www.guitar-gallery.de

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 13:9b:36 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=aehJiu7Bq-LKUCjxzlWqGbOArCxwawHM,CN=www.guitar-gallery.de,OU=GT39125963+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:9b:36
Serial Number (int): 1284918
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 3a:97:e9:7d:fa:67:33:94:b1:58:9f:a8:94:7b:4e:ef:8b:86:ed:ba
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): e5:ef:a7:e5:8e:54:c2:a5:e0:2f:68:83:d6:01:65:24:6d:4d:af:78
Fingerprint (sha256): c7:c1:4b:0d:db:91:f7:df:c7:7d:6e:41:5a:32:3d:e7:2f:98:b7:f3:c7:3e:9c:0c:25:f4:c8:35:ff:df:61:90

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.guitar-gallery.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.guitar-gallery.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.guitar-gallery.de
guitar-gallery.de

Other certificates including the domain name guitar-gallery.de

(limited to 100 certificates)
www.musik-produktiv.de
www.musik-produktiv.de
www.guitar-gallery.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.guitar-gallery.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.guitar-gallery.de

Certificate

The complete raw certificate details for www.guitar-gallery.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1284918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-22 18:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-24 18:44:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aehJiu7Bq-LKUCjxzlWqGbOArCxwawHM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT39125963'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.guitar-gallery.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892317581563010181385241538810976161974295392262541945853810309488814301678339888081796319592626075070245487028878556451442672009597645577076885433631475591519416346463323780170157745490098148710268304987888465058391163855047272409888841790819429310705952295399174927890812794512345918762536425784549642607420843366153316436606155882879600760277204304175759544827059448220369443696761680351956422193924706874241998724487686428549920355031546141063957557260085417756254937202107341098119359175315908954986524097370033031341551837110419488622640868227245144795771964362272831427476241815743767879171402038085041152731571111182937128818089944112963811284239371170545754941004179391625120874811691932089831130491005900774697593673633300233455522197932741749974193444951550789046631296861499572733078437483777366212550616004513887069883501629122274856484176285281554870768444343417680259395497150458712819878656328476140528772209593745013111826000732381892063912476259499984398333890285141393060730980164611347222941058060506146876371619834503387745491880176177182655420964910184543036749621043395567439420890901989032379041406652543897468620363028874610171070037130288784317750549559751759786367058270228909954416717400448607827772711881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guitar-gallery.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitar-gallery.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a97e97dfa673394b1589fa8947b4eef8b86edba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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