blaetterkatalog.welt.de

Issued by R3

About this certificate

This digital certificate with serial number 03:54:33:4f:b2:9f:26:dc:88:e9:44:68:85:ad:9e:32:57:66 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blaetterkatalog.welt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:33:4f:b2:9f:26:dc:88:e9:44:68:85:ad:9e:32:57:66
Serial Number (int): 289988781058754640162059667448383977707366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:47:86:85:57:c7:01:8d:65:fb:d3:88:8b:d7:77:8d:23:7f:d0:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:1d:54:ab:ab:68:a2:97:dc:1e:8b:62:22:b1:dc:6d:77:92:3f:52
Fingerprint (sha256): 07:bb:50:47:f0:5c:80:6a:09:43:1c:f4:45:b6:ec:f6:27:71:4a:20:43:f6:6e:16:70:42:ad:2d:fd:41:7e:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blaetterkatalog.welt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blaetterkatalog.welt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blaetterkatalog.welt.de

Other certificates including the domain name welt.de

(limited to 100 certificates)
portal.deutschemailbox.de
bankinastatus.mambu.com
cockpit.mm.welt.de
angebote.welt.de
ast.myhomebook.de
portal.deutschemailbox.de
*.axelspringer.de
portal.deutschemailbox.de
portal.deutschemailbox.de
karriere.welt.de
portal.deutschemailbox.de
www.welt.de
portal.deutschemailbox.de
portal.deutschemailbox.de
*.prod.ps.axelspringer.de
shop.welt.de
gutscheine.welt.de
portal.deutschemailbox.de
portal.deutschemailbox.de
portal.deutschemailbox.de
gruenderszene.de
umfragen.welt.de
wetter.welt.de
portal.deutschemailbox.de
portal.deutschemailbox.de
amp.welt.de
el-shop.welt.de
portal.deutschemailbox.de
blog.debatte.welt.de
dutyfarm.welt.de
portal.deutschemailbox.de
portal.deutschemailbox.de
portal.deutschemailbox.de
*.prod.ps.bild.de
*.ep.welt.de
dutyfarm.welt.de
internal-status.getbabyscripts.com
*.up.welt.de
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
offer.bild.de
*.prod.ps.axelspringer.de
asbs.welt.de
traumreisen.welt.de
asbs.welt.de
portal.deutschemailbox.de
ssl.1.damoh.welt.de
weinshop.welt.de
amp.welt.de
portal.deutschemailbox.de
portal.deutschemailbox.de
pdf.welt.de
gutscheine.welt.de
portal.deutschemailbox.de
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
wetter.welt.de
www.shopping.welt.de
build.ep.welt.de
portal.deutschemailbox.de
leserreisen.welt.de
weinshop.welt.de
neu.welt.de
*.welt.de
test43-akamai.ep.welt.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
debatte.welt.de
blaetterkatalog.welt.de
amp.welt.de
internal-status.getbabyscripts.com
*.mob.welt.de
*.up.welt.de
suchen.welt.de
gruenderszene.de
portal.deutschemailbox.de
img.welt.de
ums.welt.de
bankinastatus.mambu.com
san16.performgroup.com
epaper.welt.de
dutyfarm.welt.de
cmp.autobild.de
test-akamai.ep.welt.de
bankinastatus.mambu.com
shop.welt.de
apfeltv.deutschemailbox.de
ssl.1.damoh.welt.de
*.mob.welt.de
portal.deutschemailbox.de
*.prod.ps.axelspringer.de
*.up.welt.de
ssl.1.damoh.welt.de
gruenderszene.de
*.mob.welt.de
portal.deutschemailbox.de
ssl.1.damoh.welt.de
dutyfarm.welt.de
ssl.1.damoh.welt.de

Certificate

The complete raw certificate details for blaetterkatalog.welt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscMb8FYTGSOfSOWYjWXZ
wlreLCzSfKRQVCrNjXNXR8hE7Dp42oQ+B1ur3aAlHWQWWVGM+/eqbJgcX/mvxulv
tfoOGJjnXJoDtHUuJU7AEVR7c3r6RLaYLpN84NBji8UyF2MB3IjitJhXjIvS/HWa
XaeIoAhHHCjlV1QoLEkY9KNYDv7/+lwDSjMA1GUa0WsozhB7Sax34g7spJqXDf3c
7ytjPBAJNMSrAmWXKv4wKGuA9JAOOcC9WqAELqx4aFSn0M1LKQC2XRz9VyPsnEjm
RNT0AaYzk1d+rCLhrhBF6AosAj6y6O0coQteen9Clwvblf6/MfF+A8PwQV1i2K8j
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289988781058754640162059667448383977707366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 09:08:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 09:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blaetterkatalog.welt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22440391879815607546331426089413305232504476926476493343398669152014131051437269649829038853100904876550118647197793082445579511720801960801238933183046876428162262853970150963496928498479597005175758625600023722739519819779536304443774137569188875657487390913218245408300643142649131453194588558718808613259954734149121485046800470464587830664769368946579944358152490560067252795354618157231205254746770134879223655450422967521380700339676996760654611848752126331449321882854903000001352395062501771212530813834417071012300768229868261642459404151349703275735069221863673344073623566561749805672117914709624601125673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da47868557c7018d65fbd3888bd7778d237fd027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaetterkatalog.welt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b709ae6630000040300483046022100f42d977642507bb5386b4d1e6a446618207f97fd950d7319404d435bde2aedbc02210092a82614ec8a278b09ea128806223963fec1d91be833d5b86b6fb0e0ebe9b5a9007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b709ae656000004030046304402202c222359f3f0c2ac5d0dbdd8c087953708dd7730d0783362381f650dd6c8d1b1022032520224c164eb9fc36d5038ff45bf75811e9dc785c9d51939cef31c18a19a2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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