12bis3.de

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 6f:78:bd:15:76:99:0d:a1:40:e2:55:6d:c8:b8:b1:69 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=12bis3.de

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:78:bd:15:76:99:0d:a1:40:e2:55:6d:c8:b8:b1:69
Serial Number (int): 148171218231060605347692681584591810921
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:4b:be:71:e3:91:f7:0a:22:c9:70:ef:50:a2:03:8c:6d:cc:a0:46
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): a2:c9:e5:45:41:63:b1:c5:32:58:00:27:b4:be:2f:ae:19:42:78:a9
Fingerprint (sha256): 27:80:42:08:11:4a:6e:23:8b:c3:00:d0:cd:a9:99:3a:ac:ef:ee:a1:ad:6f:b0:70:d0:b8:75:07:38:dd:60:5d

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate 12bis3.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 12bis3.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12bis3.de
www.12bis3.de

Other certificates including the domain name 12bis3.de

(limited to 100 certificates)
www.tekom.de
tekom.56.stage.12bis3.de
www.tekom.de
12bis3.de
webmail.12bis3.de
www.tekom.de
12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
live.tekom.12bis3.de
www.kaercher-municipal.com
tekom.56.stage.12bis3.de
12bis3.de
www.kaercher-municipal.com
tekomconferences.72.stage.12bis3.de
12bis3.de
www.tekom.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
webmail.12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
12bis3.de
www.tekom.de
apps.12bis3.de
webmail.12bis3.de
www.tekom.de
www.tekom.de
www.tekom.de
hoeveler.72.stage.12bis3.de
12bis3.de
aussicht.stage.12bis3.de
relaunch.maxholder.12bis3.de
hoeveler.72.stage.12bis3.de
hoeveler.72.stage.12bis3.de
*.12bis3.de
git.12bis3.de
12bis3.de
git.12bis3.de
git.12bis3.de
www.tekom.de
*.12bis3.de
webmail.12bis3.de
git.12bis3.de
webmail.12bis3.de
mail.12bis3.de
webmail.12bis3.de
relaunch.maxholder.12bis3.de
*.12bis3.de
webmail.12bis3.de
webmail.12bis3.de
git.12bis3.de
*.12bis3.de
relaunch.maxholder.12bis3.de
www.tekom.de
www.tekom.de
*.12bis3.de
tekom.56.stage.12bis3.de
www.tekom.de
www.tekom.de
git.12bis3.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
*.12bis3.de
www.kaercher-municipal.com
12bis3.de
relaunch.maxholder.12bis3.de
12bis3.de
www.kaercher-municipal.com
git.12bis3.de
12bis3.de
cloud.12bis3.de
git.12bis3.de
www.tekom.de

Certificate

The complete raw certificate details for 12bis3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148171218231060605347692681584591810921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12bis3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656198623629479237439151478038025617739736579918133442737596958757590387526799027225434356506159257487081410761449763455657847285643276007402447364127301247967390951197127962452277258177947511244787558532164646407239667473986286424371371211785689829524850101763969633284112826982988136550436013853289475260899773169383665149395215337358152861582383696210398593117736706307806428483484571016100234225333794372145830243586188174496353023044790566875867874676091082217284056797352580566072773652336114309282102936226720251450169892333168342982848952001860302996667290576201772479154607666119776227762497708591659331272950144076523589998529812136183389257462409722647484166412266213400686001445253901606316253524021262601768605525797539025709860247029140537582564438254232053596192957029747910694522686112364425454159980288680532412860489316699179336397599561351116211270527486186969183406783900808301590183524266030757745378212427819988788938317898952385597153625003331406353809368608572688958631395378515026806440868840674757987519318631767048038760770439929700763876888388935516496482812691411148561098760829819900698052407131330066489781402072366363042393825048096604555070360606683867597118069363061251904114062779901570420473458057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a4bbe71e391f70a22c970ef50a2038c6dcca046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db012cca60000040300473045022100e8441787d7f0507566c25c27fda6fe2b76bd7585679d0beea3b1534f02b2c00702203e9fb3ce0ab4722494f49cc57ea38c3f0d512afbc7b5e92a938299772475dd070076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db012ce64000004030047304502202c0db21fe1d69faf806732ea07a13e55874b48989566973501d57bb58acf4dad022100fc2a3741f18694719594eefc5d72868e5acdb29045168ab28e36b96b7a63672e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis3.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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