*.chip.de

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:18:bd:ee:da:eb:3f:cd:f9:11:4c:5f:1c:00:70:ef:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.chip.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:18:bd:ee:da:eb:3f:cd:f9:11:4c:5f:1c:00:70:ef:24
Serial Number (int): 270217086995788272262812374980105321115428
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:57:d1:9f:f8:b8:e7:0e:8d:24:21:55:7a:2a:f1:31:f6:12:af:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:70:7c:13:b3:c8:ec:cc:39:22:1e:e0:76:e8:c3:ef:00:7b:02:5f
Fingerprint (sha256): 0b:c6:2a:29:05:ff:e6:60:0a:17:00:14:fc:e8:b6:61:0c:8b:e6:05:47:1e:33:a3:30:6e:3f:1d:a8:3f:57:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.chip.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chip.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chip.de
chip.de

Other certificates including the domain name chip.de

(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de

Certificate

The complete raw certificate details for *.chip.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270217086995788272262812374980105321115428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-08 07:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 07:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chip.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709516970653749328068491048998283307941666072022923626499843900236507569698887943876227631862316054372619298956384785054044067005002847294537003757011674026975224682028013110729611658991886342889800760436726549464237382897904863608061771271043197748110564243202023229976586646354846428091183190480715468570947146689748645079515913854242953301093164951401261300287761559766016888171715890880339485208686685570611209355583737543598009414360961773062548394493742763262141312895006445179973983527473321721797644522049551603833634278665914873424577622321343952463852978435678122355983362721706844060718343697807060723124942035715167447706488905109214211195419594011965948860866204005917258230558829149622196622176953110416780024297162595081229015446344819209263821846853594193800466168538726897770451787906941391855906075214107341989080776544115170493287414071485064003084094845422623677506051019146452566046068125704613535083247468229441798285852626864361554988909138093168844846256339097403154821958480740714700597840154975386358102266924401412359508253834494794941683954736380779439591785198272257154988798504378762950688072555156789902850026330991641679813872189989830405355530702180391621373987431549899838363932870605916161425372339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6757d19ff8b8e70e8d2421557a2af131f612af80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017810fdfa41000004030047304502204cd5fa30f4ba0ac4cca5ee6f4f5c81a5bad68e1b57e5af2d69103f79a6de4683022100cb6af19171c48e11b3a37db67104e4a80096f76ddfbe4701cc1037336a3ef055007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017810fdfad9000004030046304402205c322d5f856e0a75d60ba6684a8d20f023b7a4e58f4094cb9eb19ab7b3d1e93f022061acfd9db0a89e4bdacfef20caaaf9f2ab21f96c1f20c780e93e490773ad6845
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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