boersen.manager-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 03:17:67:64:e1:37:90:94:ed:ec:17:a6:20:92:30:b8:ea:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boersen.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:67:64:e1:37:90:94:ed:ec:17:a6:20:92:30:b8:ea:85
Serial Number (int): 269300786515658480063103212392983765248645
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:d8:6f:10:1b:19:c2:16:f7:86:93:c5:7f:03:cd:08:68:dd:40:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:70:e9:3a:29:16:42:61:5e:63:49:54:8b:a0:d9:84:57:61:07:f9
Fingerprint (sha256): 08:12:2f:b6:29:62:0c:96:a6:4c:f7:1c:22:a9:8c:fe:bc:bf:3d:2b:87:13:66:61:8d:c0:cc:2a:06:c7:42:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate boersen.manager-magazin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boersen.manager-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boersen.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for boersen.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269300786515658480063103212392983765248645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 00:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:49:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boersen.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746543987388382281993541378613270169907044765495378530508441827486637639801888098156481235145526650519144252082481759326063947122143668010314673486900723516295990256221472466224200914629152664710070203000102918516735992448317870641960737038633755334786950493886240182816883887386185289153538473991001734173668314057400857037969323393441078721617195504197912213868923731919184333737373534478460986895285874176739490443030940644619450821569116714937232086674531910800260271733171689338769804832278801339234404595107107885327036693771968488980020980232896344832814197371672927612516205071146789843348144803264461517642046155811239358195080203309183458846644371184565114369103445155807468255523672937381010261452663222191434904742454664237196006159167978168421776797565275740734914347364158069351112191265699069903353176147479161188332996989910761302336459323486754437228403603946983889760550271571340947195031113852758026187382474893777272021044689948310190740098249688290394900643510275542693678136217042886360230680826439736487543222601544447620465221441404562727731009087558662400209203861209509666305340251820648004597663578525404209478646046213802333001483143090580430448251828979831991663329460521899535986884956553432446923430171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6d86f101b19c216f78693c57f03cd0868dd4023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersen.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188c70ad18b000004030046304402201fb8905f480a0a210adcea944e02abef03d9868120247001cc86ca0b08e9e32602205370340e6429b1ec8261fa7e5f52e5878faf81c3630f4065a9fdeefa4ef2d9530077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188c70ad1c2000004030048304602210093dc00bb4f54196457d53567c43a856fac57c69faac3fea3c897b3c04445a2b2022100e89cdbcb92fa21b05a3768b646ccb5f99a3cf3282cf14702754b505ddb2755bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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