kundenservice.mydays.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 30:3f:49:e3:87:4b:de:a2:1a:fe:b0:72:a3:7d:1e:72 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=kundenservice.mydays.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:3f:49:e3:87:4b:de:a2:1a:fe:b0:72:a3:7d:1e:72
Serial Number (int): 64131557142329810467955346609637498482
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): d0:31:68:ee:45:26:b6:27:f3:e9:da:c8:d1:16:4a:f1:27:f7:80:04
Fingerprint (sha256): cb:29:3e:78:3c:46:3a:5b:1d:11:90:ca:f2:a0:51:ab:2f:8a:73:da:b6:0c:d4:54:29:b1:8c:94:89:ea:24:ac

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate kundenservice.mydays.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kundenservice.mydays.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kundenservice.mydays.de

Other certificates including the domain name mydays.de

(limited to 100 certificates)
kundenservice.mydays.de
click.mydays.de
click.mydays.de
*.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
ssl2.cdngc.net
mydays.de
ssl2.cdngc.net
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
click.mydays.de
mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
legacy.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
*.net.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
*.kundenportal.mydays.de
p0az-cs-ha.onlinemarketing-support.com
sxeimx.mydays.de
kundenservice.mydays.de
ssl2.cdngc.net
remus-wsf-alt.mydays.de
p0az-cs-ha.onlinemarketing-support.com
mydays.de
magazin.mydays.de
affl-login.mydays.de
*.mydays.de
invent.mydays.de
*.net.mydays.de
mydays.de
affl-login.mydays.de
mydays.de
chat.mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
chat.mydays.de
www.mydays.de
*.mydays.de
kundenservice.mydays.de
mydays.de
mydays.de
*.mydays.de
*.net.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
click.mydays.de
mydays.de
mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
*.net.mydays.de
bookingkit.mydays.de
www.mydays.de
mydays.de
kundenservice-app.mydays.de
sxeimx.mydays.de
kundenservice.mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
ssl2.cdngc.net
*.net.mydays.de
*.mydays.de
chat.mydays.de
*.net.mydays.de
ssl2.cdngc.net
sxeimx.mydays.de
mydays.de
*.mydays.de
mydays.de
unternehmen.mydays.de
remus-wsf-alt.mydays.de
kundenservice-app.mydays.de
click.mydays.de
p0az-cs-ha.onlinemarketing-support.com
chat.mydays.de
p0az-cs-ha.onlinemarketing-support.com
*.mydays.de
kundenservice.mydays.de
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
*.mydays.de

Certificate

The complete raw certificate details for kundenservice.mydays.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64131557142329810467955346609637498482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kundenservice.mydays.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929069108483577480252027910192572970537551473054696089232880873300946528377113816527097331842589426496541329493967339054056492851579677889609818954354979898707970392366564576159189699114124850132295529382889372820268584338013727170714605336298946055642709097414980090786235481142975818556166714345699031362641910189225443202763207899926140296826463360753104158420044017854988387856971589488322484364273147007011812305164206562928188613288598555028306106580599623880842218003347110178713637558601224419207478174886582709686799273574701790973997310772448532132010290187526014229531762159708196530735614325696506944314983227664506595963365828229458433044777965963298925814989213131058278667919587916143235861727288877637720475577071090960156698884343438548074124699355838433107104500058067908298894884674527369986570082865297231875044032831984411810164408232577235605219712169324378301551786322155112646807416789763376078373154671185494162502684386299203095408434380148256762516353158378028550613259250779678763617308036001924303644213918419548429377297386679316138297866211321135751702945363778523078734783359274271713195551168897243819172927814207810097671641171123690730146450997161536895838939428212162047097798371889358598260513469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenservice.mydays.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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