www.baumarkteu.de

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:af:18:22:10:83:06:cf:45:d7:fc:d4:40:fe:82:52 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.baumarkteu.de

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:af:18:22:10:83:06:cf:45:d7:fc:d4:40:fe:82:52
Serial Number (int): 3567597418511601303096830987094360658
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9e:4a:ef:f9:de:9b:48:04:34:2c:c7:0c:b5:c5:00:b5:96:5a:e7:f5
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): ae:c0:32:c9:5f:92:d3:c1:42:cf:f3:84:8f:80:f2:72:d5:2c:46:9e
Fingerprint (sha256): 2e:9d:05:91:ab:7d:c0:f1:ad:db:98:b3:96:f6:39:bc:36:05:ba:22:de:e3:30:c3:d1:1c:3a:74:a6:60:d4:76

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.baumarkteu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baumarkteu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.baumarkteu.de
baumarkteu.de

Other certificates including the domain name baumarkteu.de

(limited to 100 certificates)
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de

Certificate

The complete raw certificate details for www.baumarkteu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iGjKNhMb1exbNYu3m1j
x+Lq+H2Lq3zVnwKzo2d/8Ss9e0HopX/RFP+xIXek7B7R0/g5L+dcuxeI4w/NRWnM
bNmVx6DJE1TiPjak0sy3avQMXSFTEZ0iBDYYneNglvk+qnEhT5REjqaMbRUamBUi
090UMXvJeKLJ4kUiRjneEaIeFg4SiqODSxwM8ws1Fu97JqBQJoAkSEKkcMaNzzCo
WnV4Z6JtEB849uOBsZ5eIc+DnkH8sJ7NQNJkQz0CTunJNbESIyANMp0CQi/Ctaku
475jzJe1WmDX98Xpjw8Dq7G4g7LvCIQSRE1euBj8aE3XGMuUnFJ24kdNqq61vo9Z
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3567597418511601303096830987094360658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baumarkteu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26526631234422628669813317622650281974206895150918946447695967111766510129174665514071845394560654059455763396222595294667243382344486552386680661803961026904027483440310657633356361632552194209546728499306916281310941925208698963480171644409051496513852824120475987351070223034385492217143437052852926632247016417039851693404988002199622385627137624548587920688346236701586080896650525726608887307820421939590310986034943879887800482377363593748057733109895413429168767061613760242719052854508026142412222591428074638019986242517132884630084336613180473459312312533291738944312572471082281480465663999612676268317141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e4aeff9de9b4804342cc70cb5c500b5965ae7f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baumarkteu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baumarkteu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006eedb4e13cd76b78b7a0abc37518ff0d4571d10f05d6b4868b60559edb7f2ec870e959a0bf50330bff9bdc1e1fc5f01f791e78c1166836c71495ae8c92b8e60cf2452046b4a3890da2a6fb3eaba40fac7b85010e26acb371253ec6f5fb4ba77566650eee2d8c4a9fd509bf8cb496785cda7771a3b30c18d17089c77d0002c43b0f8df6406deb8a8b57aaeaf590589cb6a1abf4edf8f58b0f015badd9d06b2b01d1b31c880c65ee141b53e233bc3a744df025c88dbb5d6e9a8e0413ffeab4b14d75c6b59d085037359ae87082e7b380911a980cf7d8809b224e1d7ed8e46a2aaad6786667e71a5afd78cc59a481f64fcb81565d65d77c62316b5f8b9ed5a89723098ea6ab1d448883836f02c0dbb28ee51d2e0577264700affc430ed8f62ddf1d8b643d8f3c7a60e04632cb5fa50c50e4a10f40fa17256956da1901816b954a60ed1da4f68c9af7510e4c76c0ae9e681d0b14674672eccc9b8c7fc293e2b1787f0616af655a6668dfff5e5390d90727cb408288fac6f65b957de0423d5f8616d4543b39a4b3aa7b6cc0a748ea8299e9dc844d24735455519e674f73c4ef8dee24801caf8b94d8cf7b70970f27713bb2cc086d26f96ef66a1b93a4699751664e6dfa5522f2bc8c511df6c9a56513727aa1a422a19ebd89a9678f1292142c810f39c19ae458d2eedab843065c32a38a2ede3e3b52acd98cf18de4185a1fb4f5e1f2