ssl.1.damoh.aws.brigitte.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:b6:3d:64:6b:3b:7c:ab:1e:bc:23:bb:14:11:b8:4d:ac was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.1.damoh.aws.brigitte.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:b6:3d:64:6b:3b:7c:ab:1e:bc:23:bb:14:11:b8:4d:ac
Serial Number (int): 321468792635443918907445508529061858135468
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:9f:cd:77:b6:8f:51:24:b6:40:df:9d:24:2b:7a:37:4d:f3:ff:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:bf:4f:5a:46:a3:33:47:b6:3f:78:1c:83:12:ec:4d:d3:21:b5:fa
Fingerprint (sha256): 0d:3f:22:a6:84:21:ae:23:9a:98:65:7d:97:e3:4e:3e:4e:83:22:54:2c:df:e2:ea:2b:fc:a0:19:85:f5:8e:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.1.damoh.aws.brigitte.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.1.damoh.aws.brigitte.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.1.damoh.aws.brigitte.de
ssl.2.damoh.aws.brigitte.de
ssl.3.damoh.aws.brigitte.de

Other certificates including the domain name brigitte.de

(limited to 100 certificates)
mobil.brigitte.de
dev.forum.bym.de
data-a7a0d7a6db.brigitte.de
*.live.aws.pm-magazin.de
*.int.aws.pm-magazin.de
static.stern.de
gutscheine.brigitte.de
*.brigitte.de
static.stern.de
static.stern.de
viversum.brigitte.de
www.guj.digital
aktion.brigitte.de
getsomelorem.com
ssl.1.damoh.aws.brigitte.de
gtms.brigitte.de
*.das-001-prod-eks2.guj.digital
frisuren.brigitte.de
*.brigitte.de
static.stern.de
serviceportal.dpv.de
www.stage.stern.de
vila4amigos.com.br
www.brigitte.de
static.brigitte.de
woman.brigitte.de
secure.brigitte.de
*.stage.mobile-toolkit.guj.digital
academy.brigitte.de
ssl.1.damoh.aws.brigitte.de
www.guj.digital
mobil.brigitte.de
www.stage.stern.de
blog.brigitte.de
secure.brigitte.de
*.live.aws.pm-magazin.de
static.stern.de
ssl.1.damoh.aws.brigitte.de
commsvc.brigitte.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
*.brigitte.de
abo.brigitte.de
static.stern.de
blogs-woman.brigitte.de
commsvc.brigitte.de
static.stern.de
*.aws.pm-magazin.de
blogs-woman.brigitte.de
origin.brigitte.de
www.guj.digital
*.brigitte.de
shopping.brigitte.de
shopfinder.brigitte.de
newsletter.brigitte.de
woman.brigitte.de
*.coremedia-dev.guj.digital
www.guj.digital
bfriends.brigitte.de
frisuren.brigitte.de
www.guj.digital
woman.brigitte.de
bestellen.brigitte.de
brigitte.de
*.das-001-prod-eks2.guj.digital
static.stern.de
static.brigitte.de
www.guj.digital
static.stern.de
static.stern.de
www.hatchers.com.br
*.live.aws.pm-magazin.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
stage.serviceportal.dpv.de
blog.brigitte.de
brigitte.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
academy.brigitte.de
*.brigitte.de
static.stern.de
serviceportal.dpv.de
img1.brigitte.de
static.stern.de
*.pm-magazin.de
*.aws.pm-magazin.de
static.stern.de
static.stern.de
*.stage.aws.pm-magazin.de
static.stern.de
sfbws.guj.de
commsvc.brigitte.de
mobile.brigitte.de
vorteile.brigitte.de

Certificate

The complete raw certificate details for ssl.1.damoh.aws.brigitte.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321468792635443918907445508529061858135468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 09:41:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 09:41:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.1.damoh.aws.brigitte.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672864185069673258522283988032841746376369385705798616920592432648611276754549507450179651646962109972882488490815386174207411535095863750915395273291217975475119317532832851289822586447790046379564337578285635572199764255815579449462139210765745999892903909730365020119710374311420085959945256733515401481164337198260762762447617935848133287703292165609609769495892539600133336119048153311089589078629581982500176885020243592010730165970953688184458878727694757611913378859265068545031977881011651347697327053548561762998135466067088422252214387151635290462304086536794215935368840628593377509576881947300739167890440284735973473699011898632930081995619457481918954891479147229732438950386492542601431905470038364195236685003145023966707599731560808502695656614434063201551523226350122714327004943187771463371568166253848910588267674791911592261863737585755182975624400075012636285169796034073366759713182428194447047036122748269639508510228104159256272775332545234663831007149483424905626024752443084287110674729985690305221072266227805411050964705004730880020317915193984080634305133884231174442677599748388216676694010100518208311613147891210390047795772701424507278810655594022647715443722075477321385283878671403577402039432563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a79fcd77b68f5124b640df9d242b7a374df3ff7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.1.damoh.aws.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.2.damoh.aws.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.3.damoh.aws.brigitte.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec633175700000403004730450221009aa0d671bcd8abbd883744fba8fc0f7d3f9a184e8e5962cd49f9199a52cc579102202c4267687701513867f48a70f38e7f2bb7a791bf741c78c40dd5661fc53ad0b8007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec63317570000040300463044022036b9670e4b5d8e273a64f5993a6de827a9e19510bd40d4c5ed8f25cbecff93df0220651ddd78d65a93279d0ce09cf738b1bec919664ad474789a959ede51b55770d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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