slim.bmwci.co.interone.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:6c:ef:b2:8a:a9:f3:d2:d8:19:f5:fd:3a:72:35:de:f9 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=slim.bmwci.co.interone.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:6c:ef:b2:8a:a9:f3:d2:d8:19:f5:fd:3a:72:35:de:f9
Serial Number (int): 270669282905895032799742759383606890979065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:f4:53:b4:60:10:fe:9e:83:a0:c0:69:d9:85:06:5c:e7:06:63:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:23:b5:e6:2a:68:d2:a1:dd:36:7b:0a:a7:01:de:63:f6:06:9a:55
Fingerprint (sha256): 0d:e7:bc:a4:05:85:ae:9c:27:95:a2:b5:bb:eb:15:51:e0:29:c2:f5:54:08:84:49:be:c7:27:ee:87:11:f4:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate slim.bmwci.co.interone.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slim.bmwci.co.interone.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.bmwci.co.interone.de
nexus.bmwci.co.interone.de
slim.bmwci.co.interone.de
sonar.bmwci.co.interone.de

Other certificates including the domain name interone.de

(limited to 100 certificates)
blog.interone.de
lb.bmw-dealer.co.interone.de
forms.revan.bmw-dealer.co.interone.de
cem.turnosweb.app
*.interone.de
alphera-cms-edit-dev.dc.interone.de
forms.revan.bmw-dealer.co.interone.de
jira.interone.de
forms.revan.bmw-dealer.co.interone.de
www.bmw-briem.de
www.bmw-briem.de
www.bmw-briem.de
querocard.com.br
slim.bmwci.co.interone.de
forms.revan.bmw-dealer.co.interone.de
alphera-cms-edit-dev.dc.interone.de
evoke.digital
app.bandprotocol.com
lange-gmee-live.dc.interone.de
mail.united-it.net
boba.co.interone.de
*.interone.de
lb.bmw-dealer.co.interone.de
imagex-hosting.ml
redirect-letsencrypt1.dealermaster-de.bmw
www.bmw-briem.de
verknappung.co.interone.de
boba.co.interone.de
photogarropy.com
www.bmw-briem.de
piwik.co.interone.de
redirect-letsencrypt1.dealermaster-de.bmw
citrix-ics.interone.de
mail.united-it.net
interone.de
bmw-sm-frontend-live.dc.interone.de
webtrends-sdc.rz.interone.de
redirect-letsencrypt1.dealermaster-de.bmw
forms.revan.bmw-dealer.co.interone.de
forms.revan.bmw-dealer.co.interone.de
*.interone.de
seo.interone.de
www.bmw-briem.de
www.interone.de
slim.bmwci.co.interone.de
boba.co.interone.de
redirect-letsencrypt1.dealermaster-de.bmw
forms.revan.bmw-dealer.co.interone.de
interone.de
git.bmwci.co.interone.de
slim.bmwci.co.interone.de
slim.bmwci.co.interone.de
interone.de
interone.de
piwik.co.interone.de
interone.de
forms.revan.bmw-dealer.co.interone.de
clerks-fe.fazid.gov.interone.de
*.bmwci.co.interone.de
slim.bmwci.co.interone.de
lb.bmw-dealer.co.interone.de
mail.united-it.net
forms.revan.bmw-dealer.co.interone.de
saikatonline.in
alphera-cms-edit-dev.dc.interone.de
www.bmw-briem.de
mail.united-it.net
alphera-cms-edit-dev.dc.interone.de
slim.bmwci.co.interone.de
piwik.co.interone.de
go.interone.de
telefonica.interone.de
seo.interone.de
boba.co.interone.de
www.bmw-briem.de
auftrag.interone.de
seo.interone.de
www.bmw-briem.de
mail.united-it.net
piwik.co.interone.de
forms.tarkin.bmw-dealer.co.interone.de
www.bmw-briem.de
*.bmwci.co.interone.de
bardsyarn.purplemovies.com
www.bmw-briem.de
slim.bmwci.co.interone.de
secure.interone.de
www.bmw-briem.de
git.bmwci.co.interone.de
forms.revan.bmw-dealer.co.interone.de
jira.interone.de
base-fe.fazid.gov.interone.de
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
www.bmw-briem.de
go.interone.de
slim.bmwci.co.interone.de
www.bmw-briem.de
redirect-letsencrypt1.dealermaster-de.bmw
forms.revan.bmw-dealer.co.interone.de

Certificate

The complete raw certificate details for slim.bmwci.co.interone.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270669282905895032799742759383606890979065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 10:13:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 10:13:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slim.bmwci.co.interone.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754086205432771317494610721447956557223369544643834526262050352202693273068222346409141894577423132564031692658347709381716495474086935623605791648200354344446347320777698523337072735271258161759387596696785631044073598879355898407969256011816476307417240165839549411683089447538026930983831482790842479499894580624416885759538936981698404417809598612338284037485321841461991121299435975079114767878553017798030482191870884431629740308403615725339996540066695426971689607221859260165410599474050741922689598438747958772102773734216704576004012652031935868412105427169811900830334134897340310329019763686390777524865883448326380301872519310789119976917793817814173922662531852814524468627064072639768594017300374514095235118457772483193052810676461758032974994790963092505387329156958338875747943397948559839402958656919795864922109191382401742851900277922711051882989748679463054167204580080221630436833014568163899880205918591181246067097011737143794948738391026341546726775524764517451310346797176367375967853678865961310046531510201646026022307990580980396907367149613453141792454261648381258794549205200053683250705167749021857711891904973924172385164890298125905791068963811447938774784460833772367882320437399829160940124955619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4f453b46010fe9e83a0c069d985065ce7066334
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.bmwci.co.interone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.bmwci.co.interone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slim.bmwci.co.interone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonar.bmwci.co.interone.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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