adfs.zu.de

Issued by PositiveSSL CA 2

About this certificate

This digital certificate with serial number b9:5c:6c:f0:ce:60:ac:66:a8:9f:17:d9:1e:04:09:21 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adfs.zu.de,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b9:5c:6c:f0:ce:60:ac:66:a8:9f:17:d9:1e:04:09:21
Serial Number (int): 246387080110061621475509414764214487329
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f3:fa:90:3d:c0:8a:4a:69:25:0d:27:16:b0:f8:63:36:97:ab:5f:0c
AuthorityKeyId: 99:e4:40:5f:6b:14:5e:3e:05:d9:dd:d3:63:54:fc:62:b8:f7:00:ac

Fingerprint (sha1): b1:7b:25:6a:b2:55:63:fa:38:55:76:c0:6c:86:5c:9c:eb:98:20:8e
Fingerprint (sha256): e1:20:59:04:92:d4:92:f8:26:b0:d9:8f:8b:a1:d7:c5:70:91:b6:f9:e8:af:ee:0e:93:57:19:bd:7e:b2:93:69

Issuing Certificate URL: http://crt.comodoca.com/PositiveSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/PositiveSSLCA2.crl

Check the revocation status for certificate adfs.zu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.zu.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.zu.de
www.adfs.zu.de

Other certificates including the domain name zu.de

(limited to 100 certificates)
repro.zu.de
opus4.bsz-bw.de
opus4.bsz-bw.de
ezproxy.zu.de
connect.zu.de
ts.zu.de
radsec.zu.de
ezproxy.zu.de
learning.zu.de
helpdesk.zu.de
repos.bsz-bw.de
email.zu.de
email.zu.de
www.zu.de
dms.zu.de
zucoyo.zu.de
cms.zu.de
cms.zu.de
cms.zu.de
repos.bsz-bw.de
app.zu.de
email.zu.de
email.zu.de
email.zu.de
navweb.zu.de
repos.bsz-bw.de
email.zu.de
cards.jonathanmuth.com
svp.zu.de
*.pbx.zu.de
radsec.zu.de
helpdesk.zu.de
guestportal.zu.de
mediathek.zu.de
guestlogin.zu.de
guestportal.zu.de
coyo.zu.de
zu.de
planspiel.zu.de
cms.zu.de
zu.de
repos.bsz-bw.de
opus4.bsz-bw.de
ezproxy.zu.de
zu.de
repro.zu.de
cms.zu.de
repos.bsz-bw.de
m.zu.de
repos.bsz-bw.de
cms.zu.de
systemone.zu.de
opus4.bsz-bw.de
guestportal.zu.de
learning.zu.de
email.zu.de
email.zu.de
zu.de
opus4.bsz-bw.de
finreporting.zu.de
helpdesk.zu.de
learning.zu.de
WEBMAIL.ZU.DE
cms.zu.de
guestportal.zu.de
opus4.bsz-bw.de
systemone.zu.de
adfs.zu.de
cms.zu.de
idp.zu.de
radsec.zu.de
zu.de
zuqpilot.zu.de
www.zu.de
reporting.zu.de
dms.zu.de
connect.zu.de
cntest.zu.de
repos.bsz-bw.de
m.zu.de
opus4.bsz-bw.de
zuqpilot.zu.de
learning.zu.de
repos.bsz-bw.de
dms.zu.de
opus4.bsz-bw.de
systemone.zu.de
m.zu.de
rdweb.zu.de
mediathek.zu.de
radsec.zu.de
www.zu.de
idp.zu.de
zu.de
systemone.zu.de
www.zu.de
opus4.bsz-bw.de
adfs.zu.de
*.pbx.zu.de
ts.zu.de

Certificate

The complete raw certificate details for adfs.zu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246387080110061621475509414764214487329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.zu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677547102331104537801091049213657157845958121464774844603703462627989979736960506821763087387184551881881389156768177951583740129173480103848120566541942583489859858217290558083166020491865377264125348932202831717521471989395083834373050783106446432633622203159621375595514939853879585316107602254284716341108609329249308503922389711400881240467623234787180320688741619690359300467902881090499951470760183923084151718323479687304357758289499692480982222628685676724457900597336788328964502860354927231812199218385550080086805582157101482919749448847764998703608047319148491072932304718920206763582195284511428673315714963212251437102522283013655708124118506292946513921323810708600298452222343576560921188661511795158621831402347830985060792450780195837265250158194279738251606423201334254399450955222373792759830866766104083949315458555192615185085370293554939755521597955476809472192999629618205373262276081251546071727311082396313660691718823142657422488072758384536100233313948486705853845444717333600197711176084152542485708850435010490948373360039748684030061093322219233078038355579466478988740756789481660229510569612960461245589556878599765271695963251195909874329681628755426295597326122148183681068361979994526715832702653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 99e4405f6b145e3e05d9ddd36354fc62b8f700ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3fa903dc08a4a69250d2716b0f8633697ab5f0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.positivessl.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/PositiveSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/PositiveSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.zu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adfs.zu.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d1a143cf3a6df7bb7032c3771b65e3818cfdc0ee5528a2b2073cd4739a2b60d741f45f53379ddc6412b1b33ec13c76c526d93741998a100cf15d192d741395028532b4801f69891c14e3f550be8b8877faebf6c665def540336108eed0bbdd7bce6d1b50c14cf270ed664887c8b7bb97180974e05376a8ce494cfc82d8c66c2d1599e4ad01534118c07671c7b99007a5013456b3f166a18996e57a416fc809ca8a5a9ee1642c1f107c44eae5dec7d74b588731aa9bff5938a3326c3e4b8859ab901b2eaa9b2a69bf2eeca37a7139de26e71385e9fad371f989f22511752dd01d169d966369ff2ca964b218a2c22ebd715f435817738436258b080a37e16aa8b1