*.sozialgruppe-kassel.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5c:5e:a5:ca:9d:e6:d7:d9:ec:2b:aa:48 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sozialgruppe-kassel.de,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:5e:a5:ca:9d:e6:d7:d9:ec:2b:aa:48
Serial Number (int): 28587042858697516685460220488
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d4:a4:9a:55:03:01:c7:0a:31:28:26:0c:ea:9e:50:69:a7:b9:c1:d8
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): f0:04:24:e8:2d:9e:e4:76:da:76:d4:4b:2b:17:b5:b6:b0:80:b8:c6
Fingerprint (sha256): cc:fd:1f:27:f5:8b:9f:f8:e7:62:19:03:26:71:28:bb:b7:bc:d1:ab:f3:9e:59:39:23:61:4c:c9:c8:f1:81:dc

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.sozialgruppe-kassel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sozialgruppe-kassel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sozialgruppe-kassel.de
sozialgruppe-kassel.de

Other certificates including the domain name sozialgruppe-kassel.de

(limited to 100 certificates)
www.sozialgruppe-kassel.de
webmail.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de
*.sozialgruppe-kassel.de

Certificate

The complete raw certificate details for *.sozialgruppe-kassel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAziS6+tirPAcAXxdpSsAo
HkjM12GjnjAw0wEaRFFwxB7dLp6XPzUcUdF5xZVAVPlv0VTbwMZynUGpQCQQR8cr
+jRxkb1D4EM9yGxl1INc0jA+JUdIcg2qrg1XcW+2p1FhfKW5SqCP9g1KglF0BKKq
lMPneh2gvXHQPi54BNQkWEzeHZMZpw4RILtLENdmOGNztAQemvs/waU0ESQQg261
ri+LHIdDtyUmXRKR9SauWOJXAk0j/ZCzb8Ij0eFteumCu4G0aBQ6x2D2rkYlUtq1
WgmIzcwXyaYsGSKJnlhw9Cndp/EsQQOEXb4AEIQgluVMxb1tV1feLaazJ4zWNhHt
nsDnxTC/tk3k3k1JYh54qr/OGHKcuRBR80kTEMBwsv/sfvfOWt9ZpJWUeVeqglw+
Rnzj2sNv15Kr+QHGbsRr2cS0ING8cjmqnOJUtWwN7ae1xr12zysjYe9ePfz/xmS3
PzbcsuPcnUCwnAC1eUi3mxn9aA0vF/g3E5GrJAi77T8L/JhVyOm4AqXGw0VvvzT/
YsG1gK6gXYK27nkY8/N50qhYhpMuuN6GfqFu7BueKEbUV1p250h3RA7M99LLhTRi
SCF/CnwRoM0HFdq6fpeHZbsvPcG9ihaU72DBwEGpBcuwZevD0BZveGBGCZ1UloKe
YqAJdtrz4seiAHOZ70vqrvsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28587042858697516685460220488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 10:33:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 10:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sozialgruppe-kassel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840992017536112623149408239335770057415881291720891874251397248229304167213326851395777489793325154883559120261905638322684249420505100915889889963724996553982397866082327565111588940836199980358467842131709242541330320616123547030308197841106069923948574839496090547629175000000642187248877178544312287029200029705138937529647638288646245582597884728481802798233482222637104224162378387831363898091664156986932747369630381604125236137971153606834696750575857040317107077052846712955551908479403851410699772164307483709941830276946962696257572219951119115280697709776609354586293652448060549598945119050383550347292886288718874767009277608510719106955815113651166649613007614449421962041191580002674158861139070749169895300934040074105215254989849495171077168701146913640800553184806293336702298903251278264285143485869378689662922738297879398216797478698676943241326852411625007390720792706310347929609683684338101653658280586218680642040202943941777060394376077773640846377860989435840047834409931883641186077395777601484728183979329302492987039946331055140621934472559677296463194161988542685687408117936871187418345332258919330490951463194271941817123641405199571241632827678619801999030277260403953107800752980919722107189505787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sozialgruppe-kassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sozialgruppe-kassel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4a49a550301c70a3128260cea9e5069a7b9c1d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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