*.suedweststrom.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 79:85:2d:98:b1:98:04:07:a2:32:80:87:f9:66:8f:64 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.suedweststrom.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:85:2d:98:b1:98:04:07:a2:32:80:87:f9:66:8f:64
Serial Number (int): 161528087778235441682543788248558636900
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): e5:13:ef:98:4b:d4:14:57:ae:90:a3:54:71:33:9c:37:a2:92:5a:87
Fingerprint (sha256): dc:95:66:e5:7a:fc:b6:4f:43:76:db:94:ab:d2:e4:0e:e7:7a:6f:d8:a5:32:37:05:79:f7:33:68:49:ca:3a:52

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate *.suedweststrom.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.suedweststrom.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.suedweststrom.de
suedweststrom.de

Other certificates including the domain name suedweststrom.de

(limited to 100 certificates)
*.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
werbemanager.suedweststrom.de
wim.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
*.kundenportal.suedweststrom.de
swbb.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
bkv.kundenportal.suedweststrom.de
www.suedweststrom.de
*.kundenportal.suedweststrom.de
www.suedweststrom.de
www.suedweststrom.de
werbemanager.suedweststrom.de
www.suedweststrom.de
*.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
jobs.suedweststrom.de
jobs.suedweststrom.de
sws-90.suedweststrom.de
webservice.kundenportal.suedweststrom.de
jobs.suedweststrom.de
*.suedweststrom.de
nextcloud.suedweststrom.de
*.kundenportal.suedweststrom.de
nextcloud.suedweststrom.de
elo.suedweststrom.de
kalkulation.suedweststrom.de
kundenportal.suedweststrom.de
werbemanager.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
bkvgas.kundenportal.suedweststrom.de
*.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
*.kundenportal.suedweststrom.de
*.suedweststrom.de
kundenportal.suedweststrom.de
jobs.suedweststrom.de
www.suedweststrom.de
jobs.suedweststrom.de
kalkulation.suedweststrom.de

Certificate

The complete raw certificate details for *.suedweststrom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzImNv7Hfk9YsDgupnkZt
FYzMg/Ewj8UwoDEeNY5s3FVuJRh8WuZ+8QMsSbg/EaoH9Aws9/4YoaTob+IEvE+a
7wM1Ze6fO+zJDxL0/86Mq/79qeD655eh8UJymzRXGgMguu+6E/eQcY4mamLy10Lj
bpJyM10d+ssD2FUREwpuNt4trbpX4Zt42NO4nEEMKvTAeO+Ko+lbNTy1UZWnvXAs
1wp3XgwDIZ2VsjJG645+oZdTh7aDgA4wju+od4hxL8E4Ufy7yVDhxCk/MfcBldDC
NTYPxVCwzTFj32B658Y+yiA9fMGpTbUKu2g26lwqbkZILzagi/mQfJ1gk8dFgdDP
w66AwJQ4BD+FObkDNbBBb3BKQ59RvJ07kWhOxTpB68axf3xY5plZup/jJqXsYdHU
3ROJhlG5bYCatBOO2vMeeZmdHHYkpyS51oWV6VzBBPOj8PnbnXpntDlU+j4g5Fpq
lqFoMXoDf5okS0VIpKLXQq17BmDenHVKTJuH8j7LP4B1G5acQG/Cy5FUZZNDr2T9
5j4FePL6STYKyCpGYHzH8WJsSHH+6jMerIW4CPab+ZuERAfFzmwg5Qml/Ikl6oKE
JGzuukRUbHHSKc2Y55qUpda/meP2PBD3voC4Wze7BnMLRmI1VpywCcnQsJ2Bjo4w
Q0b78PNsYkhuKFGW3K8zAH0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161528087778235441682543788248558636900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.suedweststrom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834439460820881695639880972920265709162235274269326344316866093618787345926297094419406329869039357493817290054218349332646526461098135546869141621021309346456400014898098143884643074772724905536082150601079149297073607780529354181663206925175967433782950790100510411095217011513723430313875028507790417052860805223002291482600869772927935117593593139557606501728720799625956808302826548760907045231822952456998250971301208691378633917019081013148432003646002370885291495159259827883536218252402447028390034537059616460717847036536569787615571217325480583101694213537965446654270441857392241376933316660025478197368375597978505043234947958519569958754802871776914179505659726987695936439776809193998770491121290241488119820454222771338037615124627128567796877526372555134115699256599699283213182428737236300665746664968600345287329802879309453304986895836875652101500868479114187584818485361132176186723452884928004462976452462209730461330865300140030850445799251360453291304753909663503073059217082971817109965671713697860119381710070899430913732490868998092776483341884216507746305700386209101695985539527940094172899834196271720527132098598116989671514633848637446302515307243515357524437296747558408287488383834862866455791337597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suedweststrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suedweststrom.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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