data-45ccb8748c.bestcheck.de

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:9e:19:74:77:4c:ea:ff:57:52:d8:cb:01:ac:e0:6c:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data-45ccb8748c.bestcheck.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:9e:19:74:77:4c:ea:ff:57:52:d8:cb:01:ac:e0:6c:5f
Serial Number (int): 423521414642614398945041253433701419740255
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 90:15:5b:e5:f9:e4:19:33:e0:15:92:52:d4:2d:d2:de:31:e8:9b:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:47:92:a9:94:b9:da:72:d7:89:37:dc:ae:cd:37:e1:e7:46:30:1a
Fingerprint (sha256): 27:b2:d7:55:1a:d4:5c:41:49:51:26:ea:b2:74:08:d0:c5:a2:4c:69:1a:bc:f1:a5:a5:0c:68:27:ae:e1:03:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate data-45ccb8748c.bestcheck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data-45ccb8748c.bestcheck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data-45ccb8748c.bestcheck.de

Other certificates including the domain name bestcheck.de

(limited to 100 certificates)
*.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de

Certificate

The complete raw certificate details for data-45ccb8748c.bestcheck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg97SyYSEu15qavK6E6B
IOWo+AMZx/wkbqpTcANgnjD31tt/18BG30EFV1EAe/p7hCUpq03DzXZmtpZIK9Hu
1j4qffGEk2+kGzdAWh0oX5RCbZwhzldza2DHHW37ExUFaiRaDz+8Q/uCUUCKqsjh
TLQyXXVqBHZR57dcdkFDuwTrpdaahIz00UN3KQPfq68ZaBO0y9/cRGk7ElQr500q
wZWd/OCnrICQTV/T9wKli/hRaj3gAKXNcjw54/kYK4qnM+XMJF6iYvMgRAYWulov
QM6h8qQNTGGbqJxk8guy2uVCU+T5hJuafWsK4eXwPxfV5+5HR9Yhm4ps40nvS411
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423521414642614398945041253433701419740255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 00:47:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 00:47:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data-45ccb8748c.bestcheck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26012725092108908600410166933604989668382408587605172781130281657331627551827358106883323948861837427346300599819067875331699157646632867583117423454665274565827924915363835401481044728943283413456011782770943628553395429900453200880558541215757598056882309023509172385744449494476978098773136899993995413774823077823748307209166762734787223061057336048276099369867519042616392500745659259388895283621513200977174484875640291790537544187736870968035111877905737496584127455232808400435025314436520478394221601604117602284073667581614147737029614960069719048968465796069772223884977786388186067748248397945693486806459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90155be5f9e41933e0159252d42dd2de31e89b01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-45ccb8748c.bestcheck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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