story.bunte.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:f2:cf:c0:9a:b1:41:0a:57:d3:30:22:b8:37:c3:73:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=story.bunte.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:f2:cf:c0:9a:b1:41:0a:57:d3:30:22:b8:37:c3:73:de
Serial Number (int): 406279615623587891666445565467190798545886
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:ea:7d:a7:7e:7e:6d:16:93:18:d4:de:1a:01:ee:78:42:12:88:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:aa:81:1c:aa:ee:15:52:ed:3e:a0:a2:76:ec:16:d1:d2:a7:f6:3d
Fingerprint (sha256): 25:13:2c:0b:ca:99:22:df:d3:cd:2b:54:79:9a:b4:ed:6c:45:22:86:bb:ed:35:aa:d1:a1:a6:4d:70:b2:6c:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate story.bunte.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for story.bunte.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

story.bunte.de

Other certificates including the domain name bunte.de

(limited to 100 certificates)
go.bunte.de
x.bunte.de
*.bunte.de
bunte.de
bunte.de
bfops.io
story.bunte.de
bf-tools.net
data-574debde52.bunte.de
bunte.de
login.bunte.de
tags.fitforfun.de
*.bunte.de
viplounge.bunte.de
bf-tools.net
bunte.de
data-574debde52.bunte.de
bf-tools.net
www.bunte.de
bfops.io
dcclaa.bunte.de
cmp.bestcheck.de
tags.fitforfun.de
bunte.de
viplounge.bunte.de
dcclaa.bunte.de
bfops.io
cmp.bestcheck.de
data-574debde52.bunte.de
bfops.io
data-574debde52.bunte.de
data-9b3233a086.bunte.de
np-sandbox.bunte.de
bfops.io
viplounge.bunte.de
bf-tools.net
*.bunte.de
ssl.1.damoh.bunte.de
bfops.io
bfops.io
cmp.bestcheck.de
media-video.bunte.de
bfops.io
bfops.io
viplounge.bunte.de
bf-tools.net
*.bunte.de
*.sp.bunte.de
bf-tools.net
data-9b3233a086.bunte.de
*.sp.bunte.de
viplounge.bunte.de
cmp.bestcheck.de
media-video.bunte.de
link.bunte.de
cmp.bestcheck.de
viplounge.bunte.de
tags.fitforfun.de
ssl.1.damoh.bunte.de
bunte.de
tags.fitforfun.de
go.bunte.de
tags.fitforfun.de
story.bunte.de
cmp.bestcheck.de
data-9b3233a086.bunte.de
cmp.bestcheck.de
bf-tools.net
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
viplounge.bunte.de
media-video.bunte.de
*.sp.bunte.de
link.bunte.de
cmp.bestcheck.de
story.bunte.de
bf-tools.net
go.bunte.de
go.bunte.de
viplounge.bunte.de
www.bunte.de
reisewelt.bunte.de
login.bunte.de
rt.bunte.de
bfops.io
bf-tools.net
data-9b3233a086.bunte.de
np-www.bunte.de
promo.bunte.de
x.bunte.de
bunte.de
viplounge.bunte.de
np-develop.bunte.de
bunte.de
cdn.bf-whatsnext-production.aws.bfops.io
link.bunte.de

Certificate

The complete raw certificate details for story.bunte.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jcv5phCUskGr9vPdHnb
88PKzD0Qw9e5vaRlD9JDmVaKQTxA24ZKt/rvq8MyfzPHeb3LNK50sQEDc+gIBGmY
Si/VCjg2iXBLRvTLt8zZmsQNLF3POLj6uqmic/AhNGHQcxUe3oXO2o1LwHBocBW8
uuLBPULNojcOtmwjFJjsdPwDvtweJ0GAHvvxN4zVd4oJsvFNrRqhcCVjsrq7Oh77
aKKGN7yLLXisfQKAMFul6vutiUIn5+eRDsxyejXlrMtj0s3Fu7oVOFSg9cthXFL+
ZaliogSr6Gyc4CySG9NpjwW0hG0qrXc5LDN650YsQpUmExRugRgEIkoazN0iYv58
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406279615623587891666445565467190798545886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 13:59:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-30 13:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'story.bunte.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26537257822241980909960592665428102211044447129543758981143885811258642178798374285106462788003826330686174625238464760642748678408004262861302075911466369792604277626354220054622430075908780164904510386922308753203830666874873116776474370667948378550396129302255414692871573019395850157096457152098249691686931609828523400598360944283715707308897677406083865105055643781756489764219715867908712033826571298210907347422953769478216356491942982427275459262718569279862919848686706489061137659744388459140385808590278961354666503449734410253095974560122725047880257932870582877286226509210239462772858312121047402314953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11ea7da77e7e6d169318d4de1a01ee784212889c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'story.bunte.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018259eae1020000040300463044022054ebc8f9dd82a9c37f149290222c0750b7e685ae8d636b498f23cb5b375de00f0220110ac8fa2166464ae802a1f037ea4eb83577ff7116f9821c2b5639acc9761d5900760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018259eae13900000403004730450221008ecc54b3755a31c36703c8de798f60998f1176e38f9772e1b41e7a767d9bef9902206a417257d00289ba3982688574e238af81d870011d424e7e12d45e4cf8c8d9d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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