www.intranet.wts-global.com

- WTS Group Aktiengesellschaft Steuerberatungsgesellschaft -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:e0:09:c4:0c:2b:8a:a7:e9:e4:c3:3b:50:eb:07:83 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WTS Group Aktiengesellschaft Steuerberatungsgesellschaft

Organization: WTS Group Aktiengesellschaft Steuerberatungsgesellschaft
Organization unit: Intranet
State / Province: Bayern
Locality: Muenchen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e0:09:c4:0c:2b:8a:a7:e9:e4:c3:3b:50:eb:07:83
Serial Number (int): 3821728562054377507576705722981484419
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e0:ae:ec:ef:b8:56:72:c9:d0:91:85:31:95:4c:9b:6f:4d:b3:67:83
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): f7:85:81:38:6e:d5:de:55:9c:fd:5f:18:48:e7:cf:73:52:37:b6:59
Fingerprint (sha256): ac:83:87:25:03:11:27:4e:3b:39:cf:72:0a:4d:72:b0:ac:fd:f0:2f:3c:45:86:01:d0:e5:4a:6b:1a:82:a4:1c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.intranet.wts-global.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.intranet.wts-global.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.intranet.wts-global.com

Other certificates including the domain name wts-global.com

(limited to 100 certificates)
www.intranet.wts-global.com
www.intranet.wts-global.com
www.intranet.wts-global.com
www.intranet.wts-global.com
www.intranet.wts-global.com
www.intranet.wts-global.com

Certificate

The complete raw certificate details for www.intranet.wts-global.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0x8Iq4c8qyVEZ8hFCYKp
nrbSThAFzfcPLKPvKB3T4XYnUlHfCUzwG+SNAy3M8sp/EYue1fbEO3XpY2uP0fN4
b9FQvR2Cfxe95LJOH3XdvMzyMK6lmO7Uk9A+efrE+lpCZ1ZnCfx4CU5HYs59Hk4y
OxquKAUKrczZR7/VqL4WpxlOWy51MEI6G99ze8LM3szNBNW9f0hmZhtVEDy1UvmD
3AEVieLsetJXeWoDc1NBsLSIU6ynWmG+JTj/0se6Xsi1zj4uQL1m8vkZvoCvn0o/
jxwnHoixKq4PCHjgZEN5PyGlAlxOFxIGKb1vgGeTVKQB9XfLOW6VADCViZ2/XZyP
ocJBCB/No5b9YTdrEJmG8BTB685ua9uoNIXDlmCxnEfVVUH90Pk28s7A7Vc9ULu1
MvemmPuJl/bHQAbmrTPFI7XYhgTXmRewmsLetLrVz6Nw1Ylefd9sn/29esIr5DUE
zb1usg5HdR2nOZE5Bl6b9jG8iwa3dHSMyv1Jb6aN9Y7s3rZfz7ophe/YmjSprKpw
WCLYal/RD+ZyaI1mU9uF3/2Hiir8NJjjN4BH31M/xOZ9tAFAYWC+FWxjrzkzOr3/
u9/239KBYV62jgW/bi/uNY+SrzFv3BX9LfpQLY1k5niG8zYF4+LQjuXACfyOoTrJ
V+bqF8O0EkYxBVg8eX9tAzMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3821728562054377507576705722981484419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WTS Group Aktiengesellschaft Steuerberatungsgesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intranet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.intranet.wts-global.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861299457464332680944247741074709459797170973531915560383923671168571408125029103477174507314289395156249996422483727092640078063186275508153651871727449453712919032219767952083583338268536953140198063094084558890142901175767204572670539402150110841651804795446125309154172627994789770310882715348007454671802551865960830753796408111896743091051402632682283541344605316316447399044448976900126429694593558789476638200692883875559409682196957574770338333581962130255927701681248214617340625021407385846676322105552270160817191024831282161314576939516161199569469385894108758970370157888810584001949066421935248862391526790118280181746466926134722399209128636108731699556665318867194157380998965974935192605659253194096267073117193558409797977812970331714006195087271794246945752324976443730825996717075421697554587516026483117953244365602677952982048989998753135632969890969146760524955402892008442771300042357302250498845659684517976522276994868853022949780052231063884319854062782294989224222493561757536126365546213689658620530218546331856060694025971890925592510565161665057735970696885147413568480713560768038977004501715236790405234203933569490621199799315949623359134483358090559314007475252721315059298284210010912968919548723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0aeecefb85672c9d0918531954c9b6f4db36783
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.wts-global.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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