*.steinberg.net

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 75:7c:84:50:a4:65:65:7c:99:c7:62:14 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.steinberg.net

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 75:7c:84:50:a4:65:65:7c:99:c7:62:14
Serial Number (int): 36360277790690837729093575188
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 45:1d:4b:15:47:f6:15:1c:a7:71:ef:97:7c:ed:88:3c:4a:2c:ac:93
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): f0:56:48:9e:be:b7:ad:60:93:ec:82:98:95:b9:e4:f2:a4:1e:9c:0b
Fingerprint (sha256): b0:bd:39:47:1b:29:cf:7c:0a:23:a3:21:37:8a:fb:8c:78:20:2b:bc:70:bb:72:1a:d2:64:4a:66:85:a5:2f:c2

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.steinberg.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.steinberg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.steinberg.net
steinberg.net

Other certificates including the domain name steinberg.net

(limited to 100 certificates)
www.steinberg.net
id.steinberg.net
product-line-management.mbstage.steinberg.net
*.steinberg.net
shop.steinberg.net
shop.steinberg.net
www.steinberg.net
*.mbtest.steinberg.net
shop.steinberg.net
*.steinberg.net
download.steinberg.net
download.steinberg.net
steinberg.net
*.steinberg.net
download.steinberg.net
*.steinberg.net
pathfinder.playground.steinberg.net.io.steinberg.net
*.mb.steinberg.net
www.steinberg.net
product-line-management.mbstage.steinberg.net
beta.steinberg.net
download.steinberg.net
shop.steinberg.net
download.steinberg.net
news.steinberg.net
*.mb.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
*.mbstage.steinberg.net
b2b.steinberg.net
b2b.steinberg.net
mbstage.steinberg.net
*.mbstage.steinberg.net
testweb.steinberg.net
product-line-management.mb.steinberg.net
webmail.steinberg.de
news.steinberg.net
*.steinberg.net
www.steinberg.net
mb.steinberg.net
shop.steinberg.net
*.mbstage.steinberg.net
shop.steinberg.net
ru.steinberg.net
forums.steinberg.net
*.steinberg.net
shop.steinberg.net
news.steinberg.net
steinberg.net
product-line-management.mb.steinberg.net
ocl-steinberg-live.steinberg.net
shop.steinberg.net
shop.steinberg.net
id.steinberg.net
*.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mb.steinberg.net
code-pool.test.io.steinberg.net
download.steinberg.net
steinberg.net
*.mbtest.steinberg.net
sdk.steinberg.net
*.mbtest.steinberg.net
steinberg.net
news.steinberg.net
www.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
id.steinberg.net
www.steinberg.net
shop.steinberg.net
mbstage.steinberg.net
mbtest.steinberg.net
newshub-publisher.mb.steinberg.net
*.mb.steinberg.net
news.steinberg.net
download.steinberg.net
pathfinder.io.steinberg.net
www.steinberg.net
www.steinberg.net
devweb.steinberg.net
forums.steinberg.net
*.mbstage.steinberg.net
sdk.steinberg.net
*.mb.steinberg.net
auth.steinberg.net
partner.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
openam-steinberg-euw-dev.id.forgerock.io
forums.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
beta.steinberg.net
*.steinberg.net
news.steinberg.net
steinberg.net
steinberg.net
mb.steinberg.net

Certificate

The complete raw certificate details for *.steinberg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3XrN4jyXmWr+KvocEZ
fCgGgnXPJlM0+B/MyDk5eqaw1bSYygtp6hm5yd2wwkYqyhMFrzXVFxI9DMkVGnkx
RF+2P3yCLsJKoeOkEfxp2zbLFlVCEOuiwT980xd8oCTzz8MGjSt3QDSEWyjafxV+
1q8bAIuWjofwISATUgIp+ShuthMB7JEkXMuccJv5vx8vcSZ7YnxJUcJq4N6x4kT4
Xr/2zl6kvSGgGTjov/9wo8rXH/SD7bHO9LJHnGb/MtVbfmvN7wqaqEgbTbFLLajZ
Rl9zzqkM9KBLRvvGk8+T+UI6pAczWjAaQCIna7KnoGNZwqVNv+e6tWBIIEwaejuC
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36360277790690837729093575188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 07:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-19 07:07:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.steinberg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19944588272613493521915501522169672653070731319224772971587798446355301252437309419688256949399577898992287678277373237520380419625303744341024274834623364226541911328412373213829773079657526106297149168986741996331218078768131482922977909059085897940394573605984219288502739488184617077804557867889013340631763231813849705402551348040591888559153868524334972616782637822276170426381187966220983079301107861705646288266966296858592772055956865083953803488322215500396512434760620864500124758009586895607911648744631480128545202331777223477246986991966227702683206543045583424823353637771102171776269169759755003724331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steinberg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinberg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							451d4b1547f6151ca771ef977ced883c4a2cac93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00785b5ecc4df5185eea854d6cab018ec319946da360288165f357ccac86ad9083a2c95545a88e57f909cd7961d04bbe359c67f3a2bb44f906e1e12a4e5c2d6f0708828122fd1caaf57a88b9a8a5c7fec6ae6fffc66271b5abfdf6dfe957d84d0bb6bb1c12db7b8c499352f0dd73314fd6ee6cd95bf79012cbd3384e4cbb39e082337d6121c0d2ea668e77a27bcf562507e34eef0bf305709deab5391a9e2385155c662c55545d21194455aba4f2e5ea0fd5f63bfc800e4b9b66fe5161ba2725c9d8d8d39b589cc2d0b487d0aed0dd3e13f256c5b82d2c104aabbc26e822528ed8bb644f9a97d7aacb5be11b71c67a310fccf9a543d925c8753a62b6bf854849cf