www.felix-schoeller.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 02:ac:55:fa:f0:5d:ca:48:26:2d:46:65:50:3f:37:07 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.felix-schoeller.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ac:55:fa:f0:5d:ca:48:26:2d:46:65:50:3f:37:07
Serial Number (int): 3553274937484548763278315722494654215
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: da:e4:64:9a:52:2d:4a:13:0b:38:83:a3:9a:5b:47:ae:1a:f2:f3:bd
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 79:68:1a:f2:1a:54:0a:0f:2a:52:bf:ff:5b:d3:4e:4e:0d:3d:ba:d0
Fingerprint (sha256): eb:50:f3:e8:1d:a1:43:51:d9:a2:03:39:5b:5f:4e:31:86:a1:26:6c:47:12:47:21:d9:81:14:a9:ff:08:d6:9f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate www.felix-schoeller.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.felix-schoeller.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.felix-schoeller.com
felix-schoeller.com

Other certificates including the domain name felix-schoeller.com

(limited to 100 certificates)
logon.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
mobile.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
edi.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
mobile.felix-schoeller.com
sslvpn.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com

Certificate

The complete raw certificate details for www.felix-schoeller.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQF/3dx9pA5lhPHr4KYs
fA4wd/oMHGTU4H7ko9EPB8CXVUV0HnIsqABBUEW4/2V5vvfwkmzXp3o0pRgJ0k+z
6B3G/ry2wqLppJPpWJb0VWF6fMOVja/b6nKrbNELHhBCFNGD/YWsijiU6hyKmodO
yLqZvy0hRPn4mF8KdgZaLTeC5JYG/2gUNnERb9dgILcuDfXxqL0gfP/TnfqTZLHQ
NUg5r8ofpk/Ggfwt6cWycK/8MjvOPe4eUdpCAXcZ8tKwegiM4DvOInz6saLVssFp
ZZR2wcjsa+oVuQxmi52v9pK1kEZDtfzPjlCVs6Qni8WqcPne4QtXufln3/WLyMzs
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3553274937484548763278315722494654215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.felix-schoeller.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25879591938737248992357683009817189107511203376182760789981540491239369855131825350799971531211011541130326265479874644016477991094094930747215687231030739867389095389601600869518594009766658548629702825945459893924435222496455392099475385175849758534973740594485511515774249178363133019329162779456086294755353211583376450090109266852691842927857439601830944148966873475322009726748101951055508169671927083816521579065277664333785691027580049598187097397931178665009343160941480362569499419037428201836936557467566045294733364641302559562069971764134267686163941414826624204707905728896352161240639190647666906033307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dae4649a522d4a130b3883a39a5b47ae1af2f3bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felix-schoeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felix-schoeller.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018089b57bcd000004030047304502210090a910810c3c6efdc6d833056cc53870bcfbbfcc57623ee176530d98b1f0398d02203be096d8970123a9c4928ce96735b12efc76a9f393f480dbc849264c08f45d9500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000018089b57c08000004030047304502203578a0e71316506bd4a6f09bdc325bc4e6abf16971956a860ad9e7888da6f70b022100ffd68e275e4ae31febf5223f91776b30154f8b88fb6434f1ff4899b9e4fc5461007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018089b57c3d000004030046304402207526c725be6e4ab17f9c1a11798ba459d054acdaecfc7b9f4496aada4affb834022066bdf036be43efd07c9a3c65c9012df5772b3088b3696952058c2a9529602572
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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