grunerundjahr.com

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number a9:33:da:58:2a:5c:03:cd:07:54:7f:9a:62:01:f7:e6 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grunerundjahr.com

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): a9:33:da:58:2a:5c:03:cd:07:54:7f:9a:62:01:f7:e6
Serial Number (int): 224908766977917565586323787080079112166
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3d:7b:82:c3:e1:87:e5:49:01:24:84:a3:c7:ec:0c:9a:a8:82:4a:28
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 9c:41:53:ca:4c:79:01:e1:e7:7a:6a:36:9b:01:07:5f:ba:26:68:ec
Fingerprint (sha256): 11:cd:8e:fa:7c:1c:10:5c:68:2a:b3:cc:01:43:1e:19:44:20:47:13:83:46:8a:52:90:8e:91:c9:9c:34:b4:0b

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate grunerundjahr.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grunerundjahr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grunerundjahr.com
www.grunerundjahr.com

Other certificates including the domain name grunerundjahr.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for grunerundjahr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh1ciy9HiAYQur4+1PbV
RtaEOsgEjzaBWjLwY/37DAzgeZE4j4522gXQ8it6NOYC6ovR61Nm2lzNBcDNlZcB
cjE4la0oXYj3scIXJUGxye/QJ0Z9usyI+BmfJOl/7Mru+30WDKo6WZ6giMXsKHJZ
+BU0BWsc/c12ntHdC9MfxYTEl9uxLiK41GU9XhnwEoiMPbtJPWCLn2tJA0cOGvhP
QLuSGXcL/ZfD5fYA9SqPxj5MBRxr5JhslXlLHGh4DGS/MXLt7TV84dCtoXZ0cLZE
nYjOPXJRQ4zF8C+f3paljk7RFLrF/02Se7xjMvTghJzWuis9/5aZuxpryHYM1Sxj
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224908766977917565586323787080079112166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grunerundjahr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22484896978640002576397985553562731844939595633292635282722935171851402287420255571635208903120238625308088310850738762485185429789931790579598935773375873527989511390915550598713708898269821664236707359318951519050724809449234085323566545996216660504330377342074152799341678960153477015521633296253474876753227624134579699305731413650000126504256991779660530490803100299045829098531444781375579391276416453542820572104030979207594641462776036994998844231963395166809643152305065554758104946711244666700197354494801050914513459035840124663466430666070592333575939867440794108245124967206861772330543627701243330978749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d7b82c3e187e549012484a3c7ec0c9aa8824a28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186cc68fdd80000040300473045022100ccf75352aa26ef45c9dfd7d7968a6dee978f4bd5741707b1ea48f46f817ac5390220133a893fddf5654cc740bc82fb8c7a222f764dd2e2dd1b9b9a02656a405b7d520076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cc68fe2d0000040300473045022100f1a881440be06d081128bfa3fed5a0f53e8c8b84ec9c040eeef24e3dc8742c9b0220207e9dd11e4de0cd59deda6ec32d8a2d3e03144087cada093a878c4e78735fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerundjahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grunerundjahr.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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