www.ober-ramstadt.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 92:89:95:b5:5a:72:c8:6e:ae:ab:2c:72:51:bc:42:f8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ober-ramstadt.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 92:89:95:b5:5a:72:c8:6e:ae:ab:2c:72:51:bc:42:f8
Serial Number (int): 194781668501537762952184529771296473848
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 49:98:0b:c9:f7:76:c2:76:f4:f8:ab:5d:7b:9e:2a:d7:ad:de:dc:3c
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): fe:ee:60:54:6b:1e:fc:b3:47:88:b2:13:81:24:8e:05:51:8e:5f:ed
Fingerprint (sha256): b3:85:46:50:b6:51:68:ed:c0:e4:e9:d8:57:f1:9c:8d:b1:69:f5:f9:01:75:0e:81:50:e7:92:e1:a4:38:41:1c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.ober-ramstadt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ober-ramstadt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ober-ramstadt.de
ober-ramstadt.de

Other certificates including the domain name ober-ramstadt.de

(limited to 100 certificates)
ausleihe.ober-ramstadt.de
ausleihe.ober-ramstadt.de
ausleihe.ober-ramstadt.de
ausleihe.ober-ramstadt.de
ausleihe.ober-ramstadt.de
ausleihe.ober-ramstadt.de
www.ober-ramstadt.de
ausleihe.ober-ramstadt.de
www.ober-ramstadt.de
www.ober-ramstadt.de
www.ober-ramstadt.de

Certificate

The complete raw certificate details for www.ober-ramstadt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq4g1nu7KogIjKIhQDjcQ
OMQz0GrmTFbiDFTz6kELBBPBn9rSVOE9QIxjO1HGjrKqH8lrGcQkaAB/T9O+BBKG
lNq2WOI+dfT5wX5nxaDAawCHMM1VIOkjGvtBwoEoFQmKNlRk7HLFuUz76aR9Bqj6
Mv7fgkPPfqlaufYkA3atceg4G3gQTd2vkqx0fDI4tI7redZpXtSdJd4d4VzEb/ya
ZAfUUDSdyvhkdKvZLfwQN6xjI4335jflEM9dks4Za17fge6AkWBvQbEmORi6A1O1
TDFnIFLDXAPoF0iADlg92LLCooETRt/9BpnEFqVDRpPMREFYphAUomAFKJbUGO2E
2ElRUuJZNz01C6MTi1hWwUes/lp2pWwg2RaVjd9sU+Oq30KuHnyy8H7Oqx0HCajH
IfaM9oVZmFt7SBchGrVUquta9af2GcUsS6Ppn+RVEih+jGgxhv0vYJPYB1GAfIAu
gq0S9v/GG+7bdtl04jxI/lSd5WrAv3o2oJhvRiOpN8AqwtnSQBy2lGNxIbPRjILB
IaJxQs9bYuLINVGzNl7f46sc/06kbiHhxOwUXbKDjFq2WZLaK2BuYJW3PUdbcoc0
rK3FfVq5M7j4aUsQ47RmNYU3oPTijLeiF1xqd1x0yWrYCoeDO3hCUCqs2J/gowvv
rTlfiBz0KwH4LyHZwhiRX08CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 194781668501537762952184529771296473848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ober-ramstadt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699789784462282660952104948552607894338846251367774534847256794820505313268304931552654957432154241334942860638948505638100285199306508249747974038000162948919072268218179157086833109178789153247025083599709215206532181002163232324171114134119194943728189755145278734530797999900411916774052004511906734143213599583855255727187168431824281251774561856253110616172198308643710154471106871154855949095317769104888382324255329557361370240091137970838997925590980602377466493292309401057897152376071899456980871683821612047100081366476585512202748706955830111568334415403614046776240944411644031881762216853497320705525570287880617394148211534240830407200583070793061417966200186361055082300446880237965038785107253986319501180194585115983400881200072209241588782501832446392735726665837080757274645009585339215834995880442570632976397352270538922687891896376301207625581445560581203916203972989305332410199227673260264858907021028203978974132457701739641754885559690922464479449737196715582295153503622852954297711314519551008960281798387205989033136522109627049381638947422134186760371627001475558877505792893570437731325583922833314386096114797875051008566715510216527224551995866948381478560506776428248800799161469279838950330031951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49980bc9f776c276f4f8ab5d7b9e2ad7addedc3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ober-ramstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ober-ramstadt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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