oc.hofa-college.de

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 11:70:cf:bd:a7:4d:b3:55:fe:06:fc:83:8e:47:ef:66 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=oc.hofa-college.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:70:cf:bd:a7:4d:b3:55:fe:06:fc:83:8e:47:ef:66
Serial Number (int): 23182626661188072443650926107209232230
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): 5c:91:9e:22:cc:90:34:19:58:c1:d1:f8:a9:97:a5:60:15:22:4c:85
Fingerprint (sha256): c6:d7:b6:1f:c7:d5:8e:1f:c5:a2:fd:e3:b6:fd:bc:93:64:d2:59:12:ad:4d:db:43:e5:fd:0b:96:ed:44:4b:59

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate oc.hofa-college.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oc.hofa-college.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oc.hofa-college.de

Other certificates including the domain name hofa-college.de

(limited to 100 certificates)
oc.hofa-college.de
campus.hofa-college.de
oc.hofa-college.de
dev.hofa-college.de
hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
studionews.hofa.de
campus.hofa-college.de
support.hofa-college.de
campus.hofa-college.de
studionews.hofa.de
www.hofa.de
campus.hofa-college.de
studionews.hofa.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
dev.oc.hofa-college.de
hofa-college.de
www.hofa-college.de
hofa-college.de
campus.hofa-college.de
hofa-college.de
www.hofa.de
hofa-college.de
www.hofa.de
www.hofa.de
dev.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
oc.hofa-college.de
hofa-college.de
cdn.oc.hofa-college.de
oc.hofa-college.de
www.hofa.de
oc.hofa-college.de
campus.hofa-college.de
hofa-college.de
studionews.hofa.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
oc.hofa-college.de
campus.hofa-college.de
studionews.hofa.de
campus.hofa-college.de
campus.hofa-college.de
hofa-college.de
dev.hofa-college.de
dev.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
campus.hofa-college.de
oc.hofa-college.de
studionews.hofa.de
campus.hofa-college.de

Certificate

The complete raw certificate details for oc.hofa-college.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscHGuKoSh36/Ka1pbvZM
8W0PtSsgdWybXy2rvOVdNWMuvhrvCIfjapTdGp7KUSntXSYpYjvheGlqHuPczFy8
4HoLRAZ2296Mo5jLS0vFBxrfo7DID6islb7pEAZ+5jTkrJaxT3BwKaXPirZZmKMS
e7yUCN5hP3fvjTmt8ouoiq3O8IANZzU8d2zzZBDAPvcjUO4ujtsHIUgJWo58sZPn
7SpU1st4/RWNYQRR2vmiSMjIpRbWruKMm61DVqN0Rft0JmEpK9SCJDw1e0nxsyhq
vcvDlZYg8+daDncPV2JAGuEIbgg7VK32BzP5s/+QZvdkr/hNr49an27HwtSHjz4R
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23182626661188072443650926107209232230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oc.hofa-college.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22439734611828204438552369944643133862361636900912724542181718806653496470413959271228969804799668255656475923081364058415401111165770046708861778168911493699409784807297675818602615502472189361754892321949167858082575409392327202493297211976407049474857212216530277004944992569642489643077543612827171527239162887436057911281391072739771948026500378769155298106787871835478790407389593433583243788943216416784566512001164200147161360443722051677606313213661552817760691785837223637974281291501065761087836716245938270959317923614217396295365052586140868479185089432765349713520931035390655504787734819657383426265539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.hofa-college.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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