www.micazu.de
- MIcazu BV -
Issued by GeoTrust SSL CA - G2
About this certificate
This digital certificate with serial number 3d:9b:44:ba:5f:f6:f7:91:ea:61:fd:94:42:c6:06:1e was issued on by GeoTrust Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
MIcazu BV
Organization:
MIcazu BV
Organization unit: Development
Organization unit: Development
State / Province:
Zuid-Holland
Locality: Delft
Country: NL
Locality: Delft
Country: NL
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3d:9b:44:ba:5f:f6:f7:91:ea:61:fd:94:42:c6:06:1eSerial Number (int): 81889107725943683297151277107310364190
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc
Fingerprint (sha1): 62:2e:5a:61:b8:34:25:44:4e:08:95:d3:ba:8d:31:16:44:37:31:07
Fingerprint (sha256): b0:aa:cc:21:a2:5b:9e:81:42:99:33:dc:d6:b1:ca:19:1e:ea:d5:a2:db:a5:77:1c:9c:fa:d1:c8:56:3f:d4:97
Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer
Revocation information
OCSP Server: http://gtssl2-ocsp.geotrust.comCRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl
Check the revocation status for certificate www.micazu.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.micazu.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beheren.micazu.de
www.micazu.de
micazu.de
www.micazu.de
micazu.de
Other certificates including the domain name micazu.de
(limited to 100 certificates)
ssl379872.cloudflaressl.com
ssl379872.cloudflaressl.com
www.micazu.de
ssl379872.cloudflaressl.com
ssl379872.cloudflaressl.com
ssl379872.cloudflaressl.com
sni.cloudflaressl.com
www.micazu.de
ssl379872.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
ssl379872.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
ssl379872.cloudflaressl.com
micazu.de
www.micazu.de
www.micazu.de
sni.cloudflaressl.com
ssl379871.cloudflaressl.com
www.micazu.de
www.micazu.de
ssl379871.cloudflaressl.com
ssl379871.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
www.micazu.de
ssl379872.cloudflaressl.com
www.micazu.de
ssl379872.cloudflaressl.com
ssl379872.cloudflaressl.com
ssl379872.cloudflaressl.com
sni.cloudflaressl.com
www.micazu.de
ssl379872.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
ssl379872.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
ssl379872.cloudflaressl.com
micazu.de
www.micazu.de
www.micazu.de
sni.cloudflaressl.com
ssl379871.cloudflaressl.com
www.micazu.de
www.micazu.de
ssl379871.cloudflaressl.com
ssl379871.cloudflaressl.com
www.micazu.de
sni.cloudflaressl.com
www.micazu.de
Certificate
The complete raw certificate details for www.micazu.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIQPZtEul/295HqYf2UQsYGHjANBgkqhkiG9w0BAQUFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTQwNDI5MDAwMDAwWhcNMTUwNDI5MjM1 OTU5WjB2MQswCQYDVQQGEwJOTDEVMBMGA1UECBMMWnVpZC1Ib2xsYW5kMQ4wDAYD VQQHFAVEZWxmdDESMBAGA1UEChQJTUljYXp1IEJWMRQwEgYDVQQLFAtEZXZlbG9w bWVudDEWMBQGA1UEAxQNd3d3Lm1pY2F6dS5kZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAN3AqQEIHJrThuRSuSW+8O7b7OCiTgHoZ3gWza2qJyYQv6OF pJkGNIGcDzIFwzlRl5Y7TZgN44SnKFGsLnDFPAA+OeEycBrRg98S2Tsy4fYs3rA2 /lWRqLjZMhAy0atqT6GmCTSHOLNZkNFM6Aj9/6TLso0LYuDVJSjecAigVpNSfV/G JUOSEnUxe2c3wmobvcoUKv+tALoEhuRGfrHQV5VCUv4DLJ6r29pYIANfAv4Aaf/1 96o1uHNNUCM4xwhdXOCwZ0tUbd0O9nYUfzbKT8aI94JHHBI+KO2H+NvZAOTVUlEZ dL7GHkYBrUBNnKWqjr+g28Tu5ib5RnvKs4zf4HMCAwEAAaOCAZUwggGRMAkGA1Ud EwQCMAAwDgYDVR0PAQH/BAQDAgWgMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9n dHNzbDItY3JsLmdlb3RydXN0LmNvbS9ndHNzbDIuY3JsMEwGA1UdIARFMEMwQQYK YIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNv bS9yZXNvdXJjZXMvY3BzMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf BgNVHSMEGDAWgBQRStBzOdVbaQhcuj2/ZJqoixxVvDByBggrBgEFBQcBAQRmMGQw KwYIKwYBBQUHMAGGH2h0dHA6Ly9ndHNzbDItb2NzcC5nZW90cnVzdC5jb20wNQYI KwYBBQUHMAKGKWh0dHA6Ly9ndHNzbDItYWlhLmdlb3RydXN0LmNvbS9ndHNzbDIu Y2VyMDYGA1UdEQQvMC2CEWJlaGVyZW4ubWljYXp1LmRlgg13d3cubWljYXp1LmRl ggltaWNhenUuZGUwDQYJKoZIhvcNAQEFBQADggEBABM46YLQFbtQcDfwlwlzqGlr DUKzvHH7tWhYCZrp0vHy0lOXiDsuegDDta58yLW9wqGQ/5sgww0c3bVkT+e/tNJb WFoHDCTFSz3Xm0SUDNvsX2aIotFV0fIvV1+qIS8WQhy2O3KDQs5CwPMRkJ8ejud/ 6o26apCbObuY5jbSGmXG8GaIdYKssPNE0nMxhaEyYee/k5XF/1sa2lKtXurVKH3l ZqS2q2lcK3U4IvupeZ8GjQbfXS+wOpQoP8HMTasXoXNYh/+DP3pzxWtBwWk/UxDV 9fmUJFJkjq7VLkYU6bBlWQqd0k2u8nocmA0nbgzNTTU21NWKZ6ztaqHFzvmP+y4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cCpAQgcmtOG5FK5Jb7w 7tvs4KJOAehneBbNraonJhC/o4WkmQY0gZwPMgXDOVGXljtNmA3jhKcoUawucMU8 AD454TJwGtGD3xLZOzLh9izesDb+VZGouNkyEDLRq2pPoaYJNIc4s1mQ0UzoCP3/ pMuyjQti4NUlKN5wCKBWk1J9X8YlQ5ISdTF7ZzfCahu9yhQq/60AugSG5EZ+sdBX lUJS/gMsnqvb2lggA18C/gBp//X3qjW4c01QIzjHCF1c4LBnS1Rt3Q72dhR/NspP xoj3gkccEj4o7Yf429kA5NVSURl0vsYeRgGtQE2cpaqOv6DbxO7mJvlGe8qzjN/g cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 81889107725943683297151277107310364190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Delft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MIcazu BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Development' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.micazu.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27993669669166047485993722874533512598920914444764334223375906502987633529059188433261787029979893694410590035030391007105425491477408411397210583215625133518187429830237313487773207000803886355859473703728409881373972559574255123989744952066764107036988465323284974149708806437088845170373364337084060262812777326892964460408888145148490087636897177582381752620096486814815009438539076967879758558436570275733489456933922881715743931513064451730425010822593909539518070065086694387940692012102109547250022075176880322132775367596112532180856301109142238653712800808145042109100605731616151789429463248387217333149811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beheren.micazu.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.micazu.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micazu.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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