www.hmi.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HMI CA - G02

About this certificate

This digital certificate with serial number 0c:ed:94:4c was issued on by Hahn-Meitner-Institut Berlin GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization unit: Zentrale DV-Systeme und Netze
Country: DE

Hahn-Meitner-Institut Berlin GmbH

Organization: Hahn-Meitner-Institut Berlin GmbH
Organization unit: Abteilung DV-Systeme und Netze
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ed:94:4c
Serial Number (int): 216896588
Serial Number lenght: 28 bits, 4 octets

SubjectKeyId: b6:dd:ef:85:03:9f:27:69:77:cd:ea:32:3a:9c:31:d0:3b:46:02:41
AuthorityKeyId: f0:be:7f:8a:55:23:b1:f7:f0:07:8d:ee:0d:a2:22:fb:7e:ca:81:b8

Fingerprint (sha1): 19:c6:e8:17:5b:9c:ec:9f:26:31:c2:a5:e2:fe:12:d7:c8:6e:5b:92
Fingerprint (sha256): ba:05:37:c3:a2:3c:e8:79:a6:41:cd:33:e8:89:61:ca:9a:da:40:64:3a:08:a0:fc:aa:b3:da:b4:6d:a2:c6:d6

Issuing Certificate URL: http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate www.hmi.de

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hmi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name hmi.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hmi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q6ujTOcUk/zNgIGG4qZ
2oZNIvAIyE/djNIYrV5ZyFpb+6mWLNcFZG67u7/vgTz8t0S1dyjhNhq4V9ZZOAHy
Dgz7ZmngjpUINlnl6gYNxBDsS2XP/8l3pIZnf9gctKke8b9gjFe6JqMQMvbBBL/p
BorgVrT+HnDCIVneSjIJZEg4i0lQDvEsqSEzk/BiI33OaBoW+Gdl4DXA2wHTTRSz
1WUcgqDyjNkMocv61tfjy+YxxRi7AQB7q8IiaROjawtn6jCj3ZpylqXb1gefkCO7
0aSmJR4ULFj1jz9CVkfaQrkR4iQH2oa62DcVP53ZFoZdl0jwGNS1qWcSjAVEbBzd
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216896588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hahn-Meitner-Institut Berlin GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abteilung DV-Systeme und Netze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HMI CA - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-09-15 08:03:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-14 08:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale DV-Systeme und Netze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hmi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26895998843927232552704658109938486075639765561356481486267158280318950024054998911972606483411959470568892702425446339401323215432950565398573021473979599061761170115896962682081871433126059121967075595052911455279155842489981646911448829568397986251139774736512373927496847800480775047196599134625285539588945937239037721534762391427259608512466671405885097920311655000549073245646058133465079560452059925308455372361601823856029190534482672080164007564168252274101126738833122389226118350098527479491145110161706135282226262541393323317717835557761987625009157782922238977136205760692663805988833536138759414537601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6ddef85039f276977cdea323a9c31d03b460241
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0be7f8a5523b1f7f0078dee0da222fb7eca81b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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