*.ebf.de

- EBF-EDV Beratung Föllmer GmbH -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 5c:16:34:b7:1f:04:d3:c3:57:00:f1:b6:56:d1:73:cd was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
Organization unit: Cloud Services
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:16:34:b7:1f:04:d3:c3:57:00:f1:b6:56:d1:73:cd
Serial Number (int): 122404275336753027542666157303056659405
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): ed:e9:aa:c9:7d:79:43:77:43:85:f8:7e:b5:c0:90:40:7e:13:48:29
Fingerprint (sha256): d2:3f:05:9c:67:93:f5:9b:1e:e1:b9:09:bf:93:35:97:89:db:3f:8a:85:a5:7d:d5:4f:8f:36:26:c3:70:af:81

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate *.ebf.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ebf.de

Public Key Algorithm

RSA

Key Size

3096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ebf.de
ebf.de

Other certificates including the domain name ebf.de

(limited to 100 certificates)
adfs.ebf.de
gate.ebf.de
*.ebf.de
*.telekom.ebf.de
*.ebf.de
*.emea.ebf.de
gate.ebf.de
*.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.ebf.de
*.ebf.de
www.ebf.com
ebf.com
support.ebf.com
pi-mdm.telekom.ebf.de
support.ebf.de
*.claas.ebf.de
support.ebf.com
*.ebf.de
www.ebf.com
*.ebf.de
support.ebf.de
*.claas.ebf.de
*.training.ebf.de
www.ebf.com
mbtech-mdm.telekom.ebf.de
ebf.de
*.emea.ebf.de
adfs.ebf.de
mbtech-mdm.telekom.ebf.de
*.telekom.ebf.de
www.ebf.com
support.ebf.de
support.ebf.com
*.ebf.de
beta-sentry.ebf.de
*.ebf.de
support.ebf.de
xm-test.ebf.de
*.telekom.ebf.de
*.ebf.de
*.telekom.ebf.de
*.telekom.ebf.de
ebf.com
www.ebf.com
*.ebf.de
support.ebf.com
*.ebf.de
access-sentry.telekom.ebf.de
*.telekom.ebf.de
one.ba.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.telekom.ebf.de
ebf.de
www.ebf.com

Certificate

The complete raw certificate details for *.ebf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122404275336753027542666157303056659405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ebf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 69310457168820216365812976118126310269994380378496037622214081706630255350447246549330158583401276920453358374646495289693065729866259238628131958815253092018401193604905205154785200248719531008774861777525508615065814483579018227176415088285357990528266755928583529326230832257575246113235371204943095369342404703803948777784399438229206482308836803523762225858155795184277945652020593134030380797792008948799491227708653619759972715465551625087752532543504767947696301463599316721259395503664156761010259573336199790375574659396805919099498112711862532612287116991897110030442521853788214053635134610354392078581428807313355462385561836603596505549603051806298025440500721525115561511177268708801149046821997119776433872771668389134904133539625317453472184411884285732482470621948790513024908304715746199404025677984458688499228580435886980372096197136239154751033417838421133363016805582404241142137499057730381441192339250069519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003871a80fad6dd95d958e3d66464a649786b82a830b141396588682ac0ef246dbda7a4e81afc03391547fe9f3ceff74f3a9b914bfdd39fcf35bb43509b5dcbf9d1d4d7cd985d1aec11642e2283b77f466d1eea3332db085227972caa4831673ab2c2c1524a079bb27a94fc726ef17bb44f6e4d8b8433ad199407398193e66d10a67aec1868793baf57ef76d6c6c22fbd1756868db65a9cc798ca7f8ab20cbbadbf4424573ec3809d8ac11bf904397e7ed4ec303b2e28ed7f7548c75f8122210ab75c889ef1012d759fb585a4fb109bbbf0d1963e7bfd8eda1c027f256e68df7a93f616ffe8d1b93a1d1cea0a464e83b6504c532e46b9b6e2f3d6e945d529b8d5