cis.zmaw.de

- Zentrum fuer Marine und Atmosphaerische Wissenschaften (ZMAW) -

Issued by DKRZ CA - G02

About this certificate

This digital certificate with serial number 10:13:51:0c was issued on by Deutsches Klimarechenzentrum GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment KeyEncipherment ContentCommitment DigitalSignature] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Zentrum fuer Marine und Atmosphaerische Wissenschaften (ZMAW)

Organization: Zentrum fuer Marine und Atmosphaerische Wissenschaften (ZMAW)
State / Province: Hamburg
Locality: Hamburg
Country: DE

Deutsches Klimarechenzentrum GmbH

Organization: Deutsches Klimarechenzentrum GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 10:13:51:0c
Serial Number (int): 269701388
Serial Number lenght: 29 bits, 4 octets

SubjectKeyId: c5:75:c4:4e:18:df:e4:88:2b:b3:49:db:59:d8:c5:48:c2:75:8a:4b
AuthorityKeyId: ab:33:e8:3a:23:1d:39:2e:5e:e0:05:a2:09:59:29:48:2d:ec:e6:36

Fingerprint (sha1): fd:82:05:f3:0b:48:66:8f:d5:0b:6c:9e:e5:5d:0e:4c:2d:61:0d:d1
Fingerprint (sha256): c2:aa:da:92:85:35:33:57:97:d8:7e:06:e5:33:5a:ff:ea:b4:9a:84:b5:8f:25:e8:59:01:06:97:bd:cd:44:f7

Issuing Certificate URL: http://cdp1.pca.dfn.de/dkrz-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dkrz-ca/pub/cacert/g_cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/dkrz-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dkrz-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate cis.zmaw.de

2

DNS Names

1

Email Addresses

1

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cis.zmaw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cis.zmaw.de
www.cis.zmaw.de
[email protected]
136.172.66.101

Other certificates including the domain name zmaw.de

(limited to 100 certificates)
ds11g-dps2.zmaw.de
www.ifm.zmaw.de
nagios.mpimet.mpg.de
wts.mpimet.mpg.de
webgis.zmaw.de
dc-dev.adtest.zmaw.de
wera.ifm.zmaw.de
www.zmaw.de
ds4.zmaw.de
code.mpimet.mpg.de
t3projects.mpimet.mpg.de
dc4.zmaw.zmaw.de
lists.zmaw.de
vpngate.zmaw.de
cis.zmaw.de
ldapadmin.mpimet.mpg.de
www.mi.zmaw.de
ds6.zmaw.de
t3projects.zmaw.de
code.mpimet.mpg.de
mailer.zmaw.de
code.zmaw.de
calendar.zmaw.de
www.mi.zmaw.de
ds5.zmaw.de
svn-zmk.zmaw.de
mad-rt.zmaw.de
dps5.zmaw.de
wiki.zmaw.de
t3projects.mpimet.mpg.de
svn.zmaw.de
www.ifm.zmaw.de
lists.zmaw.de
ds11g-ds1.zmaw.de
mail2.zmaw.de
ftp-projects.mpimet.mpg.de
dc-dev2.adtest.zmaw.de
caldav.zmaw.de
webgis.zmaw.de
ftp.mpimet.mpg.de
dps5.zmaw.de
ftp-projects.mpimet.mpg.de
wiki.zmaw.de
www.geophysics.zmaw.de
t3projects.mpimet.mpg.de
t3projects.mpimet.mpg.de
mailer.zmaw.de
wera.ifm.zmaw.de
ds5.zmaw.de
cis.zmaw.de
buildbot.zmaw.de
wettermast-hamburg.zmaw.de
hwdb.mpimet.mpg.de
isw.zmaw.de
ds5-dmz.zmaw.de
ds11g-ds2.zmaw.de
wiki.zmaw.de
ds11g-ds2.zmaw.de
www.geophysics.zmaw.de
mailer.zmaw.de
calendar.zmaw.de
ds11g-ds3.zmaw.de
www.geophysics.zmaw.de
ds4.zmaw.de
t3projects.zmaw.de
lidargate.mpimet.mpg.de
hwdb.mpimet.mpg.de
ds11g-dps2.zmaw.de
barbados.mpimet.mpg.de
solaris-isw.zmaw.de
www.zmaw.de
isw.zmaw.de
ds7.zmaw.de
code.mpimet.mpg.de
www.geophysics.zmaw.de
ftp.mpimet.mpg.de
webstat.zmaw.de
icdc.zmaw.de
t3projects.mpimet.mpg.de
buildbot.mpimet.mpg.de
svn.mpimet.mpg.de
svn.mpimet.mpg.de
svn-zmk.zmaw.de
ds4-dmz.zmaw.de
svn.zmaw.de
code.zmaw.de
dc3.zmaw.zmaw.de
mail1.zmaw.de
dps4.zmaw.de
svn-mad.zmaw.de
code.mpimet.mpg.de
ds6.zmaw.de
www.zmaw.de
cumulus.zmaw.de
cis.zmaw.de
dc4.zmaw.zmaw.de
ds11g-ds1.zmaw.de
t3projects.mpimet.mpg.de
lists.zmaw.de
t3projects.mpimet.mpg.de

Certificate

The complete raw certificate details for cis.zmaw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLSiFwdedMZ3fbXLK1y7
6OlcLF8dQAQVImQ9Dkt+jdGSuK7x47UMpeigm45678CenDOOy0CPEwVlKIlcg1LA
XqJhsD9v9Vy4MW95xR0N3vn1QUJryd1v2LPWMwYy2bt14FGwey5GTVMF79xooWQT
hcL0nI//i/k6ClGNZCIZl71laeLo072Qyc0P5KVuaX4aSoP8H07/TZw6J2rd5E14
yCy0USoTVIVdLByR5lBpa8qeiz2NScWEPbMiG94w/luUClp97cekNICj0FerMm7/
RWY/E83WhIsxpSgTvwSMMPf1lqzfdWEAtZeUPQF/VU83f6L2bBl48l0t14+9XfEp
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269701388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Klimarechenzentrum GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DKRZ CA - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-05-19 12:03:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-18 12:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrum fuer Marine und Atmosphaerische Wissenschaften (ZMAW)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cis.zmaw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24326828086414127441277985086672215209806591706802565908927126879426042460883342886810042070081570762213402128093815084463530309016462084983580924962979024580703293506337265615042805549028417158414689434547234109683537140855862989559078505343785462065297931824939878625479293215840211792057283438174362636410233939055991115555063238387259161392296143386007269628555543391449986003894769667481800141468994671640817178666537786397605735768170337803958273135594502187604854636651920770003824566960489830372118632070139914796920255248447201281889441799852630024336030429345660276453884059167865270678499772915137769449857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c575c44e18dfe4882bb349db59d8c548c2758a4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab33e83a231d392e5ee005a2095929482dece636
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.zmaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cis.zmaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '136.172.66.101'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dkrz-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dkrz-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dkrz-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dkrz-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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