*.stg.int.chip.de

Issued by R3

About this certificate

This digital certificate with serial number 03:75:35:0e:6f:e7:1f:eb:93:28:30:2a:70:91:59:d7:53:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.stg.int.chip.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:35:0e:6f:e7:1f:eb:93:28:30:2a:70:91:59:d7:53:aa
Serial Number (int): 301220418770622210567868992410517054641066
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:fd:60:79:10:5a:7b:6a:06:18:25:e1:4c:a4:9c:b4:42:15:82:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:95:7d:53:ad:1e:71:70:58:d2:cb:c0:39:a0:8a:f1:88:cb:3f:8a
Fingerprint (sha256): 0c:6d:d1:fe:6b:c6:ca:92:14:6b:0b:b8:d0:4f:38:4b:52:41:39:38:9c:d1:2d:c2:8e:b9:78:ad:ff:35:6f:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.stg.int.chip.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stg.int.chip.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stg.int.chip.de

Other certificates including the domain name chip.de

(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de

Certificate

The complete raw certificate details for *.stg.int.chip.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301220418770622210567868992410517054641066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-22 01:18:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 01:18:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stg.int.chip.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877005945685625777549598410711434046305937932125118082344073040038043090193094993350013146193322688361699917228232109471523491793073885803563503682904505387913026299945685894790713119548777783177447497623991176941688271689288075684840835055118429073788693866770965510986117673750032262228402675664692842654981304969426405855638429452154442658745568493527523075518507341080679796932235566605191794697704546339514510640098196856826277269594860170253823199011898106468299223312494028193436114087760608843348027361821932877033888382898391439244021321066180460207770952616073925887982337201892843742156561454631006692210916136890570849334577507626723111177514390227784889773932173803017196336238920517968915987443320072250576893269100014078957034380711117097033657985500277403237135624804677197541057829800822874520159165373460720719167451293427567737149980708988677994666174243012597932273406133809846684595381982742105752197900174739427029730395708518178151494831225201391159870192788426311970183960720843338341257586547629174788835949097159089716761111965934601634033724879463593637587253814872754733421671135795882042019676920743842593670634213814727326129296925160244175595812205947794433409198145101316990776062846769926829856041039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ffd6079105a7b6a061825e14ca49cb4421582d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.int.chip.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017acc01b78c0000040300473045022100f960aff6a0003ee85790226c8e1a5d5edf17880e63be41173db895f1f5c074b5022018c9430456a59ed7dced30ff5d1387c457926074c2150661a9f79394983e23670076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017acc01b7bf000004030047304502210090473770860bff628d2dbcea785cbb5d7044188f5d8d3b76657b5e6486b84d9d022050b146bd9b80a61575bbf080ce1e6b4ebe0cd54a3485e0fdd2aa61841a042494
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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