elvis-qs.spiegel.de

Issued by COMODO SHA-2 Pro Series Secure Server CA

About this certificate

This digital certificate with serial number b5:7f:54:c0:0f:0e:95:73:75:b4:89:b9:8f:ec:0e:b1 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elvis-qs.spiegel.de,OU=Domain Control Validated+OU=COMODO AMT SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b5:7f:54:c0:0f:0e:95:73:75:b4:89:b9:8f:ec:0e:b1
Serial Number (int): 241251407876977511454738732795474742961
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9e:04:39:5f:2f:a4:1a:e6:79:8e:d7:39:7c:de:06:0e:a1:16:40:0e
AuthorityKeyId: 80:b6:2b:0d:40:0a:0f:df:3f:a4:bf:bf:03:f4:b1:76:6b:d5:e7:8f

Fingerprint (sha1): ea:82:cf:cc:ce:f5:e4:6c:35:51:7f:af:ba:6b:41:b1:6a:7c:09:31
Fingerprint (sha256): 1b:16:99:ee:dd:c2:7e:95:cd:dd:9e:fa:22:c6:bf:44:67:39:61:10:27:84:77:dd:2e:5d:e5:ed:72:ad:8e:4e

Issuing Certificate URL: http://crt.comodoca.com/COMODOSHA-2ProSeriesSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOSHA-2ProSeriesSecureServerCA.crl

Check the revocation status for certificate elvis-qs.spiegel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elvis-qs.spiegel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elvis-qs.spiegel.de
www.elvis-qs.spiegel.de

Other certificates including the domain name spiegel.de

(limited to 100 certificates)
jira.spiegel.de
service.spiegel.de
pushmanagement-ui.review.nextgen-services.spiegel.de
staging.sportwetten.spiegel.de
tippspiel.spiegel.de
gutscheine.spiegel.de
ssl.1.damoh.spiegel.de
digas.spiegel.de
amazonproductprovider.qs.nextgen-services.spiegel.de
shop.spiegel.de
imode.spiegel.de
review.assets.spiegel.de
newsletterversand.spiegel.de
vcdn02.spiegel.de
sftp.spiegel.de
qs.spiegel.de
vcdn1-secure.hls.spiegel.de
advent.spiegel.de
digasred.spiegel.de
SPIEGEL-Verlag Rudolf Augstein GmbH & Co KG
video-secure.spiegel.de
apiegel.de
cdnstatic.secure.spiegel.de
gcp.qs.www.spiegel.de
akademie.spiegel.de
cms.review.www.spiegel.de
arztsuche.spiegel.de
vcdn01.spiegel.de
einestages.spiegel.de
magazin.spiegel.de
eurojackpot.spiegel.de
derspiegel.eu
arztsuche.spiegel.de
m.spiegel.de
derspiegel.eu
gcp.dev.www.spiegel.de
advent.spiegel.de
www.spiegel.de
akamai-san8.exacttarget.com
newsletterversand2.spiegel.de
bento.app
fa.review.wisl.spiegel.de
gcp.prod.www.spiegel.de
tracker.it.spiegel.de
www.stepstone.de
m.spiegel.de
click.angebote.spiegel.de
einsurance.spiegel.de
cloud.angebote.spiegel.de
sams.spiegel.de
aubapi.spiegel.de
arztsuche.spiegel.de
review.www.spiegel.de
review.journalsuite.spiegel.de
service.spiegel.de
contentgarden.spiegel.de
static.gruppenkonto.spiegel.de
www.weltski.de
review.journalsuite.spiegel.de
bento.app
cdn.secure.spiegel.de
cdn.secure.spiegel.de
www.weltski.de
bento.app

sportwetten.spiegel.de
click.angebote.spiegel.de
dev.www.spiegel.de
digas-review.axelspringer.de
m.eurojackpot.spiegel.de
prod.warden.spiegel.de
service.spiegel.de
view.angebote.spiegel.de
kopfsache.spiegel.de
www.weltski.de
ivwbox.spiegel.de
www.stepstone.de
aubapi.spiegel.de
contentstation-qs.spiegel.de
microshop.spiegel.de
gluecksspirale.spiegel.de
streaming.hls.spiegel.de
dev.fanexperts.spiegel.de
dev.talk.spiegel.de
sportwetten.spiegel.de
lotto.spiegel.de
microshop.spiegel.de
spiele.spiegel.de
staging.sportwetten.spiegel.de
elvis-qs.spiegel.de
vpn.spiegel.de
eurojackpot.spiegel.de
dev.www.spiegel.de
cdnsource.review.www.spiegel.de
osp.spiegel.de
spiegel-de.spiegel.de
static.gruppenkonto.spiegel.de
sats.spiegel.de
grafana.review.cm.spiegel.de
magazin.spiegel.de

Certificate

The complete raw certificate details for elvis-qs.spiegel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hOU90+kwadndC8uZ6D4
gsqecUei8SvZSbqa3jcZYsBhch1BhaNsDUU999s11PezQqaBqJn+zOiG8Xi7vH1T
dCAUzl4GBGtuDo0OxcyJAjnbV6kVRwjpPAiXXxquz40iXcCKY7YF9J2PmvwzI6OY
eC0WBe+wlxd2JGZD9OSZh6Cpi10zUlbEvGiFFGoOTrCov5NQ91xWdMEl6d0Ku1VE
02/Fpfy8kNdF9m9OIsPVmaFSlpjd6spvTnpk/l9tHiL1GLoJ45bxFSdKn4O3NMLZ
SFO3dseq8LK8WQ7yReM3xffCXwVovIFRdcNoVmZnIKKq4RzwwX+ukTPdLJZHDFnQ
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 241251407876977511454738732795474742961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SHA-2 Pro Series Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO AMT SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elvis-qs.spiegel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30054372776046439165979325416071344938047724131396240016847639264032534730262694734263794421688057218063781676708644912247268284255210209314772782204406603188191409069712850964229099755844281441498243016064012703881746519692063714228547469661542290442983036027942230311735527803603728421110252065046371335533086035610053753540774918565964987386017241727745812712493318882521256801023753987795326278838255142210219536087050171112184896877468670271721801600573263238939059232650905041496994790580128280991492528438267245788221909905879382043268319635062872069135326920410524167618900482370319467518296093326713361649759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 80b62b0d400a0fdf3fa4bfbf03f4b1766bd5e78f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e04395f2fa41ae6798ed7397cde060ea116400e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113741.1.2.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.net/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSHA-2ProSeriesSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSHA-2ProSeriesSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvis-qs.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elvis-qs.spiegel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00784b05877fb28c4993aecf7cec5f96c5f1719f401ff2a2199374201f261d76d2eb2bf881bf76f81b757bb7a120edad9fd68b9bf94b9a92b78d5522f8e4e88a4b570157c66c0d630aec0f725ac5c17388afff7a71aa4d4895062c1658d3ab5fb9c3795aceb3b1ca46ce9a536d036deb25eaa46ffcef7ead0811f780599dd4f53833905e41ca9a4e0ef9e8a3a2f886bab123c1d99452db2c3f7b83b5fe52d1721e8d0f8184da1907dd23ac6ec911a2ae4a272ac076f25431f0a6c0d8a79457b28d0489edff543bf40c5047a1117640848414dd1b2a7f8e543092bcf23d0f5e00ff97f019089371e32d65bbda5e77693519dfc0c3394935971994d4b33ec2154654