OV SSL/TLS Certificate for sso.funkemedien.de Issued to FUNKE Services GmbH

Certificate is witin its validity period

Issued by SwissSign AG (SwissSign RSA TLS OV ICA 2022 - 1)

About the sso.funkemedien.de OV SSL/TLS Certificate

This certificate with serial number 60:34:68:9a:a5:c1:d1:b9:7c:97:53:b7:6c:49:56:c9:3f:bd:aa:f2 for sso.funkemedien.de was issued on by SwissSign AG.

With 10 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for sso.funkemedien.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SwissSign AG

Organization: SwissSign AG
Country: CH

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 60:34:68:9a:a5:c1:d1:b9:7c:97:53:b7:6c:49:56:c9:3f:bd:aa:f2
Serial Number (int): 549231865050962581937500945320060970025806047986
Serial Number Length: 159 bits, 20 octets

Subject Key Identifier: da:a8:52:98:af:08:64:b8:97:ae:61:da:ea:8b:63:be:cc:3f:fa:26
Authority Key Identifier: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (SHA-1): 09:97:de:8e:f6:e9:e2:39:2b:bf:f3:93:c5:d5:40:15:d9:58:e8:73
Fingerprint (SHA-256): ea:39:36:26:e4:a9:c7:62:cb:bf:6a:0c:23:32:4a:f3:f3:12:52:52:27:fd:1f:5d:d0:3f:91:2a:1c:5e:a0:fc

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation Information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate sso.funkemedien.de
10
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for sso.funkemedien.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

sso.abendblatt.de
sso.bzv-service.de
sso.derwesten.de
sso.funkemedien.de
sso.mediengruppe-thueringen.de
sso.morgenpost.de
sso.otz.de
sso.thueringer-allgemeine.de
sso.tlz.de
sso.zgt.de

X.509 Certificate

The complete raw X.509 certificate details for sso.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11m/QIBEdZx6PtRLzUMC
WKIM1xtL5QTCmpibzqMb2XiSFDrZcBBoLUQXRxWdVYw7r0kgpKqWbWqn3O7dQb2T
uyVySgd2IUA9bmS2MuaVXyG8fH4dLAM5l8GKue656keNddWRMWaSvOPb2VTZMMKd
UHOrafYbDg/2S2YaGYUk8Dk03YJ3yx4wflKlVwrCHjwvOpo5qLnDhi/+nyIWIYVd
NG5bS0NkW9lX/aMO++TnmEZA2/NBkDrnpenypgiCKXge11j0mAVks6L83aZwOTdw
0e4omcWGrc3xoix+9LIDH4JMR7oV/G8zu8I+faN1xxZlk76j3DoA3NCak/0nPWmO
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 549231865050962581937500945320060970025806047986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 10:55:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-15 10:55:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27185491501284844740299146741542859071135324586188102352173707632186805676653386156553936797942508484613723259788768764771589480666957630710418008127590106842586713399685044202680901473342578197359844296241572454655029347675714546403005024799193566258834374135987426059788321824480597105892479880043671166129012347792661526082535770263449056358640431259878559578421676983390447980370442163919046234537930603597084850716154713411419896531319126208172409376489162679199750310249683071979680081805580096955339929142197761045029915628407466912356964056638152198083261363985487581375604351159618483351553997387836032651003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.bzv-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.mediengruppe-thueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.otz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.tlz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.zgt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daa85298af0864b897ae61daea8b63becc3ffa26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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