DV SSL/TLS Certificate for *.mein-girobonus.spk-barnim.de

Certificate is witin its validity period

Issued by DigiCert Inc (Thawte TLS RSA CA G1)

About the *.mein-girobonus.spk-barnim.de DV SSL/TLS Certificate

This certificate with serial number 06:6d:19:9a:73:42:2c:c3:4d:17:c9:9f:b7:d9:2d:c5 for *.mein-girobonus.spk-barnim.de was issued on by DigiCert Inc.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.mein-girobonus.spk-barnim.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:6d:19:9a:73:42:2c:c3:4d:17:c9:9f:b7:d9:2d:c5
Serial Number (int): 8541847629337686557745973968456199621
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 6c:22:bb:c8:2a:99:04:99:14:e0:64:a8:37:95:df:01:b7:bb:db:dd
Authority Key Identifier: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (SHA-1): b8:53:cd:a6:6d:a0:70:a2:98:44:1f:1b:0b:3a:a9:0a:b8:34:34:d5
Fingerprint (SHA-256): 06:96:ef:60:3e:56:7c:d4:2a:d8:66:f3:c6:f9:90:28:3f:ba:f9:4c:7f:b1:e5:10:fc:02:50:49:a8:59:85:18

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.mein-girobonus.spk-barnim.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.mein-girobonus.spk-barnim.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.mein-girobonus.spk-barnim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8541847629337686557745973968456199621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mein-girobonus.spk-barnim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818776110985460472144748379461785089758505274532875744310105347258952668063230936527443786316381923599499819309026212763460972525481200164790719469800244190371003745595044083968861674885455181325104124671841538143855335770935333419444889902736825915018749173223416870334296793260930693810528506636825680486406651455655091972766298663484528870901114862595030675303358403936670426538551351961785400273441336110880457376983045449552488803453175981933690886706674467330303012287297136709091038507454979507629114911612473380996601522351633897966645818982161804408596198987542809244774099406857205144916037348335223619885083229690197526849552362062658815406260757351901712042573849684671690018918414440619341100462711984267090242767801092423138424649253335465869892498278466699630187004922094460059397732756032276193864167033445445479003280691002209129706896588503208291766786222685689510335474914028890620389735215395506407672498466875411227413380635271963708651636308940908745011147125672264236471125649290205903748587632203189896628445496357026749496938311776463410606711838081491099447449890704078090384438376317314760291599392048928778898520628986079286342951427632327932171609534827466851129457790162494471586987137541216806429225211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c22bbc82a99049914e064a83795df01b7bbdbdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mein-girobonus.spk-barnim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-girobonus.spk-barnim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b14000001978d19a6990000040300463044022012a06aa3f9bdedb72b21d857248eaa9b87293fb5e1f7d9aaf6d8b6cfbb249e470220357d00fe6f60ca461f74451a84dac2b602d132b2c38e88ee8599c478fd7b4c74007500c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd000001978d19a69d0000040300463044022007dd72314c8b67ba9a1f5e0c19fc88cdd66a296f7465aade65c4485d8f0d06e9022001ffaedf9a4f521258cf2b8b5920c93e77cde517b00d84f2d21f4d83c4719433007600944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d8000001978d19a6b100000403004730450221008021ebdd716ac485845f760ab794e974537b00cf21771bcf51912f8abf8bbf3f02204c447b805ecbea681de26ed0ee486fb2ad81b1ffd98b56ea93fcfb774a08bc76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00767880778b0aabb21202c3af5077f4064bb898be34f203e033f6291cdd076f47bf9eb925dafee8f87582259bd34938dfb0b56872f7b8699d1aecbab64d3d487e8eb83125738460ba03278aabd7dff4f5f4753e2054302f68c5abe21c19f1f6154fea425207194602a38e76bfbe9b5731958667b37269fdd4423051faa5026d1dbf8b3f4ad3d1146ed36c81d64810a533f99bc8e06e384a41bbaafef14dcb5987d82346873fdf0ccafce57a728ebb09dc8e10a6b4e0f256b2e7029d6f952ffcbdbfcbf196d28522aa93b1f486ae740b16a2368053b02220b93787e32cef4647a296b0206e122b8ecb85723a60e12067479ff9b32c9a352451d42bc7d61a9a94e7