cag3.sis-schwerin.de

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 6e:54:1e:b7:be:26:6e:1d:4b:2d:02:1b:ad:75:72:b2 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=cag3.sis-schwerin.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:54:1e:b7:be:26:6e:1d:4b:2d:02:1b:ad:75:72:b2
Serial Number (int): 146651855502348132248588437368165724850
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): fc:00:54:79:69:a8:6f:4d:02:81:e5:c2:94:8c:2b:08:06:5d:f8:d8
Fingerprint (sha256): c7:32:c0:b1:d3:c7:ca:b0:50:b0:b6:e6:f2:a3:ea:d4:2b:60:e8:71:aa:9a:90:5e:63:99:a3:a8:78:8c:4c:71

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate cag3.sis-schwerin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cag3.sis-schwerin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cag3.sis-schwerin.de

Other certificates including the domain name sis-schwerin.de

(limited to 100 certificates)
cag3.sis-schwerin.de
mobil.sis-schwerin.de
sis-schwerin.de
emmtest.sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
mgw2.sis-schwerin.de
cag1.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
piwik.sis-schwerin.de
ssl-vpn.sis-schwerin.de
sslvpn.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
webmail.sis-schwerin.de
mgw1.sis-schwerin.de
*.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
*.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
*.sis-schwerin.de
sis-schwerin.de
mobil.sis-schwerin.de
cag3.sis-schwerin.de
emm.sis-schwerin.de
piwik.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
mgw1.sis-schwerin.de
mgw1.sis-schwerin.de
piwik.sis-schwerin.de
webmail.sis-schwerin.de
cag3.sis-schwerin.de
wlanportal.sis-schwerin.de
webmail.sis-schwerin.de
webmail.sis-schwerin.de
sis-ksm-wlanportal.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
cag3.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
webmail.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
wlanportal.sis-schwerin.de
analytics.sis-schwerin.de
*.sis-schwerin.de
webmail.sis-schwerin.de
piwik.sis-schwerin.de

Certificate

The complete raw certificate details for cag3.sis-schwerin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jMEF59d4lDKgWYh+1gd
WoLE624y71CB/05WjXuDZlCthZRFFaNUOdUcP55fhilKkhn04KvHxAASnqx8IwFB
uF3+TOPaiZvj1VUhXsSGXIWNaZPGFDMBSs+Lv1lXeUUf39MOsYyiCNhwWszH77u8
pGuvVPxUUWNgQJDWmIxLn7C5RoVz5hFzscC/geCA4Tgc1WBUIYgGvASn3RyLw8h7
iJ3hQJ2pds6sEUPDPkmTFNy5D8Pf7Q5q1Q9WCR4j+3wZl3yK9I4hUlqzAh8Hg7xh
mKSd/GqaY/wUhyxdB+SGLO4jVPZ57XH7Hcv1hQYanltGTCyMRdYLuQ0nl8CWy5BP
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146651855502348132248588437368165724850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cag3.sis-schwerin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27545107402637989746305973087492113577773815669086355515706989936555886287835669119964676642445758013704302766873228739187093474234495739996683995789814377614573836114509886343293084836451819274173702917672104013455136998900333724352242944878176434100999043910976768599793715974350086796601148613562465778797658835973870897362002523665812415270120909167998370789307015740658735007729301634853410881076783105218216807940225784204743669002815554449006583129650504046697573541788972708956890842620897782940643594926506242056496881658603034864695726998568604717330388679151305120026841710762042810232576978479176368541493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cag3.sis-schwerin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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