*.takenet.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 0d:de:6c:f4:a3:8d:f6:ac:38:df:80:50:16:d8:37:fc was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.takenet.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:de:6c:f4:a3:8d:f6:ac:38:df:80:50:16:d8:37:fc
Serial Number (int): 18434863730325165962725231890531891196
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): f1:f0:7d:23:1c:7f:c9:bf:fc:f2:ae:95:dc:fb:5a:06:79:c2:d6:ca
Fingerprint (sha256): b0:83:e9:08:ca:cd:4a:2f:50:df:12:f5:dd:65:af:8c:bd:98:09:bc:5e:49:75:86:11:a1:88:8e:d6:a6:66:cc

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate *.takenet.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.takenet.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.takenet.de
takenet.de

Other certificates including the domain name takenet.de

(limited to 100 certificates)
www.takenet.de
mex2.takenet.de
*.takenet.de
www.takenet.de
www.takenet.de
atria.takenet.de
atria.takenet.de
www.takenet.de
portal.takenet.de
www.takenet.de
portal.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
mex2.takenet.de
*.takenet.de
www.takenet.de
imfip4h.ddns.net
*.takenet.de
www.takenet.de
*.takenet.de
www.takenet.de
*.takenet.de
portal.takenet.de
www.takenet.de
www.takenet.de
*.takenet.de
*.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
www.takenet.de
*.takenet.de
www.takenet.de
www.takenet.de
mex2.takenet.de

Certificate

The complete raw certificate details for *.takenet.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIQDd5s9KON9qw434BQFtg3/DANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX
UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTYwNDI5MDAwMDAwWhcNMTkwNDI5
MjM1OTU5WjAXMRUwEwYDVQQDDAwqLnRha2VuZXQuZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC09k+nw28VXCkceaILm+Qf5PGnRNsUJUYT/ZReLIlU
vSBZVhbMkLA3MEEGGU9CjX8TkUOKzvFnZa4Ggrsh3+5r1tRCF1Sf0woDLrBZK2Qe
dQx0CK6tYfXyMJLm5X6yxIxyq7TNrFHuxXnqqmPFY/aWF3l4YH+bk7AnfaA6hoDF
hdcCwxs5NnJlDalQ1jHgaJnVdSNnjJ5m/bzthu2DxOq+gtDhOFso8+GasTMELPXz
JQLBTG9jcduzTv9ouEkY22BEQeNtO39NoLipc18yilyPW7zolVCi/aKYNz/xXvdx
q1+YXqxaD6sSJAMx9HwBvc8fZ0/5iP5yjJ5hds2qydx9AgMBAAGjggNyMIIDbjAj
BgNVHREEHDAaggwqLnRha2VuZXQuZGWCCnRha2VuZXQuZGUwCQYDVR0TBAIwADAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNybDBvBgNV
HSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBp
ZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6Ly93d3cucmFwaWRz
c2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFEz0v+g7vsIk8xtHO7VuSI4Wq68SMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Muc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vZ3Muc3ltY2IuY29tL2dzLmNydDCCAfMGCisGAQQB
1nkCBAIEggHjBIIB3wHdAHUA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbs
vswAAAFUYKnl4gAABAMARjBEAiAEiEdTz/gXfiK5PC9rITRN3v9L0mCiQkdYg/Hj
ZVWe7wIgT6p9PzvTEq7AglvpGS9mCetJo0bCEokjFFFvRbB/myEAdgCkuQmQtBhY
FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVRgqeYbAAAEAwBHMEUCIQD88pQ/
RaI/2Kw4oY7DJvtWXbuje/UBskAl8eIbtbrqtQIgRqKhbf4hF0odcRn/KhV8po/p
fxZgvGIijLJ1Y7W/3BwAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7
xAAAAVRgqeYiAAAEAwBHMEUCIH2T//htY2URkJ4ehsb/FUliIfh7K8rXbI3BkRXm
PkBFAiEAt5gAxItXEZqSRuXTAmZNoY4Udi9C3V12qvLDdDFaNFYAdADuS723dc5g
uuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVRgqefjAAAEAwBFMEMCIG2v0M3z
tF6esM4as1Khf7ptzfDL07BLbbt1sDrPsEfTAh8EYzExOdHwlPfiKNLl9bn2ow2H
/WTQnujFpDI/A5MMMA0GCSqGSIb3DQEBCwUAA4IBAQAnyoBQ1beHT+ssEVKNuKmd
OZqQWdmuHVvyuYcXBxdbDyT+S2KTbCaTqI3lP8b3Ajt+eqBdY6BEqH8GwcRc36+1
zIvditLIX4gCuhxXC8xAPjrsX/ivEJS1OMt8BdtGK3aAvZvYY3poW1ZGsdpUfzIs
xzrKtrkufRwPV3XeMM5tkSnZtGgIDVvfvXDZbTZbC6Wcmbg5XaUzjPGl/KjoeLJ4
TOutbkbGPRoW6Ygl7sk1PtfmhuO8W478khR6vm0/dZNFSBoqE9YLG20Co8zshgWC
zyMah46cQKUUByEXTO4KZk6hRq7VBsrPfdw0PNWUYQFcnXHjo6brhd2Udn9FAmdQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZPp8NvFVwpHHmiC5vk
H+Txp0TbFCVGE/2UXiyJVL0gWVYWzJCwNzBBBhlPQo1/E5FDis7xZ2WuBoK7Id/u
a9bUQhdUn9MKAy6wWStkHnUMdAiurWH18jCS5uV+ssSMcqu0zaxR7sV56qpjxWP2
lhd5eGB/m5OwJ32gOoaAxYXXAsMbOTZyZQ2pUNYx4GiZ1XUjZ4yeZv287Ybtg8Tq
voLQ4ThbKPPhmrEzBCz18yUCwUxvY3Hbs07/aLhJGNtgREHjbTt/TaC4qXNfMopc
j1u86JVQov2imDc/8V73catfmF6sWg+rEiQDMfR8Ab3PH2dP+Yj+coyeYXbNqsnc
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18434863730325165962725231890531891196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.takenet.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22844355450635813112780941739027950585597651979537334889839079894047216622648629522669275061915757699385535065911057957725329561201314753691609509263292822059036433512919210092257219469818126721310427493215130959558728687883070906362408549327356811143783646352648306599620366704812744714311194019446596441366808270628721761422265832632229225201091556336590276722995701548513421967322529522205626249252185684937286537473329585911042598067758610089972450150965966996000151067396564925712797244918185986110198346441655209483283142365794846198951121471623506456770291322878721268415200700449404774772266299097576431541373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takenet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takenet.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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