mycom.comproof.net

- COMMERZBANK AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6d:ef:b7:fa:66:3b:58:72:25:84:0e:16 was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMERZBANK AG

Organization: COMMERZBANK AG
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:ef:b7:fa:66:3b:58:72:25:84:0e:16
Serial Number (int): 34023668153533471298991427094
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 60:4a:c2:d4:ac:13:1d:9c:e2:09:77:d9:27:52:5e:b2:32:b0:6f:bb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fc:5e:d0:ce:90:7e:75:3d:1b:78:c6:2f:43:b8:52:4e:4f:da:08:35
Fingerprint (sha256): f9:91:25:7f:5a:ef:db:39:d3:6d:72:48:98:24:64:90:7e:0a:44:f5:1a:89:0c:5d:b1:fa:74:ab:6b:f4:84:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate mycom.comproof.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycom.comproof.net

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycom.comproof.net
partner.comproof.net
plt-mycom.comproof.net
plt-partner.comproof.net
mycom-dr.comproof.net
partner-dr.comproof.net

Other certificates including the domain name comproof.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for mycom.comproof.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34023668153533471298991427094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 12:41:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 12:41:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMERZBANK AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycom.comproof.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4964518237958706429450372093040491929837853591617429255032371570790000953219585642719227316121863495423101754521599301784174598766281444527736598014570583217779352856034058726450052130776415010804078603377750667666208547964909882430720430971004218270164122299764265630980011435113847411697671318734563459924716733269492373902030481581012957491018377574732035612352326424234620310767548850714726042123356303786463089305965936965286925003316695146778417146719989825010740596903271058633879284382813480731611652883217452325764053156664866544651968272992130003674099524839132423946480681910683105188862924468769626281921342956914332037455397895146793945728723965767736849355327090200409233600652222170298220821215033043145834520114964787637722981211988629833954444178115561389105253518166894251258178213543145308654867346000232609525117140386185158044931125422882044882131848768083959915668472925089154242980570616654806796714979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycom.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plt-mycom.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plt-partner.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycom-dr.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-dr.comproof.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							604ac2d4ac131d9ce20977d927525eb232b06fbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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