www.lammsbraeu.de

- Neumarkter Lammsbräu Gebr. Ehrnsperger KG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:2b:96:53:e5:02:9b:44:74:42:39:a5:34:79:13:23 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Neumarkter Lammsbräu Gebr. Ehrnsperger KG

Organization: Neumarkter Lammsbräu Gebr. Ehrnsperger KG
State / Province: Bayern
Locality: Neumarkt i.d.OPf.
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:2b:96:53:e5:02:9b:44:74:42:39:a5:34:79:13:23
Serial Number (int): 10860141739449579336048893618397188899
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:c1:e6:2e:99:56:90:0d:33:76:86:04:78:1b:31:3f:33:b2:9c:de
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 06:d3:1a:22:a7:de:6d:68:43:9d:e9:f8:34:9e:83:5c:ab:8b:0c:84
Fingerprint (sha256): 2f:67:a2:49:da:56:9c:1e:1d:39:f5:80:1b:5f:a9:38:a3:cb:dc:2f:52:81:e1:75:87:5d:f4:ef:6a:20:32:ab

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lammsbraeu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lammsbraeu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lammsbraeu.de
lammsbraeu.de

Other certificates including the domain name lammsbraeu.de

(limited to 100 certificates)
blog.lammsbraeu.de
secure0125.hubspot.com
*.lammsbraeu.de
www.lammsbraeu.de
secure0125.hubspot.com
secure0125.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
secure0125.hubspot.com
blog.lammsbraeu.de
secure0125.hubspot.com
www.lammsbraeu.de
secure0125.hubspot.com
secure0135.hubspot.com
www.lammsbraeu.de
www.lammsbraeu.de
www.lammsbraeu.de
blog.lammsbraeu.de
partner.lammsbraeu.de
secure0125.hubspot.com
secure0135.hubspot.com
www.lammsbraeu.de
secure0135.hubspot.com
blog.lammsbraeu.de
secure0125.hubspot.com
www.lammsbraeu.de
secure0135.hubspot.com
secure0125.hubspot.com
www.lammsbraeu.de
blog.lammsbraeu.de
secure0135.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
partner.lammsbraeu.de
secure0135.hubspot.com
secure0135.hubspot.com
partner.lammsbraeu.de
partner.lammsbraeu.de
partner.lammsbraeu.de
www.lammsbraeu.de
secure0135.hubspot.com
www.lammsbraeu.de
www.lammsbraeu.de
blog.lammsbraeu.de
secure0135.hubspot.com
secure0125.hubspot.com
secure0135.hubspot.com
secure0125.hubspot.com
secure0125.hubspot.com
blog.lammsbraeu.de
blog.lammsbraeu.de
partner.lammsbraeu.de
secure0135.hubspot.com
secure0125.hubspot.com
partner.lammsbraeu.de
*.lammsbraeu.de
www.lammsbraeu.de
secure0135.hubspot.com
secure0125.hubspot.com
secure0135.hubspot.com
secure0135.hubspot.com
www.lammsbraeu.de
secure0125.hubspot.com
blog.lammsbraeu.de
secure0125.hubspot.com
www.lammsbraeu.de
secure0135.hubspot.com
secure0125.hubspot.com
secure0125.hubspot.com
www.lammsbraeu.de
secure0125.hubspot.com
blog.lammsbraeu.de
secure0125.hubspot.com
secure0135.hubspot.com
secure0125.hubspot.com
partner.lammsbraeu.de
www.lammsbraeu.de
secure0125.hubspot.com
partner.lammsbraeu.de
secure0125.hubspot.com
secure0135.hubspot.com
www.lammsbraeu.de
www.lammsbraeu.de
secure0135.hubspot.com
secure0135.hubspot.com
*.lammsbraeu.de
www.lammsbraeu.de
*.lammsbraeu.de

Certificate

The complete raw certificate details for www.lammsbraeu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEHh5hQ/XUHW4+OWk0OE
MwmNxGLsYRgbVz3EES427Y1DUX0YgNol8B6PE5n2CH3KmSCHM4lK01UeBCbas8jp
6x5QzWTwn4vrJrx/+7aZTc3NeQF3dOlbKLrEZTwWAj+4vHbHV6xthHlWkcyeLcDj
fSb9N9dZR8W2zKthtPe29jveyMZrt+CMHEIQwSYOJhEnkFrPEQtB3Ado2F4k3kWk
PQRs6gH6zJbcX0B1immI85cq3kl55gPmgSQKt9wp6NQR0O8cSgwejF8Lzgm34Jd9
c1U/YxyU/fesMhgnqDJtJqBVBo0HmxQOhS7ptfcWI5e8dB7mFZWrc4xxYjxObFY/
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10860141739449579336048893618397188899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neumarkt i.d.OPf.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neumarkter Lammsbräu Gebr. Ehrnsperger KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lammsbraeu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19725663405355190049241997436125361848737329600321483394198411818758885668041202852914789686304090135147667224488848070656617927004938843875930843211641154742610359592225856218782525572314953090009831185476112862744657485979072263192085881582896838201051336330736446632582399262243090217866929451141519932739601233009260824046508861258233326867611667561851637383812843923681291148997211455660061785400185471378614609514512025370859169953285913207849368655666225399425561240806298571574110492082640238501788699240094406017125559834386451327671083041906444144452947048034697594161771491487854263678225810307705392742187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dec1e62e9956900d33768604781b313f33b29cde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lammsbraeu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammsbraeu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001676a80b52f0000040300463044022035b51b556250da1ad22ee027da8cf5a5acd6981badfef4f0118aff463d0615d502207f905cf8a114c239e805b93525c8a42e91c6301a16c163816e2ba77752296e9e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001676a80b60b0000040300473045022055c5313877ea786825e271ce7394b0b7fbea25c57ec5cbd0a5a05803e13d70da022100cf5d3aeb5513f53c72723d2b76044e82d8239560ff1e4fbbb823f13aa303827a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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