office.feldbinder.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:3e:f9:f1:3a:8e:a7:4f:7b:61:a9:23:ee:56:79:d7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=office.feldbinder.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:3e:f9:f1:3a:8e:a7:4f:7b:61:a9:23:ee:56:79:d7
Serial Number (int): 14948499790964297255960976839002192343
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:d0:02:08:d8:8e:35:a7:99:1a:2a:9e:5e:37:ae:97:e9:3c:1c:5e
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): fb:85:c1:36:d9:27:6c:54:dd:85:d4:88:af:0e:5d:c2:96:ba:ad:c2
Fingerprint (sha256): f0:7e:74:5b:35:c9:18:47:98:73:89:bb:f4:d7:5a:a2:0b:58:f8:a1:fb:13:5e:22:a7:29:9f:be:8a:d4:24:cb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate office.feldbinder.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for office.feldbinder.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

office.feldbinder.com

Other certificates including the domain name feldbinder.com

(limited to 100 certificates)
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
hub.feldbinder.com
feldbinder.com
office.feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
feldbinder.com
hub.feldbinder.com
office.feldbinder.com
feldbinder.com
office.feldbinder.com
feldbinder.com
office.feldbinder.com
office.feldbinder.com
office.feldbinder.com
feldbinder.com
hub.feldbinder.com

Certificate

The complete raw certificate details for office.feldbinder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14948499790964297255960976839002192343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'office.feldbinder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740911265819415356493590996580112177929959000847683289629516531419108568446636335302538778655400193552374686029377684802113535397837043898788324213860045968529407078328525932352992626294878705308098802006091479024118760018755038046715919184034843326390127681592320253029973059269196798555014732857344268670779959116821393529056813130790348406166565054702739067743347703376804429780621224109819937751053278954855605696976813681843929830194192831397918527190312962958557390102461122198062733697204290325537734651034572962324186205858318757353875700321793115727294883338854589350757177774282759994786099861253329775069289810040357633348854477724512331785354700630346083415541172676627280441272572890674716298480658966621196388386651828918671963774531277750763556207865778938842549483504537461479654162686723370848300810529884236239154867231179858388245009689711540365222744923766896678874502868407483346483318619280036245906841861521499132297066549565058504070347199591535709493198532023873036301291767641010876418143227009332506411159906401148117295948671775265354925584462079963321276489663226203066737719840940274698223073470064074137217680418866709540771746089441800554748453760654818671785477981151048448489037760725671684199662427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08d00208d88e35a7991a2a9e5e37ae97e93c1c5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.feldbinder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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