*.schindler-it.com

- Schindler-IT Solutions GmbH -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 18:17:08:37:3d:f4:12:a7:63:21:20:da:fe:d8:ae:0d was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Schindler-IT Solutions GmbH

Organization: Schindler-IT Solutions GmbH
State / Province: Niederoesterreich
Locality: Stetten
Country: AT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:17:08:37:3d:f4:12:a7:63:21:20:da:fe:d8:ae:0d
Serial Number (int): 32021061362583701072483527368113696269
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 98:8a:d4:8e:35:05:8e:ee:47:97:29:1e:70:7a:42:d8:cd:48:ac:bf
Fingerprint (sha256): eb:87:e4:e4:64:d7:de:f5:df:d2:63:83:81:16:a2:8e:9c:0a:96:bd:a1:4f:f1:5d:f2:49:b0:b6:bd:d6:85:d6

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate *.schindler-it.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.schindler-it.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.schindler-it.com
schindler-it.com

Other certificates including the domain name schindler-it.com

(limited to 100 certificates)
schindler-it.com
www2.schindler-it.com
www2.schindler-it.com
schindler-it.com
*.schindler-it.com
*.schindler-it.com
*.schindler-it.com
*.schindler-it.com
*.schindler-it.com
*.schindler-it.com
schindler-it.com
schindler-it.com
schindler-it.com
schindler-it.com
www2.schindler-it.com
www2.schindler-it.com
schindler-it.com
*.schindler-it.com
*.schindler-it.com
schindler-it.com
*.schindler-it.com

Certificate

The complete raw certificate details for *.schindler-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32021061362583701072483527368113696269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niederoesterreich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stetten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schindler-IT Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.schindler-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727809107591073669826019663413076271856275225097732352955481608384925987433187400887987515660804211104335186973976582026864830998196455276024852584236607033550501420151601295139690906073008578921205890996247365265120475998332907149582106227995624441906303801155454584435123724324057607841542436932451190168334315048854823053867181090774246878290073040182392230220240043962427041871763687069913814278813992866461566523083083691486797348881330695302120033935556247872026562429713205972117597869993845594045268957423771082301606953550543490528616584389351005866201597427710063772928467985602479876621488644208864120802235940773059489071175762841897571757309457326204232616952618849124950749473487767823270525831563019737834650184532922604620361280338039777794596697600745148794693676894541221114610569230863022672659337975065131172846646435851485889791901278287963894172372617996275205952908552530662694256968896185146276177648940663450297920244584398803180254824506216564686375087959538394191046186645076650316601782907747379576100073200538900819758010629347061625755562564001194263783563531695438213487859148589349762970845801747753941819304242165679584974718334383082563029008416494121481863607437299896569385153699978456829758504371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schindler-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schindler-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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