branded-story.chip.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f7:32:01:87:51:90:8c:94:19:74:18:e0:3a:72:5d:e4:a2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=branded-story.chip.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:32:01:87:51:90:8c:94:19:74:18:e0:3a:72:5d:e4:a2
Serial Number (int): 432565357693186404837461656994624256730274
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:73:b9:32:4b:39:dc:58:56:b5:84:08:33:2d:c9:bf:3a:5f:5d:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:8d:12:51:3f:30:ab:49:62:05:a6:ec:d9:a4:32:20:d2:18:83:b8
Fingerprint (sha256): 0d:95:cf:e1:a1:23:9e:44:6c:02:a5:bf:40:08:41:3d:b8:74:fd:8e:14:65:b2:76:16:ee:78:1d:13:98:2f:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate branded-story.chip.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for branded-story.chip.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

branded-story.chip.de

Other certificates including the domain name chip.de

(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de

Certificate

The complete raw certificate details for branded-story.chip.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432565357693186404837461656994624256730274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 12:31:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 12:31:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'branded-story.chip.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873097782428271458875737812472418004059982077961101532801910618246717495452829685275078361371774774871325833619516567915677640325305334078238086923206581709623888567408813275712484836229808423775442063116240232171888344076874215723878782625572393610747076801296396453303202400190666746660811419999924415483885683156144599114223098672407090684444225518655208787522598557132000797447235966507794384548629157834027647457533328663438510867666193512150793067356616310273668768961405709069403081353832085145696100815167276895525984757416553850083163024386572120215863898220314731045715784796211052486304281281877776727345512971712321627950833276333325208539656721496932580576329659364425035220227594274306024450090122645560874770388286923495493593911011528669137219963133092168272877033795843441868545045623907407404992950716637373120012362792779989061997102701007639885382035967826669187867546687264585652761116727254586681992101421881768585403757145318769787435847978199116123845464391159500075693398379321106634014943779327031484238594755566531168273563592538742073664593954275034322771560195034980687893388485353624656945726304755570511618072596342255114635414455376056907958911858398034783502823341197536374503789181401806590795536263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8773b9324b39dc5856b58408332dc9bf3a5f5d2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branded-story.chip.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a2b7f0f880000040300463044022071a551fa021e36d7de34e96f941f5be46b7f42c1040a175789933266f028551402201d9048b158c0eb1bd6cbdecef6f434f9cc3df9202b77a2cc7292bd283fd883f6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2b7f11430000040300483046022100c78c226cb9c252b38c2f2fa4ae1e82964fe2de87a9978d9bf31af023ef7dfb6802210091b0a0c1f0e38fc23d0237da6e7b269286099515eddfd288388ee232edd21bad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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