abo.thueringer-allgemeine.de

Issued by R3

About this certificate

This digital certificate with serial number 03:59:7c:26:cb:d2:00:d9:56:82:ce:f6:e6:d1:ad:88:9e:1f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abo.thueringer-allgemeine.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:7c:26:cb:d2:00:d9:56:82:ce:f6:e6:d1:ad:88:9e:1f
Serial Number (int): 291787014163969543494525965751203830210079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:3e:02:fd:da:89:77:a5:11:8b:d1:80:4e:6f:07:5d:c0:28:6f:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:15:6a:ed:51:ba:cc:03:b3:5f:8a:1f:4e:7e:6b:b2:c8:e1:50:11
Fingerprint (sha256): 09:8b:c8:1c:23:a9:e4:1e:6d:01:2c:c4:ae:09:ab:c5:a8:e2:65:cb:27:60:38:19:67:03:1c:18:08:d7:d6:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abo.thueringer-allgemeine.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abo.thueringer-allgemeine.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abo.thueringer-allgemeine.de
www.abo.thueringer-allgemeine.de

Other certificates including the domain name thueringer-allgemeine.de

(limited to 100 certificates)
sso.zgt.de
origin-interaktiv.fnki.de
abo.thueringer-allgemeine.de
www.funkedigital.de
abo.thueringer-allgemeine.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
stories.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
emag.thueringer-allgemeine.de
reader.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
emag.thueringer-allgemeine.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
*.thueringer-allgemeine.de
*.waz.de
reader.thueringer-allgemeine.de
*.thueringer-allgemeine.de
anzeigen.funkemedien.de
emag.thueringer-allgemeine.de
sso.zgt.de
sso.zgt.de
emag.thueringer-allgemeine.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
reader.thueringer-allgemeine.de
dev5.aws.funkedigital.de
dev2.aws.funkedigital.de
*.waz.de
img.otz.de
uat.aws.bildderfrau.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
funkedigital.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
data-d946a9c4a1.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
anmeldung.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
*.thueringer-allgemeine.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
img.otz.de
sso.zgt.de
*.fabo-live.funkemedien.de
*.funkemedien.de
emag.thueringer-allgemeine.de
funkedigital.de
reader.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
funkedigital.de
*.waz.de
funkedigital.de

Certificate

The complete raw certificate details for abo.thueringer-allgemeine.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI6q2zebCKoGy1mJGiVh
0WPteIUY73y/SNqlnUYSvfMRPY76GoclM9GLKe4UH0V8CsNdIRXCb5/kWisuFvF3
mAu+2akJYpvRFSK70MpGFpRvXrHWNpP1m7rtjLRa3ugqXzHBpaWrx6suSPujfjF4
gkVFVrAg94l4Apl5Hn5XBtQsmACWByd+iw0+AZbVEkOouGSZmcza82FmLxXFkNkC
hptgKInfJTaUCm8fS/g+qDUvLNx9TNM4XDNnN0B2tnznnIBWR9LWsJQaMY7XYyDb
2NSn/rwpsOEPSM0GzbRzeNaQSf+g3ZInPw0msUVhbfd7EF1j5SklxZART8MW6lYH
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291787014163969543494525965751203830210079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 13:01:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 13:01:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abo.thueringer-allgemeine.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25318012913896619490439549293280819655348332823816965966484250485962555880395759445626313247026722844633401427859188478363934441483550512584205607659813450146547573956892519850990849907255960318772994126089179315037508007906863733049446215399287179993740121709747240193467217612712253872437500932759278439029637609460623601542464787776950437465690655991218135624935952094297258359342152923795671454180758252829447530508852860760802294234052821561296726729518974104394247898457116137008223311150834816667977236250265283608676509482577317105745781798103760938575328878170840008606088647606323193367611738997551822931879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d63e02fdda8977a5118bd1804e6f075dc0286f2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abo.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ea0dba680000040300483046022100e1e87edd01a463586995fa87b862521395e07027cde7e1de39cd4ff3dc7b3ff6022100dfd19daee58ef348b03a15dd3e881814373aa14f183769d2446d35345e5a23e0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189ea0dbad80000040300473045022100ead2edc7c9cbe7778c1fc0d03750a3b5fee471e1ff80d1412d26a5b0a3942a1702206dbfc9ce3e44de0fe0911436dd43fc63f383bb5db21e69c1421ea00e4e76e90a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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