DV SSL/TLS Certificate for www.ostseepension-winter.de

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo RSA Domain Validation Secure Server CA)

About the www.ostseepension-winter.de DV SSL/TLS Certificate

This certificate with serial number 44:bd:4c:fc:67:7d:e7:4c:df:25:94:38:31:44:61:a1 for www.ostseepension-winter.de was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.ostseepension-winter.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 44:bd:4c:fc:67:7d:e7:4c:df:25:94:38:31:44:61:a1
Serial Number (int): 91370409280293356924556321698582127009
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: a2:4f:f8:05:a2:92:9e:95:ca:26:39:a0:2c:a7:65:7b:1b:13:1f:5c
Authority Key Identifier: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (SHA-1): 49:84:96:0e:80:82:7a:20:de:16:48:ec:4a:2e:f0:c3:54:43:a3:fb
Fingerprint (SHA-256): 53:10:44:f2:65:02:01:20:96:49:1a:9e:54:8e:84:15:ac:9d:bd:81:3e:b8:ca:97:0c:2d:7d:17:dc:82:8a:70

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.ostseepension-winter.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.ostseepension-winter.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.ostseepension-winter.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaH/HDRnes4VGlzbzA9P
hx8SxEwIRZhfG0paA8wdjiE9a/f/dO48fHJZ1XC518rXmHmUObT2aSQXocvDjduK
GN8uGMd0D42G+kkHMD6PZCIYaOUW9ZMtCj7AVA3CLlgOdHroOBvbN6hGTO4ab8yg
sxtr/AAOwTIJq7TWpY+arL2aoBBzpggbv1JM5LcFlfaCSAKa7vd1NjvdTK/TbDqp
d24+CddjPGRmG0WTFGD8NJzBxGL7gZLs61ZqoXF8eSbcqNcKYwhFw9xSgH12jrN9
DU1Kg4hr9qWuIBHgbcZiiqJsf5VvE967o2APrtPm0EZScYQ0VtwtslH8RwejGFzx
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91370409280293356924556321698582127009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ostseepension-winter.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23433969882061685498660060883086517820393702951721723268785179731762897973426645957137222782741945284003654799669212460555235781572469171955937645810901168276031974753833098184979122433153303061345680968768605129562711776666064197391145927759494361164542200923835675705646159654516105143423774770139926587866374120846042179837346304393626732035553137221152717876732350876937514540316581351117826584562531339785695919648616574732785372130369415749606618066802556048167014381758799615183055975171294862219589230294643686578663326536484245643756180923653265532559984136093427945503529354600586964436563061186600082665967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a24ff805a2929e95ca2639a02ca7657b1b131f5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600969764bf555897adf743876837084277e9f03ad5f6a4f3366e46a43f0fcaa9c600000193d25dbefc000004030047304502210097871068c851b2d285d5567f23d5190e07802e4ca88b99f5f2874484173c4cf002204af2a7d789e357cb999ecc9f42be47d6e60b503b92bea40c6d9c3959d03d042b0076001986d4c728aa6ffeba036f782a4d0191aace2d72310faece5d70412d254cc7d400000193d25dbe900000040300473045022100aeab5f19211b13273ba82d362dabfd7704bd2039fae253b016ff5c43b726eba7022044ec8cc84c50bdf3d2e23690d11ef8e10ed3e9d1fc32d13071d350193e2254bb007700cb38f715897c84a1445f5bc1ddfbc96ef29a59cd470a690585b0cb14c31458e700000193d25dbeba000004030048304602210083452cec3e56b86128363e8ddab611e36f35f7c4f24cef9ee5ba37c1b92d3a3d022100a778ca8f70254a3cd2f259b683cebaa9a6f486ddfafb4454286b760aa8463576
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostseepension-winter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostseepension-winter.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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