*.int.rhein-zeitung.net

- Mittelrhein-Verlag GmbH -

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 7d:57:e4:f4:8c:f8:0c:f8:87:12:86:a0:2a:47:2b:69 was issued on by SSL Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Mittelrhein-Verlag GmbH

Organization: Mittelrhein-Verlag GmbH
State / Province: Rheinland-Pfalz
Locality: Koblenz
Country: DE

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:57:e4:f4:8c:f8:0c:f8:87:12:86:a0:2a:47:2b:69
Serial Number (int): 166609873064496076409189120653373418345
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 3e:f0:19:e4:00:5d:a1:b7:12:f5:8e:c7:f9:80:c9:6a:33:11:88:42
Fingerprint (sha256): e3:45:cd:dc:2e:2a:68:94:6f:ad:a3:c1:47:a9:31:d7:5f:06:0c:79:b6:87:4c:2d:93:3e:07:b7:dd:84:69:a8

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.int.rhein-zeitung.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.int.rhein-zeitung.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.int.rhein-zeitung.net
*.rhein-zeitung.net
*.prod.rhein-zeitung.net

Other certificates including the domain name rhein-zeitung.net

(limited to 100 certificates)
*.rhein-zeitung.net
*.int.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
watchg-qms.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.prod.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
karriere.rhein-zeitung.net
karriere.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.rhein-zeitung.net
*.int.rhein-zeitung.net
karriere.rhein-zeitung.net

Certificate

The complete raw certificate details for *.int.rhein-zeitung.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRUHuEDXy4uSeMyx8RS+
tEfBO8YXQZHsURzqessqIyNjtM1Lj0z5IuMM7axmC8kOHykP0JlL8QuU656MgY4r
JeYj8/BC6LLpyITWBPIQ56B0FRQOTIsEAKVMrN/0zVtgx+fgtAAadW8YtSzZG7rI
63/gR3UkI0wSt4Lr52NeEkH/BVgkJ+N5AImKkbihvc25i77jGg4In9rp6NBhhOq7
0k+pks7f8nx5cisBiRdHOf0ck7B+q9FOVez5W5uFpHJ05TklMGwEzCJGtzbGn7IQ
+Hi1ox+tBVY5I4mkUnnpLIJ6jz772QZN7NvEq8jOuS6RGmnNwyI4JPeHY/DlYg6P
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166609873064496076409189120653373418345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 15:37:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-15 15:37:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koblenz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mittelrhein-Verlag GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.int.rhein-zeitung.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22354550335045801876171839872459612363229699507996129576098288718322914495827828078554601631728226844074026339342350873976465914292836308014912321050193952765748236720326464354130412334432301158948567234763429380862927462656775607107008579860994358488785701885175911471022887959607735807856164647828468551458481983946732796271235523001071596004002934319635479854280483572751159001579426669902952064150617841517504029704783383886865339389733511377434139295549368644077808969696992049105321364204688006691333420124130556383661817754716674976401393152677953682848918102631998634181943297645322175092509691950479147175771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.rhein-zeitung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhein-zeitung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.rhein-zeitung.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00502a828d1c098065b96f0c371a8e34817a4668988449d44a32bb371791f1f633b1a0b44a7dfe45b43b19a6e979d2b1655d1bbf5d764c6c6b9f51dd200ea9c8a6ba209bb8614128bf6ca68b28ed6f7601b4ab2364afdbb42573d9e3ac63dcd5eac171aa0d429d2deaa3aa228420df89f4a715bd519ca838b4bcd1f49cd17e99cec157b64fc8d92fbf8dbabe0316a1ec9957713e68d7697b6990aaea1699138222314e81545f0b7905bede24a9d5a8de012c1fc57a7d0d59e8d460c966cf3c6b6cd6dc1cdbf48d4cf6bd6bede46db0e7e4c928fdedc7969ffd4841ffd6f31e6937ae8e501eb77a0892b3231fe49d6089cac1cf8e265723bae71dd35f971777f8710c291d827e90c1e9abaa03db408bd60dd224f63edb4da85273de9eead21472c2dc232c2b84ce3dbbd8e395c88502cd8c5e71994fca11a0d4677193cef781480cf8cf644d18e327ce6f1a7618e965551949f7f6794303de0e1a593761487acd611a90c35e83840d76d3808a2ecb670eb38325a24002eb5cd81da5305af655a8b8d820b3711771b2e90a70f99a9fcfc9564e7675e11ff189dd05ac362b194854516978bbcf665ba5f3d1086f0341ed58df4458d4de6802a3674313cb477ebdc2808f3c9a15ca0c103251838999fa177b9bafe0a8541240ffea9e4160624c07741e7a529ef2e0f530ccfce6a63a27ae5616b89490f6481ffd47ebffc655eea6f66b