ihk-sh.de

- Industrie- und Handelskammer zu Luebeck -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 7d:c7:27:d8:7f:f5:0c:f8:82:e4:09:c2:b9:66:bc:58 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer zu Luebeck

Company registration number: CSM018822285
Organization: Industrie- und Handelskammer zu Luebeck
State / Province: Schleswig-Holstein
Locality: Luebeck
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:c7:27:d8:7f:f5:0c:f8:82:e4:09:c2:b9:66:bc:58
Serial Number (int): 167187574714821404633035312295972355160
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 57:73:3b:da:2f:41:c1:3f:8c:8e:f5:a5:ba:19:35:93:66:5d:29:14
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 77:34:2c:63:9b:60:06:e2:e4:8c:4b:80:91:52:d8:fd:4c:c2:d5:66
Fingerprint (sha256): ba:ac:fa:55:2d:ce:3d:9d:c0:58:8a:e0:e8:e1:bc:23:38:23:ea:1c:22:16:af:6b:47:3b:92:28:d7:7b:24:7f

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate ihk-sh.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ihk-sh.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ihk-sh.de
www.ihk-sh.de

Other certificates including the domain name ihk-sh.de

(limited to 100 certificates)
ihk-sh.de
ihk-sh.de
ihk-sh.de
www.ihk-sh.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-schleswig-holstein.de
www.ihk-sh.de
ihk-sh.de

Certificate

The complete raw certificate details for ihk-sh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa5YOZRifrJIKGwiiO6C
7+V/U6RXYyHN/wuszUHAKYBRo+YdfqFKzYuw5Nw8Yb/+kjsH80KpSpkCLIv574UQ
t8W9j/YqAbMeiIaaRvFjRp/GeX/GpSENWXvsTg5gGsv/y49g7tycpeb1EnEAh//2
54vEuN04HWkcw4k5o7R+Y2Uj0/XI1RqDIHTIHDqtiReGIYy9hMmlH3AcrZcVP052
q+Rm6YCnemGtFTlRG5Fn/AiLo7lBkewPEBJIskOx7Rvby91HC7SivjICKG4PlYvi
pPJRMQI16XfTGEgMP0qeGASBmtEkVHLSMuUyQYmclvKzjlh2mMaAt4aHWF12wNoO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167187574714821404633035312295972355160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 05:56:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-05 05:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018822285'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer zu Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ihk-sh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21420246079864766161315816827384125194954578504104737352146333787483954492039757145093792711756065812541428011940147132980407216734748928391648463798002836797104385768002684804669530271143618076498919182409303482755581052429896231382740976678909180858555680057889074516229194165415175760641691172853658636960147633120084197840266909266158896545781782045878803700433002010862700729015472843473594917693567935926028788399617139307186551784345666795596124564027397550321962139294847848658393044498764616300033117851618704520663814505300228404721878020916428925680417265163187359138008930562173979659030024499391410867913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1320 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-sh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57733bda2f41c13f8c8ef5a5ba193593665d2914
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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