frey-raum.net

- frey-raum e.k. -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 1b:e4:f3:f3:36:b8:1e:a4:c5:a6:a4:51:65:b8:c5:bc was issued on by StartCom Ltd..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

frey-raum e.k.

Organization: frey-raum e.k.
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:e4:f3:f3:36:b8:1e:a4:c5:a6:a4:51:65:b8:c5:bc
Serial Number (int): 37077947464850625181519289401992594876
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: fc:c8:19:e2:86:e6:9a:0c:25:cd:e4:1b:ea:ba:19:82:00:e7:56:44
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51

Fingerprint (sha1): ab:dd:61:36:f4:80:eb:66:3e:16:23:11:34:2a:6d:12:c9:be:98:f5
Fingerprint (sha256): d0:b6:89:e5:da:64:1d:a5:75:62:1e:87:90:ff:df:87:8c:14:59:2d:3e:54:c6:49:58:5d:d6:94:0a:3c:b0:36

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate frey-raum.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for frey-raum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frey-raum.net
*.frey-raum.net
*.karin-schnur.de
*.evendark.de
*.knye.org
*.frey.im

Other certificates including the domain name frey-raum.net

(limited to 100 certificates)
dev2.frey-raum.net
chat.frey-raum.net
www.frey-raum.net
*.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
git.frey-raum.net
www.frey-raum.net
frey-raum.net
chat.frey-raum.net
www.frey-raum.net
chat.frey-raum.net
jira.frey-raum.net
bitbucket.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
conf.frey-raum.net
chat.frey-raum.net
vpn.frey-raum.net
www.frey-raum.net
*.frey-raum.net
crm.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
vpn.frey-raum.net
cloud.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
conf.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
mail.frey-raum.net
dev2.frey-raum.net
frey-raum.net
www.frey-raum.net
www.frey-raum.net
mail.frey-raum.net
frey-raum.net
frey-raum.net
frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
www.frey-raum.net
www.frey-raum.net
frey-raum.net
www.frey-raum.net
secure.frey-raum.net
chat.frey-raum.net
mail.frey-raum.net
frey-raum.net
chat.frey-raum.net
crm.frey-raum.net

Certificate

The complete raw certificate details for frey-raum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37077947464850625181519289401992594876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 18:35:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 18:35:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'frey-raum e.k.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'frey-raum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781883860929719242866471568906804833541929440786306579454475860590894559176960079575022614148152297528786950506326112710911695065619608502237817505994766809040064897854514671338299633750459130453495437028206368027802510117384868820782254372739166554250659128178353608364815631750007132520578589801502229445766948547355696754323775086389971090235378529076808574473667688362583060925014388067996653200082211720207956278496065141796896762303364549767499600083726599656773150740461192801020746882033539700662782688732814504974479882380290283729562600787681623452379893608948514342940616244158077579122808227386341545407696662037463847057811453382050402854058957321666349553529812887229412347415118617608846464550588253137722394747017359905986166842996302368456962248229966356304048284388837062454784281690616335574475429408470630260113194194432796096659246560648331018966919247207655020954539520455886918279886465458494117043543083369440964973222907497967528828872911773179515653074710994421992016314801621788721856158578816928929129088285575926059615735371106490472516003755948963662838733440927969072326617943556223553780666081368498080983790104388786958360239119118605657912972254374961611569929342229654763469612355317766358450906453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcc819e286e69a0c25cde41beaba198200e75644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karin-schnur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evendark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frey.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088fe74c8f0d4810eb0f1330d104ed3d9fc773888af0523b3752ca774413ac4ef0e987905d75a61dbc96eb6960506d4ec891c14c0d1535741b068773339769b90412a882626372fabf9e5518f3816da084d1d1e5b5adcdf019a92e7e662569fc54b9fc24bb0b07763aa5e794aae046338510c582a9d46154adbaf9bf2413be27dda52d28cef683291168e6aba0a498bc43ff4d0f00725834782faf4d58f4d52f8a948fd14e467576f4b8483f3401441e7ca3537796df823a2256d13590ffc83912f1469a24cda9821cba37e6a37ff256dc12dd19898c966d4c432fa15c8a39d683dddecfdb6e9f4281a3d51ba8b047c2ed555ead4f72c7768ea5d2c890a218c37