edu.dai-labor.de

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 17:60:12:1f:60:7f:6c:71:0c:b4:fa:1d:32:94:13:8b was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edu.dai-labor.de

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 17:60:12:1f:60:7f:6c:71:0c:b4:fa:1d:32:94:13:8b
Serial Number (int): 31071071970782918824306632865640354699
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 91:1a:83:28:ed:e0:7c:fb:86:90:25:06:96:57:13:bf:d8:82:24:3b
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): de:50:fd:2f:3e:eb:99:3d:00:18:49:01:96:03:59:bb:06:fc:7f:6c
Fingerprint (sha256): b1:80:ff:74:3d:7f:0c:f0:ee:38:81:86:b6:ab:ab:0e:00:d0:f6:45:1e:3d:77:af:fd:59:b7:fa:74:c4:75:e2

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate edu.dai-labor.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edu.dai-labor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edu.dai-labor.de
dai-labor.de

Other certificates including the domain name dai-labor.de

(limited to 100 certificates)
dms.dai-labor.de
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
gitlab.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
lists.dai-labor.de
dai-labor.de
intern.dai-labor.de
daiknow.dai-labor.de
ia.dailab.de
daiccm1.dai-lab.de
redmine.dai-labor.de
berlinsuche.dai-labor.de
imp-pub-ms.cm.dai-lab.de
dainas.dai-labor.de
pia-test-intern.dai-labor.de
cvs.dai-labor.de
gitlab.dai-labor.de
intern.dai-labor.de
flexnet.dai-labor.de
lists.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
berlinsuche.dai-labor.de
mail.dai-labor.de
gitlab.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
daiwordpress-neu.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
va-hamburg.irml.dai-labor.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
git.dai-labor.de
daiknow.dai-labor.de
va-hamburg.irml.dai-labor.de
wlc-5508.mgmt.dai-lab.de
berlinsuche.dai-labor.de
diginetdataint.dai-labor.de
pia-demo.dai-labor.de
cms.cm.dai-lab.de
pia-dev-intern.dai-labor.de
www.dai-labor.de
mail.dai-labor.de
va-hamburg.irml.dai-labor.de
gitlab.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
exp-e-1.dai-labor.de
cvs.dai-labor.de
www2.dai-labor.de
dainas.dai-labor.de
berlinsuche.dai-labor.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
exp-e-2.dai-labor.de
edu.dai-labor.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
exp-e-1.dai-labor.de
mail.dai-labor.de
edu.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dms.dai-labor.de
dai-labor.de
va-hamburg.irml.dai-labor.de
pia-dev.dai-labor.de
cvs.dai-labor.de
ima.dai-labor.de
gitlab.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
ima.dai-labor.de
intern.dai-labor.de
gitlab.dai-labor.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de
va-hamburg.irml.dai-labor.de
www.dai-labor.de

Certificate

The complete raw certificate details for edu.dai-labor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31071071970782918824306632865640354699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-09 08:16:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-09 08:16:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'edu.dai-labor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805372002263931087246020613261477005161458611567851576174332034408624953663734547085298511018142490190840755275746618258151535022712270934864914929894419459232830911463929971901533232350339856335579657830052578016500267815047663291892943371807541801202752328395959183521128547656313211023544395361461391074768789841386652309220262134684409515628308687126762043641923843917405834786964949166652414562395279398867425020137097798403924500694720543140713864425387947166948404440689942107586731948815597961393231787911962434235040889977830647001072184894923566457475423216988809436463421111260353268236052047651471120414620328377572271603307472700469105807118547068912928847091165670084348231595926477680740550843210249637726121234952994553056621209493875969340264259740159599344872215513350548018145200877896939567136736530165027227551236943165773481989623243853299723422089811358925175448742300898960638907909344165309700429999170976898677687688971336047692126525107168638404993098810159288150640813163517667976921813262689946530614788608112114380120491456288974483450953210872387574146692780845925382648402540086074349902551652757218812620795512053123671230303819644912530087572094414581164450684876396376880829504739013827779908175141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							911a8328ede07cfb86902506965713bfd882243b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dai-labor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d8b419128caeefe57d05f577b23b9a84ce72efb7e9c092b3d576af52b0263b0c209cd01c8b4d36b5401383fbebcf7a9417380d2dc3edb30dd71011cad8e0dbaacb5d0eee956da706a95dcb4e1f47594c26c4672950d2413876c628bb0abab66e3ff3429b72081f39fe168672108c20f68facd9f159e7b2ff6856617e03d148e854165801876c5dafb3eaab930351ed8e461d8ad8698f81b2d6debad4879364afd3a3e6ac6a7118cbf42804ca3a10aff2158867641ae0f6f1eee8db326917453adf77ccd75d08128e769d75f7f5c30a10e5f094d5fd853c715e381a60d48fbf6d4cfa6c15781c7975fccb73f38a729941442541faba502dea385136ee40464b5c