*.telekom.ebf.de

- EBF-EDV Beratung Föllmer GmbH -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 7e:a2:1c:be:d5:3d:b9:c3:09:99:b3:48:d4:25:18:15 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificates issued after 1 July 2016 but prior to 1 March 2018 MUST have a Validity Period no greater than 39 months. (BRs: 6.3.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
Organization unit: Cloud Service
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:a2:1c:be:d5:3d:b9:c3:09:99:b3:48:d4:25:18:15
Serial Number (int): 168324462586796750821246841715962484757
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): e7:14:dd:3f:ef:83:e3:8e:7e:a0:cd:ec:e1:bd:62:9d:9a:db:8e:97
Fingerprint (sha256): cd:00:5a:a6:a7:a0:0e:67:15:a0:73:00:48:cf:d3:96:4a:69:11:6b:85:c4:0c:f0:1e:c8:7c:e0:81:62:3f:9c

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate *.telekom.ebf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.telekom.ebf.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.telekom.ebf.de

Other certificates including the domain name ebf.de

(limited to 100 certificates)
adfs.ebf.de
gate.ebf.de
*.ebf.de
*.telekom.ebf.de
*.ebf.de
*.emea.ebf.de
gate.ebf.de
*.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.ebf.de
*.ebf.de
www.ebf.com
ebf.com
support.ebf.com
pi-mdm.telekom.ebf.de
support.ebf.de
*.claas.ebf.de
support.ebf.com
*.ebf.de
www.ebf.com
*.ebf.de
support.ebf.de
*.claas.ebf.de
*.training.ebf.de
www.ebf.com
mbtech-mdm.telekom.ebf.de
ebf.de
*.emea.ebf.de
adfs.ebf.de
mbtech-mdm.telekom.ebf.de
*.telekom.ebf.de
www.ebf.com
support.ebf.de
support.ebf.com
*.ebf.de
beta-sentry.ebf.de
*.ebf.de
support.ebf.de
xm-test.ebf.de
*.telekom.ebf.de
*.ebf.de
*.telekom.ebf.de
*.telekom.ebf.de
ebf.com
www.ebf.com
*.ebf.de
support.ebf.com
*.ebf.de
access-sentry.telekom.ebf.de
*.telekom.ebf.de
one.ba.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.telekom.ebf.de
ebf.de
www.ebf.com

Certificate

The complete raw certificate details for *.telekom.ebf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168324462586796750821246841715962484757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.telekom.ebf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4568000148372294496455841769042222052067467026888404639344161327785585111644726413994933540456236923037777691620639086625271828965908618606599594080084520883039896591433575265254608344007666235538661603986920104100442129567333884307240749074879974952675268861484270862395799380904897938042751047413016497724499774115791199302668316903949074435891966419870257085295180060053096611416426399762085913782980177796756275555314650745977751287185752935122036798204687538833661167380307168470303775311985507815852062826223617573256825301494585076475940635971893882922721019148958730400273455949185708096631528996597524165283293643033357598598816371934838519642285317519570111256349593566993663202084598453556868614274552468573265410425081455875656316966873980185799894084410524005709695288115144152518409517937956300416791675178258064365539250327094870798051425518026838441915830183923920142755805621727105008164457421663459931237873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telekom.ebf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001570a502003000004030046304402201b6eb22a34d8ef1ddb7fe3ff11084f0e799601e330c2efcab14d03d3fe1b1925022024e0bd48f02a91fb76214132b7668687cb36c17aafdce00cd7ade8f5d9028a92007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001570a5021560000040300483046022100d09e58fc3f77e568b17bb3f6c67aa901a1e44bc52afa6e6b0537be409bbfb2ae022100af5686c67d51948bf3666acc3588c09e4967b82b4c3b831d322ade36d83f04a400750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001570a5021400000040300463044022043f9969a87dc213bcea17ad5c6f4069d5be97d51c291b3af06101c784273f91602205bced1786b47dbe38c44a1101f73dbb9c507c1e229d0d6b06c98b8f31278d4b8007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001570a50216b000004030048304602210091c634d606b02168c9bc715f14e1978ced412d94a677544299dd0341a6b329ff022100e65d84e34797da86249db0426b82f0258b27bf7db1ec80130dde1f53d5a0c202
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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