kusel.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number 87:26:84:cd:c1:f9:ef:57:d5:dd:c6:6e:17:46:35:14 was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kusel.de

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 87:26:84:cd:c1:f9:ef:57:d5:dd:c6:6e:17:46:35:14
Serial Number (int): 179645780291461723427053752574428984596
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 31:a0:b1:84:58:25:a6:5c:9b:ed:30:4d:f5:0f:87:e4:e7:06:76:4b
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): a2:e8:3f:74:92:91:bb:29:9e:b4:14:48:83:14:29:23:15:69:66:e7
Fingerprint (sha256): cb:07:4d:42:41:5f:44:48:04:55:a6:be:d9:21:2e:bd:56:a8:92:00:11:04:cd:f8:1c:3e:8d:ba:0d:e8:25:f6

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate kusel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kusel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kusel.de
www.kusel.de

Other certificates including the domain name kusel.de

(limited to 100 certificates)
kusel.de
stadtwerke.kusel.de
kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
kusel.de
stadt.kusel.de
kusel.de
kusel.de
kusel.de
kusel.de
museum.kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
stadt.kusel.de
stadt.kusel.de
stadt.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de

Certificate

The complete raw certificate details for kusel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeSwkA01xRkN1TsMCJkm
S1DqY3+p/WPgP3XYzvKKwsWoyN1Rv7GhPWWbQOSZHdfNk6xfiQDnY9zfEFJS8TFE
oXz+fJ+1x7ZY+0bj5YOgJ92dKXyAXgkac52zadSSeInSFrSJFIe3sw7Fkj3Uj8EZ
Qq/+zt/ny9L+y8q0CZpDgbW9sWKghnSiziGex2mgG+pU5vTnMWMINkLogGceflCN
CKrc8mX5MUO8qkQ7iO4eE12dfxPQC+Pf+oTV8MoEOfLY8kCfrYU/hGiurksPAvOy
I6bufDtsqh2QwwrnioSzqrpGPn4BhCvZIVVpIg+Rn+h+JYPbnVJWvkDSBVIVLWnA
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 179645780291461723427053752574428984596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kusel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19427231752953106182556335051741637476541757234317787124189534140330995441348120634862163358104797010776589248926690867736975644262499564282593662560088733125697174795844154403525025625261632751869256676789912621763121537291393204105452720392383808692401846717309021133590343182411540873123269065734340619908547817687919877132923114994534423683988801542543173610304495470031726785887409581786396816431805986376370334594649335370360836100582336776046626523324708783365455450848115661616633847138656509879829983924350327425923278334782578477975317405663282407048098351120708240967746948293601074507720232803986594971651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a0b1845825a65c9bed304df50f87e4e706764b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kusel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kusel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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