DV SSL/TLS Certificate for www.onleihe-rlp.de

Certificate is witin its validity period

Issued by DigiCert Inc (Thawte TLS RSA CA G1)

About the www.onleihe-rlp.de DV SSL/TLS Certificate

This certificate with serial number 03:bf:b8:5e:69:e5:0f:1a:0b:34:6e:28:2b:ab:71:71 for www.onleihe-rlp.de was issued on by DigiCert Inc.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.onleihe-rlp.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 03:bf:b8:5e:69:e5:0f:1a:0b:34:6e:28:2b:ab:71:71
Serial Number (int): 4983152130922089303819448677342867825
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 89:15:7c:1c:a5:63:7d:4b:64:5b:e8:c1:61:72:89:bb:59:8d:c5:ed
Authority Key Identifier: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (SHA-1): 00:c0:ff:2f:e8:83:18:df:ba:c1:37:39:ed:e0:5c:c3:b0:ad:a3:33
Fingerprint (SHA-256): ad:13:90:1d:4d:37:11:35:cd:30:a2:7c:1e:b2:55:0c:6a:15:a8:7e:a5:e1:ef:54:be:6b:a2:87:f9:01:bf:d3

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate www.onleihe-rlp.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.onleihe-rlp.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.onleihe-rlp.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc/g5yLaORAmtx4MCWzX
bjcgM0gDzDf0SHayRe9E04mLa15A/+hnXpKhWuw8cLi2Hpc+W9A2L3nIq0h6UHEJ
3eHsEUMAGcapzdbP5u3btS/uU1222d6zwCe2hhpTZAtFPd1fR3qn2wSw05Vwnacs
QCNwWiE+t8U4CfMGkXnOeVCbmQNupJpK0zdsJD2ED1hb6+49M7mrz4lhxtcwl3Lv
++/Z7vib2pBpenTh/QxCdC6anHDq9joR4ekgrKMp0062gcXk6jLbtkEv+vccjbiJ
9zAHDjTRcRp4ncJZ8kn++faMuA2T4NBOQnAF31Vu+o/umEDl9rbz2TZK5jFaRACt
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4983152130922089303819448677342867825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.onleihe-rlp.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19416969381952866898716868584523009442232996373619060110392216880148925005378176313136769256709616193702298483595241240174274430745226628649404820072818295281021026287815688677861107563001580722674786509774826320246520784220524573291320591488595519192249944116539072192718456152938221988414704313746020538680829780666773779580387802485318001515962907368258094985542288656696816177762019957156710428944171759796221888599980086197520702557729292452189596359399365371559017065296952046049396408005006337240663217952021173880103821137321698678628148159191506766736646587833044877631480734913608274742544861263382597119409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89157c1ca5637d4b645be8c1617289bb598dc5ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onleihe-rlp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onleihe-rlp.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000193e48df88b000004030047304502205c7f5ce88ccf8332b9cafd9db6edc24eea9e918f7b34d4907d10448cee5615f5022100b034e58098929158a26f8ef82daa4a6170c5672bb9f8547ce81895e118abf4d70076006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf000000193e48df8a60000040300473045022100acb8ab36206a95ab14102a69e555cfd61ab15a5b284fc126367668d57b9a669002205bca92460c9fb6d8f64acd74824e383f7ffda950450a514be35e583f23299ac6007600499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c300000193e48df8be00000403004730450221009e7c0442ef67f6324ca84ce20faf949c3eb0d759e948274edc9eda9ece3c0ee60220171f9696d0869e34d7e33be8853f5e554b3c876cefaee8b3b9e4ead79783a99f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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