www.dkjs.de

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:49:df:ab:68:c1:98:ab:bd:cf:ff:2d:5a:10:d2:13 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dkjs.de

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:49:df:ab:68:c1:98:ab:bd:cf:ff:2d:5a:10:d2:13
Serial Number (int): 13675854186300090080008640099987280403
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:05:f4:55:58:71:c0:d5:02:2b:af:af:8c:e0:55:3f:6f:01:3a:0f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): f0:70:38:38:be:be:7a:5b:f3:33:98:59:6d:3e:57:59:a8:aa:1b:cf
Fingerprint (sha256): ad:b8:e6:c0:ca:09:54:c3:c5:50:d3:5c:22:54:9f:ae:67:0a:35:2c:8e:f6:80:e1:5e:ec:a5:e6:23:ad:b2:7a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.dkjs.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dkjs.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dkjs.de
dkjs.de

Other certificates including the domain name dkjs.de

(limited to 100 certificates)
www.dkjs.de
ocamp.dkjs.de
www.dkjs.de
webdav.dkjs.de
perspektive-land.dkjs.de
*.dkjs.de
perspektive-land.dkjs.de
*.dkjs.de
perspektive-land.dkjs.de
*.dkjs.de
www.dkjs.de
www.dkjs.de
intranet.dkjs.de
outlook.dkjs.de
www.dkjs.de
autodiscover.dkjs.de
safelink.dkjs.de
intranet.dkjs.de
www.dkjs.de
www.dkjs.de
outlook.dkjs.de
www.dkjs.de
mitarbeiterportal.dkjs.de
www.dkjs.de
www.dkjs.de
*.dkjs.de
perspektive-land.dkjs.de
ocamp.dkjs.de
owncloud.dkjs.de
files.dkjs.de
perspektive-land.dkjs.de
perspektive-land.dkjs.de
www.dkjs.de
*.dkjs.de
perspektive-land.dkjs.de
perspektive-land.dkjs.de

Certificate

The complete raw certificate details for www.dkjs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v7HCzh0PoIaY1p0Iqgb
lxq4IdE/sOb8QqPkUMxBDfjG72ahHxDvf74FkwyTtINvuPlgPW1zG38tIVyMFGfs
pLut7ZK6JctYFK8XNeaMIPYt5lYexrt1VmT0/foHveCDEHdxzo/kVxSdCyu73vWO
r7e7aJBBnx7DG1CNqD1GZCwPsSRZp0RzDr4desmVnQDg30AY62Gp5DLXMlnjsYxL
P0+JWUWDO/6s0tfkvnZWwx8JWKwYhApyTtPY9GnOdXZb3tLjXdcKlVOJmbHO7MkT
nTabjGTxiShCK4JclZkoIinZZshLkC7nqBXS4IXW6n722j0PN7auga6Afk21g+TL
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13675854186300090080008640099987280403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dkjs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28150539177590864360255934143300242241632162521838842532582234272517190541584836427480636303858561142352241719244459223688347350870213174719546728556555112322771912125337055492183993104040354801260590122835853182691272475342838992368189817499923817424628794275725578310075029161231765632468687888513950523677461333862074129482149471379006576497334752758766442574639261882226017829595026690885816379295976837297012094358055440614340005000349260988479330241313929492858379409341660501714683872632221263338418513028239680433522288282733112093085341576315340157020656043338864208627511671654809455330731363972149114358731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3305f4555871c0d5022bafaf8ce0553f6f013a0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dkjs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkjs.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0017a30e0118b376b9831e552d70f0be9a8ad37eef23a4d16848e83825f6773f7d8db5d8ee761f7aea768b908d1b590e6e481a775f04f731298d4e64a23808ab9201dd9c5dc38e416cb2b9c2ce4b505aa6737d495164b2174bbfa4cac1e79f1c4fab7057adca7a7335107360cf0a296c3b949b792fa4cf386da9007f4ed4253983c8ffcc3d234cfb640d7dbdb8e286574a2437063eac6138dc95678572451f0f13d8d8a3508209bc0e2aa08448a2b7dc5585d791dda5a683b1a0a418959ea5a65530689c4b2336bbbc0a0a6e8a07977da8c814ee160b7dc3380d634aa6bdde9ea40532ec63d73ed85255cc32547f1baca8b42cbd588496f1491ce522c08f0de155b344953df1a1a4bbdbd0b5128754c5065e1ad0c61b3ad2cf88267c5dfb066e27d89b87a68d7140e4b930b3c4dbbe82992173c4f145af8a0d595fdbc357bb0d739d182049f756af33dc4537d2c10d626ac12960055a5e5d12c7ee5b2d4639a329ca187e9520be365b01d06cc715f02f19028ce6ebc6e4ddc4fe5095fef15c1e3250a8dde8e4dca372b0c6cdb1d012877f79e1a358cb942e006a63297054eccdfe2e32cec68e0a84f98069d31bfd68bc234b0a0ac25ef1a09ce599dc148281fa83fe3e723855b4692904866f2d15bc1c7e64ffbce2eec44164cc41788f086cf7119edf4517b2928693b523398658c6f6f49f61496a1474b1ecb764a77ad3fb5b9f