data-2f2ec12966.bestcheck.de

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:a6:17:2c:0a:de:ee:63:07:b1:7a:13:bf:9a:16:bf:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data-2f2ec12966.bestcheck.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:a6:17:2c:0a:de:ee:63:07:b1:7a:13:bf:9a:16:bf:33
Serial Number (int): 415024977440039327347788881117778896404275
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:86:8f:7a:43:5a:23:65:5f:34:e0:8c:57:4f:7d:38:00:53:95:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:c2:b0:83:ab:d1:b2:12:a8:aa:b0:7b:dc:4b:73:43:e4:69:9e:61
Fingerprint (sha256): 33:d0:84:fe:11:0a:2d:a8:aa:3f:19:de:2b:a0:df:26:bd:15:f5:32:3b:d6:c7:66:c1:ab:bc:9d:68:dd:76:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate data-2f2ec12966.bestcheck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data-2f2ec12966.bestcheck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data-2f2ec12966.bestcheck.de

Other certificates including the domain name bestcheck.de

(limited to 100 certificates)
*.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de

Certificate

The complete raw certificate details for data-2f2ec12966.bestcheck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBM7t52iC9SU/NNMVyjq
mE65xEZudS0xrNv8GgIA680Cw8MjFyXrtneIISpRG5uyU/jDnYg9rnjWIJkSt/qk
jADj9gwLe5MYF0o7zONSAIWorjJYBBTy9naMphya6u0/qEPA7VX9t8uWATkmLUPe
eoJd2ZPSFuISH9CxccwZ+XrFYu+PT22lnv78mHonNji0CFr+udTDkABsO0DY5tQw
GvDrB8oRFoSfs2MVZ2G4ocjLb7tOQj1hTkwwbD4vYgMPvqDsR6tI28rErrkcJMqT
NSYymdWEXoj3dJDF+daTRD1h61iXpfrokLPH8F0Jyd5LLe2Z2OJvmPZ90//bmN+n
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415024977440039327347788881117778896404275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-03 02:24:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-01 02:24:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data-2f2ec12966.bestcheck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23237332392924262460249750431477343815118510581530525800828550881284447225897977588831509297760351429476914654282098272036942702674326099169403755421698530268909556136428895857380114314816813013512784135553532468763408753147077605913232169656956647518153544116531269291576509597351731253754109334464597097530549945591603830004684049937089992690776694971746165174440272143914685652122619402403165084576190926126942612364129984901480371050905127642824343280807653798697211093655938196406111950376389393874758166880906167465329895117323686220693703186860685064150399347185858611549637793817008881369812451980918594185149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9868f7a435a23655f34e08c574f7d380053955b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-2f2ec12966.bestcheck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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