owa.uk-koeln.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 77:a5:c7:60:d8:58:8b:e1:e8:8f:d6:6a:b3:ce:48:95 was issued on by Sectigo Limited.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=owa.uk-koeln.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 77:a5:c7:60:d8:58:8b:e1:e8:8f:d6:6a:b3:ce:48:95
Serial Number (int): 159038904352433771655804352720408561813
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d2:ba:56:ae:a4:4b:03:26:ac:4f:f8:dd:9c:04:0d:ca:73:c9:21:36
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): fb:2b:a1:23:06:4c:89:ff:4a:df:6d:0a:5a:0e:0b:2a:06:c0:52:45
Fingerprint (sha256): a4:da:68:cf:0b:7f:db:05:6f:2d:b1:63:ab:ed:e6:84:c1:c2:07:23:5b:0f:59:d1:56:e4:85:b4:38:79:ee:4c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate owa.uk-koeln.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.uk-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.uk-koeln.de
autodiscover.ads.uk-koeln.de
autodiscover.uk-koeln.de
imaps.uk-koeln.de
mail-gw.uk-koeln.de
owa-login.uk-koeln.de
owa-otp.uk-koeln.de
pops.uk-koeln.de
smtp.uk-koeln.de

Other certificates including the domain name uk-koeln.de

(limited to 100 certificates)
arztportal.uk-koeln.de
arztportal.uk-koeln.de
itserviceportal.uk-koeln.de
itserviceportal.uk-koeln.de
srm-qs.uk-koeln.de
smtp.uk-koeln.de
dwa.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
qlm-infoboard.uk-koeln.de
hcm-dev.uk-koeln.de
srm-dev.uk-koeln.de
radar.uk-koeln.de
*.uk-koeln.de
ish-dev.uk-koeln.de
*.uk-koeln.de
vpnukk.uk-koeln.de
cag-extern.uk-koeln.de
owa.uk-koeln.de
srm.uk-koeln.de
owa.uk-koeln.de
ilias.uk-koeln.de
cag.uk-koeln.de
iam.uk-koeln.de
webexadmin.uk-koeln.de
*.uk-koeln.de
webexmeetings.uk-koeln.de
ilias.uk-koeln.de
corona.uk-koeln.de
smtp2.uk-koeln.de
radar.uk-koeln.de
sectravna.uk-koeln.de
abbuch.uk-koeln.de
cag-extern2.uk-koeln.de
ukk.uk-koeln.de
cag-extern.uk-koeln.de
arztportal.uk-koeln.de
l-nngm-app.vm.uk-koeln.de
vpnukk.uk-koeln.de
webexadmin.uk-koeln.de
ish-qs.uk-koeln.de
gitlab-t.uk-koeln.de
*.net.uk-koeln.de
owa.uk-koeln.de
pmv.uk-koeln.de
srm.uk-koeln.de
w-osr-dms06.ads.uk-koeln.de
verinice.uk-koeln.de
dwa.uk-koeln.de
sapportal-qs.uk-koeln.de
abbuch-t.uk-koeln.de
webstatistik.uk-koeln.de
grc-qs.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
cag-extern.uk-koeln.de
cag-extern.uk-koeln.de
*.uk-koeln.de
corona-impfung.uk-koeln.de
arztportal.uk-koeln.de
ilias.uk-koeln.de
speechlbdms.ads.uk-koeln.de
cag.uk-koeln.de
srm.uk-koeln.de
dwa.uk-koeln.de
srm.uk-koeln.de
speechlbdms.ads.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
intranet-stage.uk-koeln.de
ukkrad03.net.uk-koeln.de
radar.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
radar.uk-koeln.de
prime.uk-koeln.de
speechlbnms.ads.uk-koeln.de
EXP-E-MRA01.uk-koeln.de
hnc-cms.uk-koeln.de
hcm-dev.uk-koeln.de
srv-dcllsg.uk-koeln.de
owa.uk-koeln.de
sda.uk-koeln.de
webstatistik.uk-koeln.de
ukkrad04.net.uk-koeln.de
ish-qs.uk-koeln.de
webstatistik.uk-koeln.de
w-osr-dms05.ads.uk-koeln.de
www.uk-koeln.de
cag-extern.uk-koeln.de
dwa.uk-koeln.de
itserviceportal.uk-koeln.de
hnc-cms.uk-koeln.de
smtp2.uk-koeln.de
ukit-im.uk-koeln.de
apotheke.uk-koeln.de
owa.uk-koeln.de
dwa.uk-koeln.de

Certificate

The complete raw certificate details for owa.uk-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159038904352433771655804352720408561813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.uk-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 546779796863513073744959050430485502377626073197919489779570839029412701480980685631634679952107025682284860553345315173118476330687425676928152194700558902463963922282638135580003842389528680534593210368141048117081050278619967715023201620036504330138555180238971721851607118986691783123201333025527125280573274089128112416134949730075825473857019321595161505403518720329300752933286878607768476193879865692681572499111388671411412558844717810604072621531157600321244394531794231407159464754515973114827426721005923864363698450213248075904019605753509520280377313983405344245199974670976804841741529758714122323132708079414245201419371389164538178688218371592712974633074972596114799555261322862973274143737509750545449850256554936265425886524785644912377682427409980933293790908207100251941877225707887745000197607980546608396723766004984268064718650958930220041423568003328510487756863557730654196981873107853781873243672416095595152376263044626670698661003091790839124274755081777543428852066352468991214212999896101284520693930038396943941437986458437634203826246693535025012087806760440223767703679330704578186435601899853319627498988171882083277126258419635043360468304986810210507847602606402778059883715008136542385640025261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2ba56aea44b0326ac4ff8dd9c040dca73c92136
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ads.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaps.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-gw.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa-login.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa-otp.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pops.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.uk-koeln.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006cc08bb76ee0311158324ed28708593ae8c92dd7701b6a1ec9eb1269abf14739ff843c272e3567b5c619b1c5b5e012a69d55e7df75a163bbecf63573f63948152b1a96b3c07898c64fcc38b332577df0bfb4df3e898a571c64139e12c49585d387daa480b4f7956047ca7112229af35564f74cd3db7847d49ab4c259e4e2f1d92be250e60c3188e11c19445b8b6fe783440b3956f7fb282a5ed373b9a191ccad0b9152b30e885d281d76fcbe821149083af934553ddba08c1134e7e1042759aac44b1d2dcf359a025252745ad4854017e30d743cff994cb948115687f7f7b9b61c029db18174d1557f9dd300834cbc1c440ec55e9ff99f094825205288e485a