csgmail.cad-schroer.de

- CAD Schroer GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 06:2d:ac:d5:06:0a:13:1d:c2:b6:26:02:01:c0:06:5b was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CAD Schroer GmbH

Organization: CAD Schroer GmbH
Organization unit: IT
State / Province: Nordrhein-Westfalen
Locality: Moers
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2d:ac:d5:06:0a:13:1d:c2:b6:26:02:01:c0:06:5b
Serial Number (int): 8212526785263095697396953892691904091
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d9:27:a3:d7:1c:5d:9b:ac:ef:3d:c5:5a:9a:e5:c1:f2:74:ab:e5:02
Fingerprint (sha256): b0:a0:79:77:96:08:32:4f:f2:ee:14:cf:8f:b0:ba:a3:f1:fd:1c:04:f8:29:49:59:54:98:ca:3b:ea:01:b7:a3

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate csgmail.cad-schroer.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csgmail.cad-schroer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csgmail.cad-schroer.de

Other certificates including the domain name cad-schroer.de

(limited to 100 certificates)
bimsrv.cad-schroer.de
mxbackup.cad-schroer.de
cad-schroer.at
csgcloud.cad-schroer.de
analyze.cad-schroer.com
analyze.cad-schroer.de
csgcloud.cad-schroer.de
mxbackup.cad-schroer.de
marketing.cad-schroer.de
cad-schroer.at
csgstore.cad-schroer.de
marketing.cad-schroer.de
marketing.cad-schroer.de
analyze.cad-schroer.de
ptc-solutions.de
mxbackup.cad-schroer.de
mxbackup.cad-schroer.de
csgmail.cad-schroer.de
ptc-solutions.de
marketing.cad-schroer.de
csgmail.cad-schroer.de
ptc-solutions.de
marketing.cad-schroer.de
csgmail.cad-schroer.de
cad-schroer.com
configurator.cad-schroer.com
cad-schroer.com
mxbackup.cad-schroer.de
analyze.cad-schroer.de
cad-schroer.com
ptc-solutions.de
ptc-solutions.de
cad-schroer.com
analyze.cad-schroer.de
mxbackup.cad-schroer.de
mxbackup.cad-schroer.de
marketing.cad-schroer.de
csg5.cad-schroer.de
cad-schroer.com
analyze.cad-schroer.de
cad-schroer.com
mxbackup.cad-schroer.de
mxbackup.cad-schroer.de
csgmail.cad-schroer.de
marketing.cad-schroer.de
marketing.cad-schroer.de
cad-schroer.com
ptc-solutions.de
csgmail.cad-schroer.de
ptc-solutions.de
bimsrv.cad-schroer.de
ptc-solutions.de
mxbackup.cad-schroer.de
cad-schroer.at
marketing.cad-schroer.de
analyze.cad-schroer.de
bimsrv.cad-schroer.de
marketing.cad-schroer.de
ptc-solutions.de
csgstore.cad-schroer.de
marketing.cad-schroer.de
marketing.cad-schroer.de
ptc-solutions.de
analyze.cad-schroer.de
marketing.cad-schroer.de
cad-schroer.at
cad-schroer.com
csgcloud.cad-schroer.de
ptc-solutions.de
online.cad-schroer.de
bimsrv.cad-schroer.de
csgcloud.cad-schroer.de
analyze.cad-schroer.de
csgmail.cad-schroer.de
mxbackup.cad-schroer.de
csgcloud.cad-schroer.de
marketing.cad-schroer.de
csgmail.cad-schroer.de
csgmail.cad-schroer.de
analyze.cad-schroer.de
bimsrv.cad-schroer.de
cad-schroer.com
mxbackup.cad-schroer.de
cad-schroer.com
csgcloud.cad-schroer.de
cad-schroer.at
mxbackup.cad-schroer.de
mxbackup.cad-schroer.de
mxbackup.cad-schroer.de
marketing.cad-schroer.de
ptc-solutions.de
csgmail.cad-schroer.de
csgcloud.cad-schroer.de
analyze.cad-schroer.de
csgmail.cad-schroer.de
csgmail.cad-schroer.de
cad-schroer.fr
marketing.cad-schroer.de
cad-schroer.at
csgmail.cad-schroer.de

Certificate

The complete raw certificate details for csgmail.cad-schroer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGwLythfbLoGgWLWhkXY
+l6fFwodnEEsWE+Qus3q1beNZBraXnvCFOmo5Q4kebtSjbZgN7D30VK0a6VqTvl0
p47cXp4Hzw/m3FnxBuOWcCGl0htzF2IEqX4kcZ0mePfHMGUP5S/2KoT0sxJEPOYc
AJHdOe5H2Zkm7gnPMNPyp5jJ6VCrz2+rBY4wlrZhLmUdudfqZumszO2D5kQNkamU
BoDgN4HV5JX440tw79+St8R2a2LY80L+w/0YAg6OMgIHr9OJNTaj2VX9pd5P1HZu
uzsNl16dCqZUXVFl027ICDRMmiDcw/dR9IClZviCOgSOuCsQxm0dWzKOgsFJlwMi
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8212526785263095697396953892691904091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Moers'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CAD Schroer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'csgmail.cad-schroer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24795987273221686932687859623234120897998639942312872162732399070707652931128411454019392080856080009113880190481345325185154907374351125362170214650591728432909078021481877509058837512926336641105239675784806636468122651121698505180045454298791753654948730670467694280502137433580233421466222371800534484403730006730038374304091834060338005895209230845266063737242799702749017457645223451045742434340157945849443050505965466545888937244480391525391534458761451274105312680376573346127684276478052626697176868847423956790038616927018317850040461477212308407166495796075864648909220780625557352700052318206217530057323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgmail.cad-schroer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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