nannen-preis.de

Issued by R3

About this certificate

This digital certificate with serial number 03:09:8b:a4:8f:09:ad:7d:0f:d7:a8:e9:8e:70:73:4c:de:ef was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nannen-preis.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:09:8b:a4:8f:09:ad:7d:0f:d7:a8:e9:8e:70:73:4c:de:ef
Serial Number (int): 264585016226819408011164290980569714319087
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:b4:d4:f2:1a:ee:9c:d4:42:3a:0e:d2:df:33:23:4c:39:84:a9:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:e2:e5:eb:4b:2d:88:65:9e:cd:e5:c2:80:c6:b2:95:c5:7b:97:d5
Fingerprint (sha256): 10:f7:38:29:5a:3e:b0:9a:b3:74:bb:88:25:03:dc:ae:59:92:bd:a6:d1:49:5a:e0:5d:2c:c3:cd:ff:37:b8:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nannen-preis.de

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nannen-preis.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitmanager-media.de
bitmanager.de
gruner-jahr.de
gruner-und-jahr.de
grunerjahr.de
mechabuilders.de
nannen-preis.de
nannenpreis.de
www.bitmanager-media.de
www.bitmanager.de
www.gruner-jahr.de
www.gruner-und-jahr.de
www.grunerjahr.de
www.mechabuilders.de
www.nannen-preis.de
www.nannenpreis.de

Other certificates including the domain name nannen-preis.de

(limited to 100 certificates)
geo-wissen.de
nannen-preis.de
henrinannenpreis.com
anmeldung.nannen-preis.de
content-finder.de
grunerundjahr.net
guido-magazin.de
nannen-preis.de
view-magazin.de
guj.com
ideat-germany.de
grunerundjahr.com
geoshop.de
kinakoni.com
geo-kompakt.de
impfen-gegen-corona.eu
geo-kompakt.de
nannen-preis.de
maennlichevornamen.de
elterngrusskarten.de
geo-circlefy.com
geo-saison.de
brigitte-mom.de
nannen-preis.de
vornamen-forum.de
nannen-preis.de
www.nannen-preis.de
geocirclefy.de
geo-special.de
www.nannen-preis.de
henri-nannen-preis.com
fuerjedentag.com
nannen-preis.de
nannen-preis.de
grunerundjahr.org

Certificate

The complete raw certificate details for nannen-preis.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZSweNKhdiBmwc9ECEZq
4oc4NWdaVf33M2GTYyJ7naNCdOGwzEOfqzJ1o7TxgUOuwyMDTjDiL8lYCh7cQLtM
D8BUylPYZNXYpF1TZCo5ODsNNMs5ezc3PZRkv3PO+ssixkIbWxufsUxvAIrGJY3e
mBQnv+dab0t8e2XK3ozZnpKmIQ/MjowA5OALgrBs4sZXqui+qhZO6wh2uJkpB3y2
o72qrZAkZSYQSoQk57DU7y/inndoHn1Kllj6mGvHtuSMC1gnB+CCMJeX3t+HdYqU
Z+ETTCiU3VZTdFLMzJU3khMRvZaMJeYJ6vLEn/IKjoeDWGpkfVAhEuvs0v8nXD8G
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264585016226819408011164290980569714319087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 03:33:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 03:33:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nannen-preis.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22417501427053893124547276974851314398041052279253816426863157284204143884112101726504152754128435926135483438466222363429043698111187450719313380239996642667442749990574832862351865824317876587092582070908817045600310603006123477905946736308675590091899378186352674401330671951326097727093931105388783479154098517405245440630374217332017464420991440412785963511685141375589046255647121724340690280476257399918892573401046032979166725813560482640602609962960880319438146580079313829290650887021200784122569832061767595625173458258372463086857327380447574373412933677852647359681892980374373457488690106423971866937031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09b4d4f21aee9cd4423a0ed2df33234c3984a951
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannenpreis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d86fe065a000004030047304502207e4e9695001439d14dc2e8a6357e0911e42e11b2f0c7b0de135425eba299a2c3022100830d591e505fcc4afc3fe43c3e79c361e72d90fe2bc50892fbb772425d4d94b4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d86fe065e0000040300473045022053bcf6d989737ae9101a36fa254587b9fbe56f21d5b3bace0027367606d55f60022100c1ac36b6ea958b19e5c60860dbc0d1bd867e8113bc02ba638991e619e8b6c16d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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