portal.new-energie.de

- NEW AG -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 2f:24:73:51:3f:00:7b:62:09:f2:f7:f8:a2:f1:0e:e3 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NEW AG

Company registration number: HRB 5912
Organization: NEW AG
State / Province: Nordrhein-Westfalen
Locality: Mönchengladbach
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:24:73:51:3f:00:7b:62:09:f2:f7:f8:a2:f1:0e:e3
Serial Number (int): 62662977402882021696936088169507524323
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): c7:28:70:9c:4d:ea:38:73:74:cc:59:5e:e8:cd:34:28:a4:12:9e:eb
Fingerprint (sha256): c1:3e:4d:a1:d5:0c:53:9e:80:c7:36:3a:19:ef:5c:5b:de:f1:1f:19:fa:f1:a9:f3:75:3b:f8:15:6d:cf:5b:22

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate portal.new-energie.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.new-energie.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.new-energie.de

Other certificates including the domain name new-energie.de

(limited to 100 certificates)
www.new-energie.de
portal.new-energie.de
portal.new-energie.de
smarteview.new-energie.de
www.new-energie.de
www.new-energie.de
new-energie.de
www.meine.new-energie.de
k612.new-energie.de
expe01.new.de
smarteview.new-energie.de
www.meine.new-energie.de
meine.new-energie.de
portal.new-energie.de
meine.new-energie.de
online-kundencenter.new-energie.de
meine.new-energie.de
www.new-energie.de
www.meine.new-energie.de
neok-kons.new-energie.de
neok-test.new-energie.de
meine.new-energie.de
meine.new-energie.de
smarteview.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
neok-test.new-energie.de
neok-test.new-energie.de
www.new-energie.de
meine.new-energie.de
smarteview.new-energie.de
smarteview.new-energie.de
ceosweb.de
portal.new-energie.de
www.meine.new-energie.de
expe01.new.de
new-energie.de
meine.new-energie.de
ceosweb.de
portal.new-energie.de
lastgang.new-energie.de
www.meine.new-energie.de
neok-kons.new-energie.de
portal.new-energie.de
ceosweb.de
www.new-energie.de
www.new-energie.de
smarteview.new-energie.de
neok-test.new-energie.de

Certificate

The complete raw certificate details for portal.new-energie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 62662977402882021696936088169507524323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mönchengladbach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 5912'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mönchengladbach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NEW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.new-energie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971343466308256052890687215098550095109568202616714364127855210091039819847344081661178489907718774042178890091759444481354741668050835633474695846758943389167408730299215905054421495799236739717893570397001893543732887690136024128988671168707639592764649148654101879596132921748821036222271571209823783271742001028099855839116397325341524193539664482924727342474525138147808017649274557307985359625781234399124775250873889664664160015276774033285752901779178611050981801443782559544602818447472837219412911808254960719700509526576559953353158149655527358754695466855534624816770496953913691028454671111457599030443761469977060828608899117685274442258756470671879310628632522859452075862764970109508212826955658827213716860514342524657246488925574520872395290760403585809631102265898711518229270244681857100815556653004300361426083973356535949083278480018131101160297127818791729815159197421818793658580489844125276281210510027759623764308173813558373912541154708491582356741999068312905001164416844803283275978083592693015094162905278645052793234035025216713535279348797308131407503322256668744706489910252536254591583807368105215911258052848019958185215756160037990757786231893800264408319810731985904543494038733097901962948233867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.new-energie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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