Serial Number (int): 89550251486022813435878559457124271738
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c6:b2:c7:8e:6e:84:f8:cb:d7:1a:51:31:b8:0d:8e:3e:a9:96:3c:ae
AuthorityKeyId:

Fingerprint (sha1): ff:d6:93:ea:00:16:6c:59:8f:0c:f4:6f:bb:60:2b:3b:8c:f8:03:fc
Fingerprint (sha256): ac:46:09:c2:ca:56:b3:87:0d:d3:3b:1b:62:4e:d6:ad:87:d3:13:f7:3c:79:e9:32:43:0f:75:49:af:48:6a:75

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate beta.steinberg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.steinberg.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.steinberg.net

Other certificates including the domain name steinberg.net

(limited to 100 certificates)
www.steinberg.net
id.steinberg.net
product-line-management.mbstage.steinberg.net
*.steinberg.net
shop.steinberg.net
shop.steinberg.net
www.steinberg.net
*.mbtest.steinberg.net
shop.steinberg.net
*.steinberg.net
download.steinberg.net
download.steinberg.net
steinberg.net
*.steinberg.net
download.steinberg.net
*.steinberg.net
pathfinder.playground.steinberg.net.io.steinberg.net
*.mb.steinberg.net
www.steinberg.net
product-line-management.mbstage.steinberg.net
beta.steinberg.net
download.steinberg.net
shop.steinberg.net
download.steinberg.net
news.steinberg.net
*.mb.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
*.mbstage.steinberg.net
b2b.steinberg.net
b2b.steinberg.net
mbstage.steinberg.net
*.mbstage.steinberg.net
testweb.steinberg.net
product-line-management.mb.steinberg.net
webmail.steinberg.de
news.steinberg.net
*.steinberg.net
www.steinberg.net
mb.steinberg.net
shop.steinberg.net
*.mbstage.steinberg.net
shop.steinberg.net
ru.steinberg.net
forums.steinberg.net
*.steinberg.net
shop.steinberg.net
news.steinberg.net
steinberg.net
product-line-management.mb.steinberg.net
ocl-steinberg-live.steinberg.net
shop.steinberg.net
shop.steinberg.net
id.steinberg.net
*.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mb.steinberg.net
code-pool.test.io.steinberg.net
download.steinberg.net
steinberg.net
*.mbtest.steinberg.net
sdk.steinberg.net
*.mbtest.steinberg.net
steinberg.net
news.steinberg.net
www.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
id.steinberg.net
www.steinberg.net
shop.steinberg.net
mbstage.steinberg.net
mbtest.steinberg.net
newshub-publisher.mb.steinberg.net
*.mb.steinberg.net
news.steinberg.net
download.steinberg.net
pathfinder.io.steinberg.net
www.steinberg.net
www.steinberg.net
devweb.steinberg.net
forums.steinberg.net
*.mbstage.steinberg.net
sdk.steinberg.net
*.mb.steinberg.net
auth.steinberg.net
partner.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
openam-steinberg-euw-dev.id.forgerock.io
forums.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
beta.steinberg.net
*.steinberg.net
news.steinberg.net
steinberg.net
steinberg.net
mb.steinberg.net

Certificate

The complete raw certificate details for beta.steinberg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89550251486022813435878559457124271738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-20 12:39:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 12:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Steinberg Media Technologies GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'beta.steinberg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694882506716707553194827760679522803035563862136612020809176576832905258580097508968842812276977123874564217872687998933487654648738958934747334977119742231696103168577516448219082275843879206096085498490420121256247988283554650082744553766218079195418709824841065781535056493130963045217218672904545567047313826265599274056454977467702528319176830249712225158195537074112212608118768168152460506980410782560161914370126394701946787144305518342635536943684620410927878629129105608168739872070910401841380568715046497669103725488171170274482302157622621088985760434745085128443935659918442600853287224436526135945476376234001843736612056498713343799039865880236252388956999771917423022976201085645298036458105247080685200192060464325458136497649478899366295870566146585057309799249308790982451219016585882348828153520812171599777465438855472179486811368508761280942799566418647966143602379509165357730786873974653007208959432999896324114536335077001789230377534517139355833148400453745751150949738145395105813741145227749522489481223595319395171224677393092619743975676382144778818170524013081727309956032842490672916894406223835919568368198351480192117854989139729237418164524791584849413237123975702658768530368971470839493767201351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6b2c78e6e84f8cbd71a5131b80d8e3ea9963cae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.steinberg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001560868b1de000004030046304402207e9ebbfb039a7a057f201870b1901ef11115dc977e5288777a4e1e36fcca32b602202f3ad6cfdb24e9ddb59f1dc8d0af0c54f1a702031ed0db7fff72375fa472630800760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001560868b3f70000040300473045022100c2e03d5f778725a1a30c6a50c697c48394a5dad9494ed1853429e5e465c2d0f402201d80696b03ff110c7f26cbe9895e0fb93fcd255979dac386276bf67f6e0b086d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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