corporateshop.covestro.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a3:1c:be:fe:94:04:79:db:2e:85:43:cf:bf:4f:b3:cf:ce was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corporateshop.covestro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a3:1c:be:fe:94:04:79:db:2e:85:43:cf:bf:4f:b3:cf:ce
Serial Number (int): 403953379618898248027471667533444646424526
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:0c:2b:f9:ec:6b:c9:54:44:d0:ca:bf:0e:85:74:22:bb:9d:aa:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:f0:dd:2e:3f:43:95:7a:d8:20:b0:3f:75:0e:ac:c8:b9:e9:65:63
Fingerprint (sha256): 04:ba:32:89:ac:cd:64:fd:dc:c1:c2:fb:db:45:ad:c5:3a:38:cc:9f:29:1e:1b:cc:87:d3:86:12:f8:fb:ac:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate corporateshop.covestro.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corporateshop.covestro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corporateshop.covestro.com
www.corporateshop.covestro.com

Other certificates including the domain name covestro.com

(limited to 100 certificates)
order.covestro.com
qa.service.media-assistant.covestro.com
customerday.covestro.com
app-main.easy-entry-app-qa.covestro.com
tec-p4t-p1p.covestro.com
initiativeplanner.covestro.com
pureinsights.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
commoditycatalog.covestro.com
*.preview.covestro.com
www.solutions.covestro.com
myaccess-pgh.covestro.com
catalogue.api-qa.covestro.com
cups.covestro.com
www.i4pto.covestro.com
customerday.covestro.com
mtr-qa.covestro.com
order.covestro.com
adamintellecat.covestro.com
customerday.covestro.com
new-select.covestro.com
order.covestro.com
www.pureinsights.covestro.com
extsipap.covestro.com
extsipap.covestro.com
mediahub.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
order.covestro.com
*.preview.covestro.com
vmi.covestro.com
www.mediathek.covestro.com
app-main.easy-entry-app-qa.covestro.com
etrip-cn.covestro.com
corporateshop.covestro.com
www.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
api.select.covestro.com
select.covestro.com
rimgate.covestro.com
dev.identitynet.covestro.com
qa.identitynet.covestro.com
www.pac.covestro.com
adamintellecat.covestro.com
www.covestro.com
trainingportal.covestro.com
api-development.lisa-qa.covestro.com
sentry.select.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
warehouse.covestro.com
www.covestro.com
em.covestro.com
proveedores.covestro.com
easy-entry-app.covestro.com
catalogue.api-qa.covestro.com
commoditycatalog.covestro.com
proveedores.covestro.com
www.sheeteurope.covestro.com
extsipde.covestro.com
www.prodin.covestro.com
pureinsights.covestro.com
trophy.covestro.com
catalogue-cognito.api-qa.covestro.com
cups.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
investor.covestro.com
apac-qa.order.covestro.com
update-manager.select.covestro.com
extsipap.covestro.com
www.covestro.com
mediahub.covestro.com
www.solutions.covestro.com
cp.covestro.com
investor.covestro.com
service.media-assistant.covestro.com
www.covestro.com
salesaid.covestro.com
logging.select.covestro.com
customerday.covestro.com
pac.covestro.com
*.p6.ta-qa.covestro.com
qa.service.media-assistant.covestro.com
docs.api.preview.select.covestro.com
smtpmx01.covestro.com
qa.media-assistant.covestro.com
investor.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
test-catalogue.api-qa.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
proveedores.covestro.com
customerday.covestro.com
extsipde.covestro.com
extsipde.covestro.com
monitoring.select.covestro.com
iot-platform-qa.covestro.com

Certificate

The complete raw certificate details for corporateshop.covestro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISBKMcvv6UBHnbLoVDz79Ps8/OMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MjcwODA3MzVaFw0yMzExMjUwODA3MzRaMCUxIzAhBgNVBAMT
GmNvcnBvcmF0ZXNob3AuY292ZXN0cm8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0vAKyab0AmtMFOJZyyD0mnfs18N0n/j6RhExvA4AnC7zWIph
eupoI0S6F9FIJZBpOi8WMytCOzniJYbCP8hlrICOB0oGvGRzp3giFzoLtr0iAqYt
djCahqgCYTjaTq0vtIZi8UjEqw2kpZ2brj3aM1YyhBAF3dgFTge9D/NbXQMTqo6o
BcyVS7DQakwANAyqvODwre/0TFXhmabC3ofJ/7A7Ii8ERyR8q/3kx8jRHdzfkGNY
aKDt21JvHqr4K9VsZ6UN1cyl39tMAqrnduJ0W30JYIale6P5jSXmwVkBU/0j72EX
acR3miv0GULZC/gDXxCG7I+Qh/eBJOdfCV29twIDAQABo4ICPjCCAjowDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQvDCv57GvJVETQyr8OhXQiu52q5TAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzBFBgNVHREEPjA8ghpjb3Jwb3JhdGVzaG9wLmNvdmVzdHJv
LmNvbYIed3d3LmNvcnBvcmF0ZXNob3AuY292ZXN0cm8uY29tMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAejKMVNi3LbYg6jjg
Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGKNj+ogwAABAMASDBGAiEA/Y4R7VSgBoYH
in0foUark4n8L+WnlVyI2BqqaJpnv+MCIQDWsrXmcsrCTzX19bIhn8rKf3QEqJOk
GBOzvcmQfeCvZwB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAAB
ijY/qHoAAAQDAEgwRgIhANfgVo5EIoOSruTQaAK6OgAft3AuVDv9we1R4SoqbhZc
AiEAm+xyYjYtxP0a1GSugVy/2OwjNqgUqVWpr5q2RIhmgPswDQYJKoZIhvcNAQEL
BQADggEBAEOMJHt+zcRoDhCc7AA8BPAxocKdtK37JbgtBeERQan1o58xETKmDT0F
wgFsgeKij3glkMJx8MPMc+YZcn6EVAgfDwwtl4yD81FPhoZzS/WWEBv71DXPzITK
qYP466rNVCTGM087z7paSJEcFb+SWssUes5agb8NX1ELOcIVFzySps8tBus5HgTb
cK9CIUsUvFokVCl66TApoCgfdS7JONVBAktL2Oz+opn+7776Jq1FACmBN0/qxb9F
hY1okzGF+09heVw5oD0Urwxlc3ySefa6Rz4+E8Hd7NXexwj+t6r+q5Tu+kp3Ga9C
SQvTi7LXdADXIFEQCnVAGcD6QlH90LE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vAKyab0AmtMFOJZyyD0
mnfs18N0n/j6RhExvA4AnC7zWIpheupoI0S6F9FIJZBpOi8WMytCOzniJYbCP8hl
rICOB0oGvGRzp3giFzoLtr0iAqYtdjCahqgCYTjaTq0vtIZi8UjEqw2kpZ2brj3a
M1YyhBAF3dgFTge9D/NbXQMTqo6oBcyVS7DQakwANAyqvODwre/0TFXhmabC3ofJ
/7A7Ii8ERyR8q/3kx8jRHdzfkGNYaKDt21JvHqr4K9VsZ6UN1cyl39tMAqrnduJ0
W30JYIale6P5jSXmwVkBU/0j72EXacR3miv0GULZC/gDXxCG7I+Qh/eBJOdfCV29
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403953379618898248027471667533444646424526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-27 08:07:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 08:07:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corporateshop.covestro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26628413233524027392066075586871999093401332998655321066689938049118295764705871843236720458643462518306098098258333074703888329504162149472033575514981100297471490092571322063037811427715474896533051034853177598277927153589449767661077003104923769984070366317463007476561339139828401221401234199409854603222053830344086618673324189020866759436677983055723378958709635295576547032579100570598198574690298607913208499692065791509733434125045209658606294086065123530422851093372150930835854256694761697952110495496019266646842900621523406439362610186468254033836396847845796159853586074522272176122437973677635192864183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f0c2bf9ec6bc95444d0cabf0e857422bb9daae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateshop.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporateshop.covestro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a363fa8830000040300483046022100fd8e11ed54a00686078a7d1fa146ab9389fc2fe5a7955c88d81aaa689a67bfe3022100d6b2b5e672cac24f35f5f5b2219fcaca7f7404a893a41813b3bdc9907de0af67007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a363fa87a0000040300483046022100d7e0568e44228392aee4d06802ba3a001fb7702e543bfdc1ed51e12a2a6e165c0221009bec7262362dc4fd1ad464ae815cbfd8ec2336a814a955a9af9ab644886680fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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