shop.stern.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 8a:dc:1e:62:50:93:ef:0d:a5:fb:14:62:b9:13:19:5f was issued on by Sectigo Limited.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.stern.de,OU=Domain Control Validated+OU=Issued through Gruner \+ Jahr GmbH E-PKI Manager+OU=COMODO SSL Unified Communications

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8a:dc:1e:62:50:93:ef:0d:a5:fb:14:62:b9:13:19:5f
Serial Number (int): 184576384988781730265568096535713093983
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f9:ac:0b:51:ed:0a:5d:68:61:61:05:6a:2b:10:e1:c8:22:f5:f7:32
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 58:0c:9e:f5:aa:74:32:e2:53:2b:d6:79:ce:ae:dd:17:0b:54:d7:57
Fingerprint (sha256): 32:31:c0:58:7c:df:2a:73:17:f1:96:59:a2:48:5d:07:75:1a:b1:31:83:fe:dd:cc:46:d6:ff:a9:4a:05:31:82

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate shop.stern.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.stern.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.stern.de
aboshop.schoener-wohnen.de
meinabo.de
mitarbeitershop.dpv.de
shop.art-magazin.de
shop.brigitte.de
shop.capital.de
shop.dogs-magazin.de
shop.eltern.de
shop.food-magazine.de
shop.gala.de
shop.geo.de
shop.pm-magazin.de

Other certificates including the domain name stern.de

(limited to 100 certificates)
abo.stern.de
commsvc.stern.de
static.stern.de
secure.stern.de
static.stern.de
static.stern.de
www.guj.digital
secure.stern.de
getsomelorem.com
wefind.stern.de
ssl.1.damoh.aws.stern.de
andreyneto.com.br
static.stern.de
serviceportal.dpv.de
quizbattle.stern.de
www.stern.de
stern.de
gutscheine.stern.de
www.stage.stern.de
mobile.stern.de
commsvc.stern.de
wap.stern.de
blog.stern.de
static.stern.de
*.stage.mobile-toolkit.guj.digital
tausendreporter.stern.de
neon.stern.de
www.guj.digital
www.view.stern.de
ssgtm.stern.de
view-s3.stern.de
www.stage.stern.de
*.gws.stern.de
ssl.1.damoh.aws.stern.de
*.aws.stern.de
static.stern.de
blogs.stern.de
krankenkassenvergleich.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
*.brigitte.de
jungefotografie.stern.de
static.stern.de
static.stern.de
hheezd.stern.de
lbm.stern.de
newsletter.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
*.aws.stern.de
insider.stern.de
www.guj.digital
www.stage.stern.de
augenzeuge.stern.de
static.stern.de
view-s3.stern.de
baeume.stern.de
www.guj.digital
secure.stern.de
stern.de
neon.stern.de
*.stern.de
commsvc.stern.de
oc.stern.de
static.stern.de
*.stern.de
www.guj.digital
tausendreporter.stern.de
static.stern.de
abo.stern.de
static.stern.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
gewinnspiele.stern.de
neon.stern.de
stage.serviceportal.dpv.de
ssl.1.damoh.aws.stern.de
commsvc.stern.de
quizbattle.stern.de
secure.stern.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
reisewelten.stern.de
commsvc.stern.de
picturedesk-new.stern.de
commsvc.stern.de
form.ipstar.app
static.stern.de
serviceportal.dpv.de
wetter.stern.de
view.stern.de
*.stern.de
static.stern.de
stern.de

Certificate

The complete raw certificate details for shop.stern.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriuYjOPa0LBoGQDj+ysY
xfSmeFF1pzWus7WI3gK/7nPYrAvT6Wlm7pETYkUbaftTzkhwHyMKalBN/JMjxuOX
Bb2wrLTDNGl7RaI6Dz8ezJao64T+VNsMa/GP/OVnfZ4ShvPl+UtVS9cAhw1vfB0Q
1/FcbvCEADL9rRKBHbQa+KdwP0p/JqreyhVlmYyEnu3XkbxPMndDKNjmx2vXI9Dv
wjmoAxUdZYhPDV3uX55G8F0kTCOwyafHcVlwXr0QqwtA6UAiS+5K+m7kmPg9xLDj
4u59dcJtpPGSkW1SHJyeh3zYd9J8GNW+SBORhLeNv4NQ4RjtzpiBFHyFmSrzmAJl
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 184576384988781730265568096535713093983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Gruner + Jahr GmbH E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.stern.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21986963003530510175505751815236029671299780275045973793429122720996385478903395680601213267260170443089022899819918650762543440923322632723624017375375552443090410043341868401312874700991354459520920815510387845076959849313392690038361243874972069214944661409913378645915552909331977833602417838293050278012050715721016920061347069376419300082670873891927306376097828678569824465076865361680801505503949944408790648166898102472404744731957002644569937002577701252198447488243609079653608624514098925603486274986352316220411229708994362260954870659920810572366922004737958196274953500357385733663359729770942001472831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9ac0b51ed0a5d686161056a2b10e1c822f5f732
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinabo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitarbeitershop.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.capital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dogs-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.food-magazine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pm-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000133c3a8aff3a1d73d4e884990f737ca113d047b3c51278f3ed7cc9508643bf5e8459baa084a79dce53af7da964ae4184f914903b5bcea0556d14768d5be9b85562fdd92fe01964c641aa4ce75406325a4beb32b0d73d07bc76f23531b10e929d8d97b779af41eb86d34d47c6cf62405aaefb095012adece2b3b04a6e9b7c3442224a49bdbaa0a5440746995e8ba95789b9d8b776288ec847276a58d4e1fa1a27d5822ee042242dcfb7f8c18a77b75b9dcdfad2947c1442d596e095020a59049fbf304efff99dddfbfb676cb13eeaca3ff69bd667b2fcbccdab2d5ad8fd6a0769a2c24aab8651c395bbc996fb873352064f78c1187471e4d0bb6192661367793