OV SSL/TLS Certificate for hkmetrics.de Issued to Universitaet Heidelberg

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the hkmetrics.de OV SSL/TLS Certificate

This certificate with serial number fb:97:58:4d:8d:68:fe:7d:ad:e8:bf:e8:fd:ad:2e:e4 for hkmetrics.de was issued on by GEANT Vereniging.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for hkmetrics.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): fb:97:58:4d:8d:68:fe:7d:ad:e8:bf:e8:fd:ad:2e:e4
Serial Number (int): 334422054764030594485625690335585578724
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 8d:de:a8:72:d7:ad:ff:2d:73:78:1c:02:06:4a:30:77:bc:a5:3f:e2
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): e4:ec:fe:09:95:69:8d:16:c5:ba:bd:83:e4:7a:70:26:41:7a:e2:1f
Fingerprint (SHA-256): 0d:47:23:6e:34:f2:e2:fc:f9:e5:41:f9:72:70:16:1b:b8:8c:a4:7b:c3:79:5b:12:ae:34:be:72:71:67:ab:9c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate hkmetrics.de
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for hkmetrics.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for hkmetrics.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334422054764030594485625690335585578724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Heidelberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hkmetrics.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841627973013183423565087303870341365572752703998974724383427932770238430770877118127480558356239980040959474194519942735313781281801844690590452267138196105554082813517539323433029846205305848941711370789257171961348610975824176612587654284524348238126095010761831028311389484068747343465066925423819694590630142791192698703791994646574999445335031464081293745570333544091396189300306663643142916154362250108917778673848101594292196916185418395751165853675001830821289327991363265671424361514132102785320648165743181252668652415699266313036086664715094454523227953183925941951904160866996242864923942975419742453181376855733192133255349164460213179845473971736699645907657250661196627728540023097832995150570567558115747406111681295225106734818449901961429932943343986297562517217058291515653632011931929766811646190864667602243554660829924345557509658940324132710665079597997017181602557757378351087618340213685868644423259805418223409617175955133358434336373711879165289571093657838748700241409007908095760793192309969299483883332077229270263403416642396668844314306929969814465492281426142072915465456606609812463968894517957539567416466902484080046238606479535524434359277964897879332619342459807445657838112716763592184431194259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ddea872d7adff2d73781c02064a3077bca53fe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkmetrics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heikametrics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heikametrics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hkmetrics.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003e69d964cf873373d03f6ffd6042c8c8a745ab2aa45d3367a023e09be785e2cca250d251c555336cd8712ad0edfde8eed80927745833cad046d3cb3c7767fe384c0f376dae1af4a6b54cccc820256b007432f9d1d73f900ac799803fa305ac9ee065d2e325b698e1c8e7175f644b4f0b314951f36cdeac95bd8d004d07992abc207e2063ff33969055da47ecd9bed521ef42b1d33f85fcd77f3155f841a9b47404d08e1cc0e047f7c87331d7670a0b27041b60bdde4a4f2d11695da986a9e4c9657c439836deabd003c2e385bb3f239babe937b3ac2efda355e1f42799d2366fbca4d71d87877aba19d765e97fb645b170832fb89b7603103f50ecf07f776b501a59a284a625c99feded5b36c4a8a68b68833ec305d5844d456089d12033727a7e0b0f6cdf41d931ed1812082aaee341088d05a6f6ebe8a2850da82f8217fa653a287915d06a3df2a290c129146a7bf8158fa8b0193295c77415717017ac1f39bb99bdf9a115f56dcb324e827f835e2e942b5dbab8e95c2ba8ac0420fd4c53fa8cf0163b71bddfe5f3c7657c3c1c74e722b8d03d679e2627a0db978dedeca2055d84a6aa544a46d8945a05d2cbf769a3fd31efb119d6cb13893641f78e079c7927bf2d85de48433fe8125770f30136c47b84227e64e161ba7a5beee3288388c31876f16173ce0da151964722fd4aaedefd8578b01ac1031556cdc63eaa30086a