marketplace.axelspringer.de

Issued by R3

About this certificate

This digital certificate with serial number 04:65:c3:ba:ef:ed:2f:98:a4:7a:fb:d2:77:22:25:95:a4:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marketplace.axelspringer.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:c3:ba:ef:ed:2f:98:a4:7a:fb:d2:77:22:25:95:a4:43
Serial Number (int): 383077832878737217587004398049190286304323
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:16:c6:8f:15:2f:91:46:d7:e1:50:a7:df:6e:8c:f9:97:b0:80:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:f3:d1:22:e7:2a:69:16:65:6c:7b:61:fc:9c:0e:2d:7b:f3:7e:70
Fingerprint (sha256): 19:5f:ed:70:06:4c:93:a4:ff:ba:33:4a:7d:a7:98:64:23:ea:d0:7d:29:99:3e:44:0c:b2:35:1a:3b:16:fc:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marketplace.axelspringer.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marketplace.axelspringer.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketplace.axelspringer.de

Other certificates including the domain name axelspringer.de

(limited to 100 certificates)
mypersonal.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
career.axelspringer.de
ideationcouncil.axelspringer.de
*.prod.ps.bild.de
axelspringer.de
klick.regionalvermarktung.axelspringer.de
*.prod.ps.axelspringer.de
marketplace.axelspringer.de
nachhaltigkeit.axelspringer.de
go.axelspringer.de
go.axelspringer.de
efa.axelspringer.de
axelspringer.de
www.axelspringer.de
*.prod.ps.axelspringer.de
mail.oculus.axelspringer.de
*.prod.ps.axelspringer.de
nachhaltigkeit.axelspringer.de
axelspringer.de
fs.axelspringer.de
contracttool.axelspringer.de
www.axelspringer.de
lyncdiscover.axelspringer.de
*.prod.ps.axelspringer.de
www.axelspringer.de
regio360.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
earlybird.axelspringer.de
*.prod.ps.axelspringer.de
www.ideationcouncil.axelspringer.de
somaetbws.axelspringer.de
karriere.axelspringer.de
remote.axelspringer.de
contracttool.axelspringer.de
*.prod.ps.bild.de
klick.regionalvermarktung.axelspringer.de
axelspringer.de
*.api.ps.bild.de
go.axelspringer.de
rich-media.axelspringer.de
digas-review.axelspringer.de
axelspringer.de
axelspringer.de
axelspringer.de
*.services.ps.axelspringer.de
motiveingang.axelspringer.de
teams.axelspringer.de
campus.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de
axelspringer.de
link.abonnement.axelspringer.de
*.axelspringer.de
motiveingang.axelspringer.de
career.axelspringer.de
mib2.axelspringer.de
mypersonal.axelspringer.de
transfer.axelspringer.de
marketplace.axelspringer.de
*.auth.axelspringer.de
*.prod.ps.bild.de
go.axelspringer.de
nachhaltigkeit.axelspringer.de
ascs-ww.axelspringer.de
regio.axelspringer.de
upload.zs.axelspringer.de
secure.axelspringer.de
sirius.regionalvermarktung.axelspringer.de
ideationcouncil.axelspringer.de
marketplace.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
somaetbws.axelspringer.de
*.services.ps.bild.de
*.axelspringer.de
motiveingang.axelspringer.de
aboservice.audiovideofotobild.de
*.axelspringer.de
kundenservice.auth.axelspringer.de
mediaportal.axelspringer.de
teams.axelspringer.de
gutscheine.axelspringer.de
aboservice.audiovideofotobild.de
axelspringer.de
*.prod.ps.axelspringer.de
go.axelspringer.de
*.prod.ps.spring-media.de
miu5.axelspringer.de
teams.axelspringer.de
*.services.ps.bild.de
axelspringer.de
*.prod.ps.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de

Certificate

The complete raw certificate details for marketplace.axelspringer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383077832878737217587004398049190286304323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 13:05:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 13:05:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketplace.axelspringer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3578744056642984732227919700589648150950677989697559227888194873136478732923158777377359279384269218893029945515088271474503640777394442737912444538384106693386990985407173426159076163985639864589019236838612763624012849107676268679381854112229584000880652079714837194370868992326294758326098420683081784247934806041065307711358539132943350755038908856705160788725186824601301392321932508186763269676873191193923458314673690580582798657693233372947980878659394797445724777829305364715867681562506163169211166222481510573241354676373570647512603944263223277984270730254671678796957924845603761146859076953038744793951096282300346647842708780718024735779772268321164700651311006112853299744774074794260986358675924595493641517505126780656985111056955231500686534371456721525846248842416127290187352525258247161913692231540957751223518602340300309707639890382633106587203231884282826624943963897135051379046935651287970057873227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb16c68f152f9146d7e150a7df6e8cf997b08036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.axelspringer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e1ef078f0000040300463044022027fb972999ffa3b44846e18392579eb5042cea1e3d8eab01413dda24f2b88bcb022042a8eee81320b1b28513e6bda90989a0f24c1b3a7f126ef6f822dd91cb6be6ff007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e1ef079a0000040300463044022029ed812eae4a195af0ff9818054e7d709b3021ca9885566b5fb162beddaa2e23022076dc1f6a2b2032d861b4af7429e3e51030a9edbea095dc17b79f9f1a3afe3029
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ca7a3ebcee42cdfe074691b19c54f7aa9e9f1f40b4bfa6bcde353494a5287058434e1989dd0ba1fce523d3bc2c1347b149b802509053749d46c92aef9c9846501ce1fd2cfbf64f6c810fe50ec0a77e482b608bca34af63186965f231b1b0a71b1f8d51ca797df672f52908e4192e7671bcc766ac6b86c876ca5597edd43a7cc8a8b0d2f8bf8a72dd4836d0a7db11024057eb472871287ce1c1956781469180520346ddb435cad000e541f700c540735ae745d5a43d6b9b4cf1316fe61c42e4ebf3a479b2d14f26808fca12fc50608e2294738778445b789d7252dfe5d2e5f6009fbba39921e9ec900ee1269a7f2a732a9d7a32ce5491d5996cc77747342c8da