emag.waz.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:6c:4b:b9:f6:1a:72:2a:af:e9:68:17:0b:00:b6:7a:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=emag.waz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:6c:4b:b9:f6:1a:72:2a:af:e9:68:17:0b:00:b6:7a:42
Serial Number (int): 267605890217410882592009430120439553096258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:e0:3f:d9:b0:aa:df:b0:f4:b5:8b:8d:f5:1e:52:7f:ad:69:87:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:07:bd:3f:6e:02:cf:cb:a3:ba:29:10:97:08:36:d6:d5:f1:2f:ef
Fingerprint (sha256): 09:66:20:80:b6:31:4d:37:7e:62:d6:80:7a:ce:28:93:c0:2f:52:1b:cd:e8:4a:a4:77:3b:8d:82:82:a9:0b:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate emag.waz.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emag.waz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emag.waz.de

Other certificates including the domain name waz.de

(limited to 100 certificates)
www.derwesten.de
www.weltsport.net
70jahre.waz.de
origin-interaktiv.fnki.de
70jahre.waz.de
jobs.waz.de
emag.waz.de
*.funkemedien.de
dev3.aws.funkedigital.de
www.weltsport.net
www.weltsport.net
funkedigital.de
www.waz.de
*.waz.de
dev2.aws.funkedigital.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
jobs.waz.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
www.weltsport.net
www.weltsport.net
70jahre.waz.de
waz.de
cps.waz.de
jobs.waz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
leserladen.waz.de
www.derwesten.de
www.derwesten.de
www.weltsport.net
kundenservice.waz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
jobs.waz.de
dev1.aws.funkedigital.de
bochum70.waz.de
stories.waz.de
bochum70.waz.de
agnes.waz.de
data-fdf4690b14.waz.de
www.derwesten.de
www.derwesten.de
origin-interaktiv.fnki.de
www.weltsport.net
*.funkemedien.de
70jahre.waz.de
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.weltfussball.de
www.waz.de
cp.waz.de
www.derwesten.de
*.waz.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
anzeigenbuchung-in-thueringen.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
70jahre.waz.de
*.funkemedien.de
*.waz.de
70jahre.waz.de
70jahre.waz.de
*.waz.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
funkedigital.de
reader.waz.de
uat.aws.bildderfrau.de
www.waz.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
funkedigital.de
70jahre.waz.de

Certificate

The complete raw certificate details for emag.waz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267605890217410882592009430120439553096258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 13:45:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 13:45:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emag.waz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714823316755978608440783849873678419353502824549851437738432697618186831838035212091327435795095726682565692953993981496345942176937230782708671446096276142802228948784034908951015313464664419602678983483712063498109365505790128851956533286028231382507970717709473493934900933988337726182583017515112044100995032480289839362690292239489968220142827811781674493592910311200938557589096543753074497445434615679921595150265348025194221375580511792144394547198678126007104024238714524948247941271244206390982450500423809667190707329583832568041818153090029351116165875056786322845870820376808576452026110533476568604344203991971622944050157549382596579294144292333634692222832154311835132697765971735561553966356453950229902193350095359653828865942524496432807013451268384528329852160166645228730675224380039921162020099188124368012737687945083356416012697892644500938503782155306337689759970603063972948680908750302808788791596158724932295035351741861425466709088383350226422599993235827510209583220160245175318002396364248350949468943267571908268380669976831893489470812026807914675849652491258253467835583916982033183316189182446025313868177278525180044662622350106261044990186734559797457357215133638023476858526980597443673677747573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fe03fd9b0aadfb0f4b58b8df51e527fad6987c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.waz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0f2baa88000004030047304502204e686709b5384189daa14ed637a27d2195da49018ffaab01bbbb8783498192da022100eb2476b5eafb2ddf607cddbd921e91735083d05f77b71caf5743dcc5685714c800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0f2baaa50000040300463044022021695bba631cde0fce0f4f92886df2c12dc1e3a7cf879cd9c5e11ef1afaccb2102206531d38f52050cd64fc887882b9646cc5b8ea31f0c1ff4e2bfe11b93816d54ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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