ferienwerk.sh-netz.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:6e:a6:af:b0:c9:b9:aa:74:b4:8b:3f:9d:95:e0:ea was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ferienwerk.sh-netz.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:a6:af:b0:c9:b9:aa:74:b4:8b:3f:9d:95:e0:ea
Serial Number (int): 5891445437214373304757632435456696554
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fd:0f:21:c2:7a:70:3b:b9:90:ca:54:ea:4b:de:0c:89:9e:5d:33:3d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 89:77:38:e4:7c:fe:f2:0a:5f:5e:b5:fe:9d:fb:6e:be:b9:1b:f4:f5
Fingerprint (sha256): be:e1:5b:18:6a:ac:20:b5:b9:08:37:b7:a5:c4:2f:8d:c3:84:45:81:81:e2:58:0d:5c:c1:dd:23:2e:01:75:c9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate ferienwerk.sh-netz.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ferienwerk.sh-netz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ferienwerk.sh-netz.com

Other certificates including the domain name sh-netz.com

(limited to 100 certificates)
sfbotde1.eon.com
netzportal.eon.com
test-netzportal.eon.com
energieportal-dev.sh-netz.com
qa-login.bayernwerk.de
netzportal.eon.com
netzportal.eon.com
netzportal.eon.com
www.sh-netz.com
netzportal.eon.com
netzportal.eon.com
netzportal.eon.com
www.sh-netz.com
api-energiemonitor.eon.com
energiedaten.sh-netz.com
smexnet.sh-netz.com
netzportal.bayernwerk.de
dev-netzportal.eon.com
mail.dsc-e.com
loma.sh-netz.com
netzportal.eon.com
enko.sh-netz.com
ciam.sh-netz.com
test-netzportal.eon.com
energiedaten.sh-netz.com
login-dev.test-netzportal.bayernwerk.de
d-api-energiemonitor.eon.com
qa-netzportal.eon.com
www.sh-netz.com
www.sh-netz.com
energiedaten.sh-netz.com
energieportal-qa.sh-netz.com
login.bayernwerk.de
api-energiemonitor.eon.com
www.sh-netz.com
sh-netz.com
www.sh-netz.com
api-energiemonitor.eon.com
netzportal.eon.com
www.sh-netz.com
d-api-energiemonitor.eon.com
netzportal.eon.com
meine-it.sh-netz.com
login.bayernwerk.de
sfbotde1.eon.com
sh-netz.com
www.sh-netz.com
www.sh-netz.com
www.sh-netz.com
qa.sh-netz.com
login-netzportal.bayernwerk.de
login.netzportal.bayernwerk.de
poc-smexnet.sh-netz.com
acs-03-haw-eon-energy-networks.eon.com
d-api-energiemonitor.eon.com
www.sh-netz.com
test-netzportal.bayernwerk.de
ferienwerk.sh-netz.com
acs-06-iconnect-eon-energy-networks.eon.com
login.bayernwerk.de
www.sh-netz.com
enko.sh-netz.com
netzportal.eon.com
mail.dsc-e.com
enko.sh-netz.com
loma.sh-netz.com
energiedaten.sh-netz.com
sni1d5fcgl.wpc.edgecastcdn.net
energieportal.sh-netz.com
sni1d6b3gl.wpc.edgecastcdn.net
api-energiemonitor.eon.com
sh-netz.com
pqa.bayernwerk-netz.de
poc-smexnet.sh-netz.com
login-netzportal.bayernwerk.de

Certificate

The complete raw certificate details for ferienwerk.sh-netz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz980UAckupyKmYHwmS8
V+fGk+7NQzCXk9mX+9A5v61REDE2khH8YORN0Hrd0cIrknIkYRJBZY7CONfA5xnE
BxtLvx+Dqj+FBz+CTKZ0SPDxZujkLIhSh5JhiJ3FwQc1/wBiPyIJtICnMC3W9pSY
BCTSKD4DOuOAIYHVL6R9jRE2+T5rWpGU02S/eYSgDYG4LFOHzPgnMQf5LjmaV3sV
2x0nA4j4IGrhEB01PZPmrC8u4maTyWmpon/JlN6XBAtpOwZB1TnK8EiJ7n4i1AF2
jPovoy/8yUQaPrArz8/i5KJSFpnQm0NmYc9F2YYajiflmTb7KJptvVN2e1JP8qnl
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5891445437214373304757632435456696554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ferienwerk.sh-netz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23637869915212168665931349018561306440368345668167400777707893908122002618322480513151265744568441717773960171624108230495960679438046147662254169400336235121870105796107491241123966002784579096823314611655221080667358568843093966434234238590784530089601000212428361350097529267297701224159204236431970414635983440635490783444426223961314541457171623894069358891409425902362686715098932265015510401789224383765785290173644963089108566459842913732357549265566274656929647202175874615719069018424427667066741250641942732829545952952545545875691362498007870595150709048537856047315363898303215936698698592397586208515373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd0f21c27a703bb990ca54ea4bde0c899e5d333d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwerk.sh-netz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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