OV SSL/TLS Certificate for franom.fraport.de Issued to Fraport AG Frankfurt Airport Services Worldwide

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the franom.fraport.de OV SSL/TLS Certificate

This certificate with serial number 37:c5:2a:af:21:55:50:2c:bb:46:98:01:bd:7d:42:a0 for franom.fraport.de was issued on by SSL Corporation.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for franom.fraport.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 37:c5:2a:af:21:55:50:2c:bb:46:98:01:bd:7d:42:a0
Serial Number (int): 74131287985749670052188420776329560736
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 4a:70:43:6d:ff:0b:8d:cf:10:46:64:b6:98:17:66:b5:33:88:50:d0
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): d9:59:e3:f5:ab:c1:33:f5:ed:ae:98:b6:07:7c:82:a9:14:3b:41:30
Fingerprint (SHA-256): 59:b6:ba:c7:a4:d3:be:30:41:b4:5e:a5:cb:60:08:4f:c3:53:1e:16:ff:d4:69:55:d1:d0:f5:c3:4a:cc:82:d3

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate franom.fraport.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for franom.fraport.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

franom.fraport.de

X.509 Certificate

The complete raw X.509 certificate details for franom.fraport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRdjjwJcTe3ch612ZG1
erQSxmWqGOlRd6BbQ5SU3JzogPE7uJYYQZdOUfluEkBvR7pito0cM8KdGp9yuw4d
YYM1fK6c5T62w4sHLxKBnzqeAytdI51jXWWcRimwpEmQZ9QHzJcFN3jlf8NILrKa
TDI1r6PGdgpt0ZEm4wwQ5Cjlr8x2d0p0KLHvA43axp5aeawU+T+z9cARAFPWXOPH
n8rwMOwBv0PxEEgITM26BXN/pzLsj2cQeplIMYqlunZYTHc4HCUEz7m7C5Mo1bLJ
TKSiBklOVe/Cik+P94jj6jtu27UUsqhXK/8t42Ohf7r+xtzAj5yHV1tKVbWn7I02
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74131287985749670052188420776329560736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-18 09:25:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-13 08:01:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt Am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraport AG Frankfurt Airport Services Worldwide'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'franom.fraport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21036610249373548400870912424981220609312562729157290847703815165857401623721533530484906083669495307796042767081464360431485855840985426335689141180481605145521135757003648918049815395464721504203341729573849810758595160779196228399892322772183088820137634300854412601617789904401984032246666005913782374277837697292150563736172660527977083819388722734794934107235732996020392966478282163155512887836952724989910286633690726936203173766585084012226543484678242173447300215905320190842265649573279021049312262838244923104688845638740915941589655137166706354895449337522521024266714242078949767567339710291453414291113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franom.fraport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a70436dff0b8dcf104664b6981766b5338850d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							01650075001986d4c728aa6ffeba036f782a4d0191aace2d72310faece5d70412d254cc7d400000193d91f972c000004030046304402200d5365935bdd99bf47694fe16f9532bd5f838379c446975bfe6274de899c88b502205b19f25ef7bb1b5474cdb1bef04918753ad2ec2f5a9551b8feae77fade07d8750075000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000193d91f973200000403004630440220652d24ec85fe770bb9329e4927bbedd4aeb41128d75a3113721ab854924b231602203ccdd0161612ebb25eb0fc10e9777e814693184f7827164909f2bf4819d258d0007500499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c300000193d91f972c000004030046304402206479b71bb0dbff0e9d1a51252d90ccf451c87e922c0598a52584a6cfd15252310220555b4a4f1c7a8bf7d5c98a0ee563c1696e7cc7161563ec491e0fa2439deae334
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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