kueche-co.marcapo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0a:c8:74:f4:69:75:ce:b3:b3:d6:b3:1e:94:3b:49:96:06 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kueche-co.marcapo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:c8:74:f4:69:75:ce:b3:b3:d6:b3:1e:94:3b:49:96:06
Serial Number (int): 352118420259106304424209330276808255968774
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 79:94:ad:1a:44:ef:16:74:db:d7:40:cb:04:17:b7:5e:9c:a2:3f:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:7b:e9:3e:fe:92:8b:70:34:47:e0:ca:e8:47:8d:5f:96:b5:5e:bd
Fingerprint (sha256): 18:33:2f:67:e7:3d:0c:12:7d:b1:e1:60:a6:aa:85:41:7f:b8:37:99:53:37:5a:eb:1e:f8:2b:a4:a4:69:b2:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kueche-co.marcapo.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kueche-co.marcapo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kueche-co.marcapo.com
mediashop.kueche-co.de
mediashop.kuecheco.at

Other certificates including the domain name marcapo.com

(limited to 100 certificates)
bgv.marcapo.com
showroom.marcapo.com
hansgrohe.marcapo.com
api.cdn.marcapo.com
lbeg.marcapo.com
atr2.marcapo.com
itzehoer.marcapo.com
mail.marcapo.com
default.marcapo.com
berater-hdi.marcapo.com
files.marcapo.com
bca.marcapo.com
osterpaare.marcapo.com
www.marcapo.com
luebbe.marcapo.com
bayerische.marcapo.com
evo.marcapo.com
manager.marcapo.com
default.marcapo.com
content.marcapo.com
aktionsportal.marcapo.com
sdl.app.marcapo.com
inspector.marcapo.com
async.marcapo.com
goodyear.marcapo.com
aktionsportal.marcapo.com
ergo.marcapo.com
handwerk.marcapo.com
osterpaare.marcapo.com
www.marcapo.com
evo.marcapo.com
friadent.marcapo.com
csp.marcapo.com
sonepar.marcapo.com
admin.marcapo.com
bayerische.marcapo.com
ofa2.marcapo.com
www.marcapo.com
marcapo.com
wintec.marcapo.com
wintec.marcapo.com
evo.marcapo.com
pluggit.marcapo.com
bgv.marcapo.com
hansa.marcapo.com
rocketchat.marcapo.com
luebbe.marcapo.com
lbeg.marcapo.com
wella.marcapo.com
vup.marcapo.com
admin.marcapo.com
inspector.marcapo.com
berater-hdi.marcapo.com
luebbe.marcapo.com
goodyear.marcapo.com
globaloffice.marcapo.com
ergo.marcapo.com
default.marcapo.com
wiki.marcapo.com
async.marcapo.com
rheinland.marcapo.com
sdl.app.marcapo.com
hansa.marcapo.com
provinzial.marcapo.com
londa.marcapo.com
sdl.app.marcapo.com
wintec.marcapo.com
wuestenrot.marcapo.com
admin.marcapo.com
grundfos.marcapo.com
pluggit.marcapo.com
sdl.app.marcapo.com
honda.marcapo.com
e-masters.marcapo.com
joka.marcapo.com
admin.marcapo.com
vup.marcapo.com
git.marcapo.com
terminal-extern.marcapo.com
wuestenrot.marcapo.com
git.marcapo.com
www.marcapo.com
aktionsportal.marcapo.com
aktionsportal.marcapo.com
admin.marcapo.com
projects-upgrade.marcapo.com
nextcloud.marcapo.com
rheinland.marcapo.com
bca.marcapo.com
kueche-co.marcapo.com
inspector.marcapo.com
blog.marcapo.com
ergo.marcapo.com
landingpage.marcapo.com
osterpaare.marcapo.com
provinzial.marcapo.com
huk.marcapo.com
londa.marcapo.com
sdl-int.app.marcapo.com
itzehoer.marcapo.com

Certificate

The complete raw certificate details for kueche-co.marcapo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352118420259106304424209330276808255968774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 09:38:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-28 09:38:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kueche-co.marcapo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783521323840273643230430144881448634382951169323551903421554870604483914783575462829550386166281815379520792161874275691839856056241072127401302103973469000765749616335667646728609479851999341868181869748747089778303678864319781187781329466606624159452039576557256042272894926567338329475633302846486291075908063241161675327047924414022576148533273246041957361347512697952866746013083359923916421047218214773981443544130828386437976623868665359908934195214803417532342291065117179932410929929890893676853707408179029842308768605672943331650609151995644490620922946053457723671249638817563635117495427111939239046442142963919495202384725601005687470515064185588400811575231604980106399145473371551052277040151768818891786261669871599200389980936361650675991115398849849116377357437867944623616854953700121448070584736624056356846876553921653103605297676969027947893581593977414137134850529099085516740081382948303719690720669119802807939887185324538567230115551371167753846064624350422845912248897962718258652573899960633354285550016009947068106569090247253052313301806785353611535270773865170590133988802273357661538463524165875780226439946026830971950723376517702832971395517078392476514665221731239159969998747148177914417545749781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7994ad1a44ef1674dbd740cb0417b75e9ca23f2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kueche-co.marcapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediashop.kueche-co.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediashop.kuecheco.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017748930e180000040300463044022018de14873ca0eb48a0af9549b833a00339c8870c7901a9c81767058eb43d262002204a6a582e440647affebe58263a468ee97669be32101ade4c3840784d527217ea0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017748930e4c00000403004730450221009007560e43833b6c849323987314f52b0ef1e7d2fbdcf8821e2f61b103a092e902206e86dcbcde217e7ca108b43d96f100ea37f3b46feacd2bbe33c9f8a45d3173e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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