springernature.com

Issued by R3

About this certificate

This digital certificate with serial number 03:61:48:67:2a:9c:63:32:b5:fa:16:f9:0f:35:62:ac:30:a7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=springernature.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:48:67:2a:9c:63:32:b5:fa:16:f9:0f:35:62:ac:30:a7
Serial Number (int): 294440487473136210953134211330474666373287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:03:88:9c:9c:01:c2:ff:7a:67:69:ed:8b:58:6e:1a:20:50:be:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:50:24:05:ed:7c:4c:58:fc:c6:e3:5f:ec:52:8e:26:a3:51:52:2b
Fingerprint (sha256): 14:a0:02:a4:12:b4:63:50:25:43:66:3c:4e:f3:5b:ee:cd:52:e6:0c:a7:a6:a5:7c:04:c3:f1:89:1c:53:41:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate springernature.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for springernature.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.springernature.com
springernature.com

Other certificates including the domain name springernature.com

(limited to 100 certificates)
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
www.highq.com
auth.springernature.com
springer2.map.fastly.net
*.springernature.com
springer3.map.fastly.net
springer2.map.fastly.net
more-media.springernature.com
sn-prod-simac-alarm-01.springernature.com
support.khipu-networks.com
idtest.springernature.com
vanity4.jiveon.com
springer2.map.fastly.net
*.springer.com
authorservices.springernature.com
vpn-africa.springernature.com
adportal.springernature.com
sustainabilitycommunity.springernature.com
dns-vetting1i.map.fastly.net
uim.springernature.com
protocolsmethods.springernature.com
liferay-dev.springernature.com
scim-1password.springernature.com
uxresearch.springernature.com
vanity4.jiveon.com
bflux-stage-es-02.springernature.com
mee-uat.springernature.com
springer2.map.fastly.net
*.springernature.com
communities.springernature.com
shopify-qa.springernature.com
springer2.map.fastly.net
images.passendo.com
*.chef.tools.cm.springernature.com
springer2.map.fastly.net
dev.springernature.com
springer2.map.fastly.net
staging-scigraph.springernature.com
dns-vetting1i.map.fastly.net
vpn-aus.springernature.com
grandchallenges.springernature.com
springer2.map.fastly.net
vanity4.jiveon.com
vpn-gcp.springernature.com
authorservices.springernature.com
support.khipu-networks.com
support.springernature.com
secureimap.springernature.com
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
authorservices.springernature.com
vpn-ro.springernature.com
springer2.map.fastly.net
*.jiveon.com
staging.moody.springernature.com
authorservices.springernature.com
integration-sn-insights.springernature.com
images.passendo.com
springernature.com
www.highq.com
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
www.highq.com
vpn-ro.springernature.com
dns-vetting1i.map.fastly.net
trust.springernature.com
images.passendo.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
springer2.map.fastly.net
api.more-media.springernature.com
www.highq.com
securesmtp.springernature.com
nature-ww.springernature.com
*.springer.com
protocolsmethods.springernature.com
vpn.springernature.com
vpn.springernature.com
springer2.map.fastly.net
authorservices.springernature.com
springer2.map.fastly.net
images.passendo.com
*.springer.com
springer2.map.fastly.net
www.highq.com
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
hub.springernature.com
springer2.map.fastly.net
researchdata.springernature.com
dns-vetting1i.map.fastly.net
delivery.staging-cms.springernature.com
dev.springernature.com
dns-vetting1i.map.fastly.net
springer3.map.fastly.net
dns-vetting1i.map.fastly.net
springer2.map.fastly.net
springer2.map.fastly.net

Certificate

The complete raw certificate details for springernature.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294440487473136210953134211330474666373287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 09:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 09:09:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'springernature.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740793413867339720505013404237399553674900591096304933021133998206633510864532475682221553925815858833910296334173012196444748041419557231515064292841542407580199661869248306276170083049594753590420014212162857418499972693431881431934335029160885239504479560985789081643278946186116459284791502810807194030673420314913875791991284422951846248545206293874286116345405608316081479765985604558628680402725473203193222285364350189212199550235380779174669305438021173714480915271481161544802127726453416733177654894689442436371356669435634556632685548040510120553380213702578447331156360712203936202156273481819111624812516336604599256777407492725627374132095878110980900972358210921356730779254155380187884474782571900146466133327083503861372054874760686089805424351268586150170782122185369712097062081718768160981347938115927799722762466439929102399775962724645339082295191560308052144242549594938365317596279675588141937052668183968268317478420101963268608667614175522819415203149246357488055803560207205287534098256495212895033371513623398662514138000217537003568421352967772256712321668349988311473840188956851790453638870057130922088734477225714339635368582242996099203326302202088247880575128401339372937924754825062907588161838753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c103889c9c01c2ff7a6769ed8b586e1a2050be7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springernature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springernature.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001869259a6d90000040300473045022100d6e874a3e49321430deac287d19179c1a7041d2bd842d67e490dd8edbce578f902203c8a9af0037e01ecbe23db85058529632d44abc0b580a4ac410ca17cf77f471e0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001869259a6ea000004030046304402206ea722dce16d3fd6681556f4be1b64f4206ecb91c8ef72902a2cd29d97d282e702204fba14c24384a443c36886354d4c2e1aca8d80fd3e71c6ce84ce391c0be2f850
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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