amp.macwelt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:9a:43:05:29:5f:1a:d0:00:60:9a:f6:d3:8c:6a:bb:60 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amp.macwelt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:9a:43:05:29:5f:1a:d0:00:60:9a:f6:d3:8c:6a:bb:60
Serial Number (int): 279917154708941652016378942446858368891744
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:f2:6f:48:2f:e8:43:52:a0:66:d7:50:93:51:71:ef:80:54:44:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:f2:12:55:0e:e0:48:e8:80:8c:57:b1:3c:8f:23:06:0a:84:85:d9
Fingerprint (sha256): 0e:42:b0:a6:5d:61:da:8f:24:b9:43:53:fc:ac:33:7b:8f:9e:d7:c1:b3:f0:00:74:26:3b:0d:a5:6e:90:2d:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate amp.macwelt.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amp.macwelt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amp.macwelt.de
fbia.macwelt.de
fia.macwelt.de

Other certificates including the domain name macwelt.de

(limited to 100 certificates)
cmp.channelpartner.de
magazin.macwelt.de
whitepaper.computerwoche.de
consent.planetradio.co.uk
*.macwelt.de
addefend.idg.zone
images.macwelt.de
*.macwelt.de
whitepaper.cio.de
mobil.pcwelt.de
amp.macwelt.de
images.macwelt.de
beta.computerwoche.de
*.macwelt.de
beta.computerwoche.de
api.pcwelt.de
amp.pcwelt.de
download.macwelt.de
mms.sp-prod.net
cmp.channelpartner.de
dg-0051-aa2de51.client-tls.adestra.com
macwelt.de
cmp2.channelpartner.de
mobil.pcwelt.de
magazin.macwelt.de
*.macwelt.de
dg-0051-aa2de51.client-tls.adestra.com
beta.computerwoche.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
magazin.macwelt.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
images.idg.zone
images.idg.zone
magazin.macwelt.de
beta.computerwoche.de
fia.pcwelt.de
magazin.macwelt.de
cmp2.channelpartner.de
beta.computerwoche.de
images.idg.zone
macwelt.de
macwelt.de
whitepaper.computerwoche.de
macwelt.de
amp.macwelt.de
cmp2.channelpartner.de
cmp.idg.tv
techrps.idg.zone
cmp.academics.at
cmp.academics.at
cmp2.channelpartner.de
cmp.academics.at
amp.pcwelt.de
macwelt.de
images.macwelt.de
images.macwelt.de
cmp.academics.at
images.idg.zone
macwelt.de
apps.macwelt.de
cmp.academics.at
beta.computerwoche.de
newsletter.pcwelt.de
images.idg.zone
shop.computerwoche.de
macwelt.de
magazin.macwelt.de
magazin.macwelt.de
cmp.idg.de
mms.sp-prod.net
amp.macwelt.de
cmp.idg.tv
macwelt.de
amp.pcwelt.de
whitepaper.computerwoche.de
macwelt.de
apps.macwelt.de
amp.pcwelt.de
cmp.academics.at
addefend.idg.zone
dg-0051-aa2de51.client-tls.adestra.com
whitepaper.cio.de
magazin.macwelt.de
mobil.macwelt.de
newsletter.pcwelt.de
whitepaper.cio.de
cmp2.channelpartner.de
api.pcwelt.de
techrps.idg.zone
*.macwelt.de
amp.macwelt.de
fia.pcwelt.de
techrps.idg.zone
macwelt.de
images.idg.zone
macwelt.de

Certificate

The complete raw certificate details for amp.macwelt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279917154708941652016378942446858368891744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 03:06:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 03:06:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amp.macwelt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741099973372489535644115484146093161144682917158966532268372289156578593871438992435629462043605207874195129210449752281555347472206055054333152171735227858864489732443970610283387905060002270565360716836216423216862040682619378820080708738426940941636164984182042167099410566149672887413789689238346043652613310526975528970429743286794022033358633353703209909939472804857670633215087920876329586494784635791305650126528071174418346954247466565765840199522133569404344219723795183585412552121877443414881372756784783321101017242891965911247429159401144252735167330331665982324515251704217981741455638493650848090278428572694814196463730709864453634677268017007551013868521664540799542398906092944671295632535867455700863339091706433839340090012269671933520573157866775641174675001210346374300331301853471035015836500436424707127271378407245174419950387100318587557974464795878472232083540214936071307241961644748596305571236203166752402886526993786656481808081904170549079776129183283113997910372749357953307939420673429223444812224533436507814065053028864221141208586853044511128138436501161210406600488687904951926205026596060929469411356660368959955048345159259938204448513521492048810018818820486365330270600745657150225335738699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9f26f482fe84352a066d750935171ef8054444f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbia.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.macwelt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164ab916f63000004030047304502203da793bdb64b47247c21cee9ecd101a6a769aca0ef3bd7da1c4d6f163042b270022100b3293087b266c9e3d5cbfaf630e36dc1f8e0af2e372a1e7a05150ee9be94636e0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164ab9172980000040300483046022100ed5dc08c219e480530bd781e9547dfd94227483352338ba7933001892a16b76d0221009a0d70679f18db6e88632241fe3fc63fef1b5285d048fc64681f7ec68872111a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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