www.otris.de

- otris software AG -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 45:61:7c:5e:f6:56:b7:24:fc:47:f5:93:97:59:1f:9a was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

otris software AG

Organization: otris software AG
State / Province: Nordrhein-Westfalen
Locality: Dortmund
Country: DE

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:61:7c:5e:f6:56:b7:24:fc:47:f5:93:97:59:1f:9a
Serial Number (int): 92222907046913347570176113804660252570
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): fb:76:39:10:88:99:a3:82:7f:1a:c1:3e:c5:30:d9:dc:38:31:21:d4
Fingerprint (sha256): ff:38:45:a5:1d:4e:09:f5:56:47:c8:e6:8c:7d:fe:e5:a7:47:1a:1e:9a:5a:07:28:06:3f:e6:65:b3:a1:ac:a8

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate www.otris.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.otris.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.otris.de

Other certificates including the domain name otris.de

(limited to 100 certificates)
cloud5.otris.de
cloud2.otris.de
cloud2.otris.de
otris.de
cloud2.otris.de
cloud3.otris.de
*.otris.de
*.otris.de
cloud3.otris.de
otris.de
otris.de
cloud2.otris.de
cloud4.otris.de
www.otris.de
cloud3.otris.de
playground.otris.de
cloud3.otris.de
otris.de
cloud2.otris.de
cloud5.otris.de
bahntest2.otris.de
www.otris.de
playground.otris.de
otris.de
order.otris.de
*.otris.de
otris.de
otris.de
www.otris.de
cloud3.otris.de
bahntest2.otris.de
cloud2.otris.de
cloud2.otris.de
otris.de
cloud2.otris.de
cloud5.otris.de
cloud3.otris.de
otris.de
otris.de
otris.de
*.otris.de
*.otris.de
cloud2.otris.de
cloud2.otris.de
cloud3.otris.de
cloud2.otris.de
cloud3.otris.de
cloud5.otris.de
cloud3.otris.de
bahntest2.otris.de
cloud4.otris.de
cloud3.otris.de
cloud3.otris.de
cloud2.otris.de
cloud2.otris.de
cloud2.otris.de
www.otris.de
*.otris.de
privacydemo4.otris.de
cloud2.otris.de
bahntest2.otris.de
cloud2.otris.de
bahntest2.otris.de
cloud2.otris.de
cloud2.otris.de
cloud2.otris.de
cloud2.otris.de
cloud2.otris.de
cloud2.otris.de
cloud5.otris.de
otris.de
cloud2.otris.de
*.otris.de
cloud3.otris.de
cloud2.otris.de
cloud3.otris.de
privacydemo4.otris.de
cloud2.otris.de
bahntest2.otris.de
bahntest2.otris.de
*.otris.de
www.otris.de

Certificate

The complete raw certificate details for www.otris.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92222907046913347570176113804660252570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dortmund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'otris software AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.otris.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816535635946071062391674267842565484885259582804184515124779004738626114411896560848980425265142937208873695743096242840448966187671040344088355768913850288666208128698444679281052259358479271271572259176788943920327614292992774330272457498518418754172098747414182128821586324483441836001957461579029496453783472478180771877821473042867416540639505731282222745630462459991405252988754657671140100878501444477511186053948239989819362550166619024544830509302124995004807077378730589347789702215222140745566162395995141734178195003904314107155559373447156129179623852696319500550603010859650008546239068754330387952117978780768992438500211538090609764126175652912817082819222012655903213750008545139515097493680644617248353557438576048836775729564586232027052126051496421885240385081397675241073781908882826789887338337736390341068084462488502657588841390963748606541471842523538259020926148693786922945907180827121392924089851814565022404644275772733271623822899755141213417252321263670939987813094295612472089378951053849217044001151999343010236910415402935536151196251502393139710565048128409045646460503204669917196340980528438802908938345641605710867138815378058152662364002726503147653771219867537960974360221768563825673047844541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otris.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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