www2.zeit.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:79:44:ba:59:13:e2:1c:1d:4b:19:e5:7d:73:b3:f3:61 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.zeit.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:79:44:ba:59:13:e2:1c:1d:4b:19:e5:7d:73:b3:f3:61
Serial Number (int): 270005110411566203023524856491191785747297
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:39:0e:30:82:07:65:65:2d:91:bc:36:2a:5f:cd:8f:85:c4:8a:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:60:f7:26:a8:80:d1:d7:1a:80:20:65:56:fe:57:24:c1:5a:c9:30
Fingerprint (sha256): 0a:a7:60:f8:fd:03:db:4a:b0:33:39:17:5c:4b:09:59:f6:19:05:74:9d:fe:40:ef:ac:93:98:20:20:2d:89:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.zeit.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.zeit.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fbia.zeit.de
images.zeit.de
jobs.zeit.de
mobil.jobs.zeit.de
newsfeed.zeit.de
scripts.zeit.de
www2.zeit.de
zuender.zeit.de

Other certificates including the domain name zeit.de

(limited to 100 certificates)
dns-vetting1c.map.fastly.net
zeit.de
timetac.zeit.de
dns-vetting1-jeffg-noah.map.fastly.net
dev.academics.de
cmp.channelpartner.de
epaper.zeit.de
dns-vetting1j.map.fastly.net
inserieren-adpoint.zeit.de
g2.shared.global.fastly.net
newsletterversand.zeit.de
g2.shared.global.fastly.net
zeit.de
leserservice.zeit.de
g2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
timetacstatic.zeit.de
mailserverbdcas.zeit.de
dns-vetting1-jeffg-noah.map.fastly.net
timetac.zeit.de
boa.zeit.de
dns-vetting1j.map.fastly.net
ssl-proxy02.acme.zeit.de
verlag.zeit.de
g2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
shop.zeit.de
g2.shared.global.fastly.net
community-api.zeit.de
inserieren4.zeit.de
dns-vetting1c.map.fastly.net
srv-ts.zeit.de
g2.shared.global.fastly.net
b2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
avatars.zeit.de
www2.zeit.de
b2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
g2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
g2.shared.global.fastly.net
g2.shared.global.fastly.net
k8s-ext.zeit.de
verlag.zeit.de
dns-vetting1-jeffg-noah.map.fastly.net
spiele.zeit.de
dns-vetting1c.map.fastly.net
www.academics.de
b2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
g2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
z2x.zeit.de
b2.shared.global.fastly.net
prod.academics.de
b2.shared.global.fastly.net
verlag.zeit.de
dns-vetting1j.map.fastly.net
zeit.de
b2.shared.global.fastly.net
inserieren.zeit.de
g2.shared.global.fastly.net
b2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
chancenundkarriere.de
b2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
www2.zeit.de
b2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
g2.shared.global.fastly.net
inserieren4.zeit.de
verlag.zeit.de
dns-vetting1-jeffg-noah.map.fastly.net
community-admin.zeit.de
g2.shared.global.fastly.net
g2.shared.global.fastly.net
mailserverbdcas.zeit.de
herstellung.zeit.de
g2.shared.global.fastly.net
k8s-ext.zeit.de
g2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
openvpnas.zeit.de
dns-vetting1-jeffg-noah.map.fastly.net
timetacstatic.zeit.de
1pw-scim.zeit.de
inserieren4.zeit.de
g2.shared.global.fastly.net
parlamentsreden-backend.zeit.de
srv-fw-master.zeit.de
data-af9f3dfb33.zeit.de

Certificate

The complete raw certificate details for www2.zeit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270005110411566203023524856491191785747297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 08:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-14 08:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.zeit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822550603991588300457716877182788427262663671039452601893510609215428190227029773361167607413578342683275887209305825608191973837623889756834909281152322350516022368720921205661754486086439309619068864628027000735889888255167012626303345649086761843174066949342068660708328489019481731070345795305282220682733402411057329726444805511153553863005358038952418197256083397671520306525186551053946848185437384939422814513337688383388096546903984356138542724730794602216317556378686720579357210313624309210150861010526808585314729756171542474759164097533880290781830835928759724120511550942899210204496827527615641001421127571643999335025036399019387144042087027610087604094006277332117476096803853566671892427501880883147168516182404417591317208813692981996853769625885428567074258855815165671914115861888110467035522289865610339432723086398017236632928469585138021720954792058292790449830831501788791388635316546984864698245472612822941016700211324358599350707339772449795211290198887449573424705844604406914658119669774906126744852598175868322418128496392322174974476744765391327822775591330587832139514148462342668143117218022811736673958443919726452797234229995821820748688722697495224811991878807854386968669973635104276411839874273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da390e30820765652d91bc362a5fcd8f85c48a11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbia.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobil.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsfeed.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripts.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuender.zeit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f1b4864ec9a533e6985b4106549a6a09d5a83d62b7555e9f4be92aea4019f7109477a849abebd2d388fb24bffb1e2f84649f875a3cd4ceaee8acc6d0ce797a3153b8be336ebafacec436b1512552f0d693256b4a6debd36f7643294e4c28f7cceccd3ecd8c3df54d8d96bd59bdb25dd15b47f4e373196127828faa0a3e433e9f7dc02cbd85f9d829000177f128ef2098e4c4b07397118103ba2c03272c923a37f29f7ef99b357913e5e101e3dd4e6e4f95e0d4a25c1d375cab608d1c0394a574eb9e2e46636a4e344608a3e518c18590235b9669ad8b6c3d17972970db2d1082d6324f15701f1e2285f8320b94d17937025e67203902475c32dc50a4d9b6a2a