ssl.1.damoh.manager-magazin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:eb:43:9c:92:95:76:b9:02:1a:bc:2d:42:54:8b:2d:50 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.1.damoh.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:eb:43:9c:92:95:76:b9:02:1a:bc:2d:42:54:8b:2d:50
Serial Number (int): 265052401103058568328218844433782133173584
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:f0:ce:96:19:e3:e3:cf:70:8a:bc:c4:32:e1:f9:d2:aa:86:bf:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:2e:68:90:25:73:1f:03:b5:6f:84:a6:49:b0:6d:ef:1d:11:e1:82
Fingerprint (sha256): 21:8a:f5:92:22:45:68:a3:a2:9d:76:38:dc:49:38:d0:d1:6c:23:13:62:f7:99:7c:45:f4:d2:31:36:3e:4c:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.1.damoh.manager-magazin.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.1.damoh.manager-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.1.damoh.manager-magazin.de
ssl.2.damoh.manager-magazin.de
ssl.3.damoh.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for ssl.1.damoh.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265052401103058568328218844433782133173584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 09:54:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 09:54:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762102572434540674200277571222858639269488101578706533610097792928910736370496039776780067294791187410150189266656321088797274872467795968301232000044006084661110560502329797571459447980494154641428915519815702270903453769494602737864058177823236434226061343889552986558401937681524003136398080413279844889902883850076562511901297957860744555459639144610346619765670370220359364344271841631907074094068173796993700706868539164899132771335861873098519972708151817068074690713922807141073175695077758755834709429445096010482445725225635557762392087499660226043330279481896345507781792563289755673013055067560369283594525451699008151259415336321671960803722139320183273636975808647287884990396180634265673018782891046977637402746245558133019538472629597710249599546662554005830851952416524317824037372477045280369424845836674676172046495252947639017960531177924975178416005266348446148789588548557631796228830315440075025375144197527274235901143992500877689387830442095610903223748326476306296750656991239509364517376336973123279395356179797922972770263390389168832051959044349539268110064337511089352175628716501726184704667889977585487972265295983474955177983838301029084809989794609190930906588340774854405330532412041770617173305061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aef0ce9619e3e3cf708abcc432e1f9d2aa86bf14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.2.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.3.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a9c3b2d24000004030047304502205309909b816a98e74ca8ecbd615a615e8f6ba35245ae7b0e9bee80b9a543c0920221009e011e69decf3441a67d73a6611f5b0e05f0a0c01b56ac857b981855b7b068e5007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a9c3b2d4a00000403004630440220186fbd8e21ed2f1e0be0f07bf8f8815dea6226d310df2015047cdda1619806ac022003fdf2010a1f238eff0809ccb2e0df57fe17cae1f11bc523da83fc8dd68bcb8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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