cmp.bestcheck.de

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:9b:d8:c0:2f:1e:75:ba:93:7f:27:e8:07:86:75:6e:be was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.bestcheck.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:9b:d8:c0:2f:1e:75:ba:93:7f:27:e8:07:86:75:6e:be
Serial Number (int): 421817008388466656129176671557630616235710
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:6a:e3:4f:4e:6f:28:3b:92:ef:ca:a6:14:99:de:16:18:97:7b:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:47:a3:7a:1b:99:a7:97:3c:a2:92:41:42:65:bc:5c:01:10:56:be
Fingerprint (sha256): 3b:ae:7c:91:b4:f8:6e:9d:dc:b8:a2:94:91:55:22:f4:c7:8b:6c:44:42:67:e6:8a:0e:0a:4b:6c:12:26:08:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.bestcheck.de

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.bestcheck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.bestcheck.de
cmp.bunte.de
cmp.cardscout.de
cmp.chip.de
cmp.cinema.de
cmp.dasprodukt.de
cmp.finanzen100.de
cmp.fitforfun.de
cmp.focus.de
cmp.holidaycheck.de
cmp.jameda.de
cmp.med1.de
cmp.netdoktor.de
cmp.netmoms.de
cmp.so-stadt.de
cmp.streampicker.de
cmp.tvspielfilm.de
cmp.tvtoday.de
consent-amp-sp.mein-schoener-garten.de

Other certificates including the domain name bestcheck.de

(limited to 100 certificates)
*.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de

Certificate

The complete raw certificate details for cmp.bestcheck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmouNOeXxxKjaHHxWLOa3
QwDl9SL0pFvYrFSTCaSbhcFEfBmOJEw1hwaPSNe6q4FTC30pIbObmMsJEPC1pjPz
Sdel1FHWYH2msFsogdEiVznI2hTHosI1/NDZfQOxWBXYisOxOmZ5fGbZcfaFLbG/
yG1FbEliXGXBn7dALvNUMUvo2V7z4BRMrGDMOXvYGhOqfPSGEii5mhwTiskOPQ5P
IE2XQ8fujoQex2JEjLT8+ahJeT50Cu+wAlRA9oSWt5o8M635g1EmGqpfX2NMzoll
hWQuwkUETDU/H3jJoyeK1uz3DCHn4pcqgI94ohRI973o2FIrhPujW8U4yVdxudTp
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421817008388466656129176671557630616235710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 15:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 15:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.bestcheck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19509514455428377442009019088714585422124203174034537352694930101685599842392053027026221463843400050665835066638082219553877254252103197875333412197057404778159059116250025318880213197337252395942557222666422269902824298928966402000952613239334340232526403279584357599078031552685814558878035133743170544959202779353990371815623298343201613912315898940738228917035645023719037626911857705380041500461382113126766759977093121510552820376530319677515402179599246456630106795394152505425438935070060531719936576698658338932346279230735744788740793482466446986560579536812004750001507043823094677033490368235617870211513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e6ae34f4e6f283b92efcaa61499de1618977bb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.chip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dasprodukt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.focus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.holidaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jameda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.med1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.so-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.streampicker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-amp-sp.mein-schoener-garten.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184bf1ea2e60000040300473045022035df09e2d0c2bbed294227b4c46919843a3c9c2a39072f72c67078b7aad18199022100c40f3874731992980909e299d5d37d5705888d86cf7105421ccf9fb90cc0a3760076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184bf1ea32d00000403004730450221009c0a4db1ffa41299661f700ab457755af2257933e39c1e60b51f0b7aead786cf0220645fcbc495ec18103dee70f6e0ba2f6ab5bfbc6bebd2739354a8e0f5cda1f5c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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