geschenke38.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 29:89:4d:63:af:3b:ec:9e:d4:f4:a8:67:47:d5:6c:cb:43:fb:d2:db was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 29:89:4d:63:af:3b:ec:9e:d4:f4:a8:67:47:d5:6c:cb:43:fb:d2:db
Serial Number (int): 237130565262873230585485532188523833564627456731
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: b7:fd:89:0d:28:64:df:3f:b1:99:ed:1c:04:6f:06:f8:17:cd:10:99
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 6b:b3:62:d5:59:31:79:8d:e8:ee:c5:f9:c2:a6:c7:eb:91:c8:64:cf
Fingerprint (sha256): d3:37:92:45:f9:1b:4d:35:44:b3:4c:d3:76:5f:96:08:60:52:5d:36:05:b8:9e:cd:52:be:ab:6b:6c:22:c1:bc

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate geschenke38.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geschenke38.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geschenke38.de
www.geschenke38.de

Other certificates including the domain name geschenke38.de

(limited to 100 certificates)
*.geschenke38.de
geschenke38.de
geschenke38.de
geschenke38.de

Certificate

The complete raw certificate details for geschenke38.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Wm8A8Ezqzs7/MZlh07
+apRugCkfq6HrTljHgVdLmzKm2AjNoyIMUPn+ZwAcjkvQ9UeZC7xUNh2lT3syrCO
EKkCGawn8TqyeqaxoBurPPunFG6BmYf3g7W84UHmcnrvN6sLDF+cJIH3n/+aIV49
ZN/t1LqFW1FCgyckBCrZ0LPx9x3I9n6zmxGbUtShrj50UeLY18CRbMygNxAEwhDI
K7w0HRCbv45gYmWYgtzb4gH2tUXVAOkoIx2aztuzHghgixBmY0JbIxMawP2gvW94
ufdsdUIJNh24Rn4Nzbgeaq7quoxyS/uplJY/sEGRwo0IihOJhX6KfGMjj+Gh3Vou
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237130565262873230585485532188523833564627456731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 10:01:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 10:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geschenke38.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25723841791471920691723028871904901270055358412028653865256142355600848234245721151049825684036798423826071403262100108364130962761179867175340129580997167304251113766479399292286001392676349368769614459160133574501648260556619480073060788342633920005736711466997115850493162775630040356739342139512386303473951911707330653679470424779561544491829286347737031632515014701957473710879918458128756122008411102547175191557174809259777887447691088624449076332057168483731399333910868160283607487129763628161912241391450078941850885438739112630392211606820235750864647674066048923844575595555943943159786669873538990222953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenke38.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geschenke38.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7fd890d2864df3fb199ed1c046f06f817cd1099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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