owa.chiemgau-arena.de

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:a9:66:3e:65:b3:8f:72:8b:83:1d:4b:b6:f9:12:e4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

owa.chiemgau-arena.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:a9:66:3e:65:b3:8f:72:8b:83:1d:4b:b6:f9:12:e4
Serial Number (int): 11513395884772422332279940111117390564
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:58:07:7b:ff:5e:e4:77:0f:fe:43:a3:1d:bf:77:08:57:a0:08:d5
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 48:2b:3e:a3:c3:63:c7:9f:c2:be:cf:b1:a9:a0:19:32:31:4d:f3:ca
Fingerprint (sha256): d9:78:a4:25:7a:1d:80:a1:85:99:e2:13:f2:11:05:d5:68:5c:eb:52:94:df:5f:92:15:60:a4:be:6d:b1:17:09

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate owa.chiemgau-arena.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.chiemgau-arena.de


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.chiemgau-arena.de
autodiscover.chiemgau-arena.de

Other certificates including the domain name chiemgau-arena.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for owa.chiemgau-arena.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIQCKlmPmWzj3KLgx1LtvkS5DANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIwMDMxOTAwMDAwMFoXDTIyMDYxODEyMDAwMFowIDEeMBwGA1UEAxMVb3dh
LmNoaWVtZ2F1LWFyZW5hLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAypu79ba2nya7Q3ID4WpL9l0Y5cLB8J1Fi6bq6EC8o3+XhOULzkFWOhsN7T+5
dES+9akfdZe3KUGXsODYvlu1+FQWoWa+nDeGYakFFIfI37+IkJyOGb0vW0HWMH+Q
1AwTUOB+wNwTGY7GizYJWlAkfTNJ3jpORlBFqo1HKBN7yq59T4JEGPIrvbKkTxAE
DbBnWeqCiEXmcvv3RDpnKxSQUS0D9Km+sdtaUWt8P5hkqqOwvrn9R/AHy7RtCSAW
cGWjXoTVYvyNQvQEFT5RRAcfz/85kY8MzJ5SugvCCrbV/wSnTM/lIRsgpWgvcjaf
ctFp7Q8s3DM/MsMqt7zpVAcdJc1uUQqqUgAXthahcwkT5+Z7ERsc1b/RpOf8QdKm
443lDmK7nPsBhhvpUn+mKAPypQSz2no+S6l04mzIDkRs2nsgoiwuOMlYg7dQiEoU
iVCjYd+nSKfqeEIKBUHxifTbWsqPc8ipXPCHtzoTUdnAycov7EiVzW5PCucsosPL
g11tDEZBI3hzkJHz8JE/6MIYCgo4cUwAs3ZYKVXJp/JshWT+Wosele/75HPN23bB
aRJGHYWmsIBp3ZEPG97ZeQRXcbZ9immGH9l8mHbSXwsaECd3DySHfKFYS9qGEzBu
N3HtkAWYGvyGI/1tsvj4OHDMZW20kCQgAA7lhmiNjptLS6ECAwEAAaOCAdwwggHY
MB8GA1UdIwQYMBaAFJRP1F2L5KTipoD+/dj5AO+jvgJXMB0GA1UdDgQWBBSRWAd7
/17kdw/+Q6Mdv3cIV6AI1TBABgNVHREEOTA3ghVvd2EuY2hpZW1nYXUtYXJlbmEu
ZGWCHmF1dG9kaXNjb3Zlci5jaGllbWdhdS1hcmVuYS5kZTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAy
oDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5j
cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBo
MCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEF
BQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNB
Q0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEASLeuULV5m2G1raZxjZTvP481LSsDlaS53T5GQna5Uj7j6J6A
G6/PIRPINd2EI0dgx2AqvEwVsukzRi4GlcTXqiquh04CggAFR+ZXAqskTnFTSlip
kF2qcTRXyESsAJOkjsjqTC+j4YVO8hYft/EGWtHNtVW5tmhaIwQKjcpttaGWXTdD
p48STqPWoo1AUSPc3P6BnGR3zxkbXrcQLPDf+GJas3iUJ1QC2731nFBtPZVDmMf9
Z2hzahC+gO03am4i5GGHJcv8TVigI3mpLZ/VxGkZEGrN2CwA6u+u5TLBNLUVrGao
nBsOwnwO887OldmT/nIljcT6Am2uEzb71s40yQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11513395884772422332279940111117390564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.chiemgau-arena.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826569899313622254710201041667860790743154534016204222944274709566095408012181227212361221067754877396914249116065211547095182210034624107851228820675529221350711564890090663074874716944534585315725064297967272019531393932041331485998370520313108022421650836105855915224309400908829955163031648840647255789166774446528773919909955058877325829434841223917053258615842862550872771067818322996965761939350452020764770867441456859619605431260643334636328174835502317259281186898843531494885819497049174770315669556609620966575362965809949847991827709013807634436125613334961478130867197030822224570514426398431168072556453597194099290775019286186098138281874479242099047188115096152864723608905333213230503471287289067296455735172354368935914274620635028225917474889875145439767274267953148885226394586322482894601420354045668947259702583251373701762531038607818873437687065954690419841799406186157772672176868893231635912596367501595512099220297371971164338302260569917613281094841732734518452748603226228548607680938158035501396543338902656636423552163054984139478202927672409466354374436860519075402118257313668280631222864874482511491602359222995408924349460742059172960529886233119677371785005950650898864287990091003196899532164001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9158077bff5ee4770ffe43a31dbf770857a008d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.chiemgau-arena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.chiemgau-arena.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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