boersen.manager-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:8e:95:8a:b2:7d:5d:eb:38:99:4c:c6:5a:8b:58:83:db:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=boersen.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:95:8a:b2:7d:5d:eb:38:99:4c:c6:5a:8b:58:83:db:2a
Serial Number (int): 396968014958354174904611976009692618152746
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:a5:75:02:ec:2f:2b:fc:7c:15:29:ef:2f:4a:cc:a7:b9:89:7d:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:07:b9:43:4a:7f:c0:a3:ef:e2:6e:ed:d1:07:55:df:8a:be:dd:60
Fingerprint (sha256): 0e:c7:e8:8c:c8:3d:5b:d1:7b:f9:43:56:52:00:84:a0:89:50:03:af:a4:23:52:be:a4:9d:83:93:c5:a6:07:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate boersen.manager-magazin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boersen.manager-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boersen.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for boersen.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396968014958354174904611976009692618152746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:41:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boersen.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749244137756117049457014091047036139412130479433338559826914779584101759040489458997850706890773841699196696817391739313749649932299983494538987388349284000211815317271566590830009130726137378707036307574221133757796626454540917366560782630027083566620140888125216860282295861993297948470684939419869553579505420575496563262526285206150993846102672485255403193762875371937013871678935576645285408629546445329420567607349988661629036792331438890496632531195492681559667478232366971793292792648184892110006134111537878314507418457002340769289728812717824893466885913283246292748353777954434596660129747144118329098955076377328607917765937918563540415271966968337965678247169029279849559302662202999960252851018906787193723720518171238099383429168667293080806952509195231471809454524435720444980355539532639806102034966902275163465361272085691629760965321279159274501846699758636410849146001003684746740712193338001445779082224308251655571552530301404545636757164517795232254804652499145606085798311017865823568031599159743624547569381087334379806685372705178620684198450979469684486011746557886629115168846633901058542675287342103654365977111588756529211753102134046250958828704458053001394639532909509731759780851454099179161706982031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3a57502ec2f2bfc7c1529ef2f4acca7b9897d20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersen.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b1c6519ee00000403004730450221009ae4638bc68f68ae33b0dd49333f273148e92eb0b7bb7d439b592e70bc99882b0220027dbfb0af7be12ececfe38d5d5e43b14caffccb906c4e3d9dc2ce6b79d7d092007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b1c6519e00000040300473045022100c223616e802e52d6cff9fcdce3f614effa8b192caca1350d19b7674a53c80269022036fef0e225a5b682b3ea9dea9869a9c8c791133040b1fb33b28c32a2e4e5e57a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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