*.kundenportal.suedweststrom.de

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 2e:a7:f0:af:93:95:ca:f1:56:0c:1a:29 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.kundenportal.suedweststrom.de

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:a7:f0:af:93:95:ca:f1:56:0c:1a:29
Serial Number (int): 14439337670428247080523536937
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 07:b0:b2:1b:77:95:a5:0b:2a:27:f2:65:5d:26:88:8c:a4:06:09:e2
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): f6:f7:f8:a2:82:49:d2:e6:62:94:d0:66:75:3f:58:86:7c:dc:c0:69
Fingerprint (sha256): d6:e7:62:03:e2:64:c2:3f:ec:74:b7:31:ea:a5:18:d7:dd:04:8b:cc:cc:83:22:fd:ef:fb:20:bf:9f:01:af:c4

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.kundenportal.suedweststrom.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kundenportal.suedweststrom.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kundenportal.suedweststrom.de
kundenportal.suedweststrom.de

Other certificates including the domain name suedweststrom.de

(limited to 100 certificates)
*.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
werbemanager.suedweststrom.de
wim.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
*.kundenportal.suedweststrom.de
swbb.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
bkv.kundenportal.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
www.suedweststrom.de
www.suedweststrom.de
werbemanager.suedweststrom.de
www.suedweststrom.de
*.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
sws-90.suedweststrom.de
webservice.kundenportal.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
nextcloud.suedweststrom.de
*.kundenportal.suedweststrom.de
nextcloud.suedweststrom.de
elo.suedweststrom.de
kalkulation.suedweststrom.de
kundenportal.suedweststrom.de
werbemanager.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
bkvgas.kundenportal.suedweststrom.de
*.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
kundenportal.suedweststrom.de
jobs.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
kalkulation.suedweststrom.de

Certificate

The complete raw certificate details for *.kundenportal.suedweststrom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21jecdqfBl/pC1l+6r6+
gFiu0Xqd0NM3iaTYqq64YfcYIYqvPyOlV9T5olS40k/GMpFWdEXtke1liE1cp1BL
9Whe42L3uPomHQ9vcr/lYor6VGc6vwUUPVQ0+D6vkDFDpt32Jn/4o1TlwDjgtGYA
2umzxyLqq0NJHIBDgDvs2pczIJzK6+aADN0xBCdykBVNsx7IfroGTFWE+jHlxLUr
G1ED6db052DJ0nCjxTbIpzPdeSdGK/adHzy7gD/1FrNJM9b2pAI+vOj+jH3exRlC
S3QNnKYQ8Syu5I9qJPWOJRamhIOQWO+zrqOYYhzREWLJ3nktJkuZ7SSi1TCtCh4e
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14439337670428247080523536937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 09:09:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-09 09:09:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kundenportal.suedweststrom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27690011687674753312376204165145254823635373036557635733396472596336293164933248464610069595031723466053268984420283368473367808921630914068338255228636962378878326948728998311984729085385323186617368822518450863957151864477986844295240920648712763024144176571172803548014435084141853568131968319270170182244356743064857777110962517048580792435478498322115353121460840945963108544794723599005151718694509231283118217543649145367385745650440902845476163080980221735853337798668128844005075846413508330880494754093167037460113981633085066517621885550601922137504369563769530854531750572224270886569268096076932718665451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kundenportal.suedweststrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.suedweststrom.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07b0b21b7795a50b2a27f2655d26888ca40609e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c0d0cb953d3a2ba35443bbe0172c119c3a9c96e6836ffb3cf658abf095f80120a2d63e1dbef0d414eb1d182ca139ea8fa8377c7632c3c3ed20ad8218936fd3b4c8b5294468188eaff26fe5f01adf9dbbf054e6b3e259f8dece6262c2935f01babafd5741596a721d9fc4ee4f9193cb680f1e70f504060f5abfba9f4c03c7abd329bd71ac9775de251cf7efcf3b37f53b4f9bbbce14b23c2026a1a7006d32fddb2772de5443cc6fb9b35fdb2909926a11fca44a02ac8c21a5fab9fe0515259d5e8a99d1b9ff284cb875d2d670de653f1cee66f587effd9d107f6194a7e215b4d408ffc5b8c7b79025ba6b761d9f9bc5631f51cd6dbd8ebb19cd660fecd9291dc