brunnenschlagen.de

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 08:c7:69:16:61:aa:e4:4c:b3:fa:ed:ba:30:ba:05:3f was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

brunnenschlagen.de

Organization unit: Domain Control Validated
Organization unit: Hosted by Alfahosting GmbH
Organization unit: Free SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 08:c7:69:16:61:aa:e4:4c:b3:fa:ed:ba:30:ba:05:3f
Serial Number (int): 11669222467382357877002508739051914559
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 42:8b:34:14:b8:87:6e:e3:cb:d4:4a:df:f4:43:71:4b:7f:7f:0a:c3
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 17:77:bc:a5:2c:b1:22:9d:53:6c:8a:19:21:0f:39:67:a7:50:5c:82
Fingerprint (sha256): 00:18:82:d1:b7:07:73:98:50:86:65:e3:a1:b2:ea:62:ec:ca:15:e1:d9:16:e7:73:06:67:f9:26:58:04:c5:0d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate brunnenschlagen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brunnenschlagen.de


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brunnenschlagen.de
www.brunnenschlagen.de

Certificate

The complete raw certificate details for brunnenschlagen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11669222467382357877002508739051914559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Alfahosting GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Free SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brunnenschlagen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761347660225183017275507478044122806325367977188287269010250776470505689915077841612958039500120454668214212324904207215062254638207663832313094954142942559960759627779703146749359972730868075362277546265983293723049618681169914254230811732546138283897243411104920219264544295249856623089062586841106508771858401346027959733735549284481092224237958428671347616301097409688239596542270234319909473648343059539452339887405130231820843286367413839485602851653285587537450155923682160947268970509763082097092375644657840753448367423772549283021901472704012364933231033469107270675538589960439331128465423979518916447091178493941262501425204472365935941435025078539996338117088098969325371200245961561400963310871676286241758823511111769038826200745280076629828689446635010713908389378221970352638740300200390606988417858626724263100534430124399723162402186001446464125122296425932135756574322269548897798011126530109469047104085207086961405911452903577638394284102191008131802656865588271436197957093396307447548586231575201603753154241370803513282712498460234923867663268000452754264235289341289937494857616463083221061380648305265330403286045661771543952606944971679808228642153612425681352890946542523025266406391840696427342835260859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							428b3414b8876ee3cbd44adff443714b7f7f0ac3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunnenschlagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunnenschlagen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000162eb31a0870000040300463044022047a4704f8d33ca8b7b51c5594ce24b51703ad640cbac6985d12ccbeb848828b202207b7e8689914b79af16cf514d397ad03ba667302f631a7a5a69330c4b4c856f55007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162eb31a0cc0000040300473045022061c6ad52f5151e597672e7f5bc57186c6b32305f70594cc476d5b9a1060ee393022100a9c1f9290ed6e5158fcbcb75e60d4a3978c604dbdc7d4234f51cfa55d80605df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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