smarteview.new-energie.de

- NEW Niederrhein Energie und Wasser GmbH -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 2c:25:c6:7c:5c:d5:29:90:a5:7d:dc:b6:57:c2:b3:9b was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NEW Niederrhein Energie und Wasser GmbH

Organization: NEW Niederrhein Energie und Wasser GmbH
Organization unit: IT
State / Province: Nordrhein-Westfalen
Locality: Moenchengladbach
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:25:c6:7c:5c:d5:29:90:a5:7d:dc:b6:57:c2:b3:9b
Serial Number (int): 58682172568426080217968478842303722395
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 62:c5:88:a9:f7:43:c1:1c:47:84:3a:d4:86:70:f5:ad:4a:be:b0:98
Fingerprint (sha256): f7:06:a5:06:90:4b:b5:d5:1f:18:a5:b3:1f:4c:10:20:55:66:e8:b6:e3:0a:bb:3c:fd:5b:1e:76:3d:b6:dd:6d

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate smarteview.new-energie.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smarteview.new-energie.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smarteview.new-energie.de

Other certificates including the domain name new-energie.de

(limited to 100 certificates)
www.new-energie.de
portal.new-energie.de
portal.new-energie.de
smarteview.new-energie.de
www.new-energie.de
www.new-energie.de
new-energie.de
www.meine.new-energie.de
k612.new-energie.de
expe01.new.de
smarteview.new-energie.de
www.meine.new-energie.de
meine.new-energie.de
portal.new-energie.de
meine.new-energie.de
online-kundencenter.new-energie.de
meine.new-energie.de
www.new-energie.de
www.meine.new-energie.de
neok-kons.new-energie.de
neok-test.new-energie.de
meine.new-energie.de
meine.new-energie.de
smarteview.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
www.new-energie.de
neok-test.new-energie.de
neok-test.new-energie.de
www.new-energie.de
meine.new-energie.de
smarteview.new-energie.de
smarteview.new-energie.de
ceosweb.de
portal.new-energie.de
www.meine.new-energie.de
expe01.new.de
new-energie.de
meine.new-energie.de
ceosweb.de
portal.new-energie.de
lastgang.new-energie.de
www.meine.new-energie.de
neok-kons.new-energie.de
portal.new-energie.de
ceosweb.de
www.new-energie.de
www.new-energie.de
smarteview.new-energie.de
neok-test.new-energie.de

Certificate

The complete raw certificate details for smarteview.new-energie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA05TC9qjiQ+aVDSkvTxJ3
WZOPsFUlz2rcmqRik6PWPTRgjPlA5WhO3fB7gsvO/vQSHk4J+W1K62m98YCWvdou
xb7c9Gx59r40qjVXTJLpYY2FVUXntDJlj0E/Sf71GSm+Vpp6V0tUFImiCv5zIuSP
COQOUIV1ECRSU5lBncfxY6Xh/r6WwS4W77ku3Ny8hRisUmcBeK3KElWPTAjuYC3J
5CC0VP46cHfOlwYeFekOysHYbSeJmFLrDfl5DVkB71IM1Yl4Cf3N0A4er9knqGGz
+lU81BPzZm6ArZHCZgLWgfkJQNHlB9kaxZuIFHNz2S2SLbUiLGbSHGb5nTudLqmt
z+VIVXHuwpn/ibYd/EZbv2xTRSZ4mQy/UGTnIsPiwbiiBm0/UXj3dTchhwhHwHA7
VLMuL2Sp7oAWaxLiVzS4igykSpECVJrSbMv6m8Or15pgpX74+2DTOzJYe+G2Eg16
SyJDdnCurlFZZ/9bHeFPpHHycjkGDF6VtsqXRIk/kFeEvDJpFMXLuR+zbJgYjReN
7pdZ+YYT77chBaL2HrC4Qxbof07/YvLQYptjy6LN0VoksGR4LcVlLmdQP79pO6KW
ZLUB0ilC7lLlDjwRR5l7jyyURqHhl7sf4DD/tt/U8PmpOdErdDYcJh8TIJEMd2XQ
d8VWb2dl9w5oIlVu2Tc7sAECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58682172568426080217968478842303722395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moenchengladbach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NEW Niederrhein Energie und Wasser GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smarteview.new-energie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863175579141346005168092165991213231064789919990258253384099883228317566115063416390555803030318978189433235708510258011448744127306052941976785171082516165001150872731529660637158155864118918090323969287925723584484256122298344750524848661726206059781876506623099734674224462812563907078454074711953784911417800582302374036997185086091539678360907816591056212930301643897870547584937636644160096568268685334494670751270047294828287146203453757978628903409240376965609029781700118207956770253694091682995295948389972789333281925616820796255481951744822023885354905964596119904662792195044599972447984518049131305522794554894052765792093045749540861244360981817338023844636020109978476718926831787614352137789212946932109622519914731959066095172509745014251019859245384446844523496926601476543259682870213432147696982180892517108450320440813007508451573703646345435594793135824381128155981263345582891090922976226346489020998029593924467762475955101656574229511876971678142280028072177408415173088989160347889698697345253428529807324770773247078696613610839668330122813004684714779362768539221885703297607307230331113841498826560714094279557983613428351148207342950398787916033327120271926450683944845259790539461459079845037710487553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarteview.new-energie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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