abo.spiegel.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f1:3f:71:53:a2:02:18:33:1f:2d:97:f3:fb:84:0b:f4 was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abo.spiegel.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f1:3f:71:53:a2:02:18:33:1f:2d:97:f3:fb:84:0b:f4
Serial Number (int): 320673360224614224555636134985563638772
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:fd:1b:9f:c1:f7:1e:77:2f:8c:f6:0b:19:dc:4f:dd:a9:73:97:94
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 40:4c:65:2e:18:9b:35:6f:1a:a2:7d:59:5d:30:c2:e3:fc:b6:80:86
Fingerprint (sha256): 3b:cc:c3:0f:b8:b5:fe:f6:56:67:5c:4d:c0:ad:eb:af:37:ae:04:77:91:6a:90:db:13:6b:57:e3:4e:6a:ff:1a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate abo.spiegel.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abo.spiegel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abo.spiegel.de
abo.harvardbusinessmanager.de
abo.manager-magazin.de

Other certificates including the domain name spiegel.de

(limited to 100 certificates)
jira.spiegel.de
service.spiegel.de
pushmanagement-ui.review.nextgen-services.spiegel.de
staging.sportwetten.spiegel.de
tippspiel.spiegel.de
gutscheine.spiegel.de
ssl.1.damoh.spiegel.de
digas.spiegel.de
amazonproductprovider.qs.nextgen-services.spiegel.de
shop.spiegel.de
imode.spiegel.de
review.assets.spiegel.de
newsletterversand.spiegel.de
vcdn02.spiegel.de
sftp.spiegel.de
qs.spiegel.de
vcdn1-secure.hls.spiegel.de
advent.spiegel.de
digasred.spiegel.de
SPIEGEL-Verlag Rudolf Augstein GmbH & Co KG
video-secure.spiegel.de
apiegel.de
cdnstatic.secure.spiegel.de
gcp.qs.www.spiegel.de
akademie.spiegel.de
cms.review.www.spiegel.de
arztsuche.spiegel.de
vcdn01.spiegel.de
einestages.spiegel.de
magazin.spiegel.de
eurojackpot.spiegel.de
derspiegel.eu
arztsuche.spiegel.de
m.spiegel.de
derspiegel.eu
gcp.dev.www.spiegel.de
advent.spiegel.de
www.spiegel.de
akamai-san8.exacttarget.com
newsletterversand2.spiegel.de
bento.app
fa.review.wisl.spiegel.de
gcp.prod.www.spiegel.de
tracker.it.spiegel.de
www.stepstone.de
m.spiegel.de
click.angebote.spiegel.de
einsurance.spiegel.de
cloud.angebote.spiegel.de
sams.spiegel.de
aubapi.spiegel.de
arztsuche.spiegel.de
review.www.spiegel.de
review.journalsuite.spiegel.de
service.spiegel.de
contentgarden.spiegel.de
static.gruppenkonto.spiegel.de
www.weltski.de
review.journalsuite.spiegel.de
bento.app
cdn.secure.spiegel.de
cdn.secure.spiegel.de
www.weltski.de
bento.app

sportwetten.spiegel.de
click.angebote.spiegel.de
dev.www.spiegel.de
digas-review.axelspringer.de
m.eurojackpot.spiegel.de
prod.warden.spiegel.de
service.spiegel.de
view.angebote.spiegel.de
kopfsache.spiegel.de
www.weltski.de
ivwbox.spiegel.de
www.stepstone.de
aubapi.spiegel.de
contentstation-qs.spiegel.de
microshop.spiegel.de
gluecksspirale.spiegel.de
streaming.hls.spiegel.de
dev.fanexperts.spiegel.de
dev.talk.spiegel.de
sportwetten.spiegel.de
lotto.spiegel.de
microshop.spiegel.de
spiele.spiegel.de
staging.sportwetten.spiegel.de
elvis-qs.spiegel.de
vpn.spiegel.de
eurojackpot.spiegel.de
dev.www.spiegel.de
cdnsource.review.www.spiegel.de
osp.spiegel.de
spiegel-de.spiegel.de
static.gruppenkonto.spiegel.de
sats.spiegel.de
grafana.review.cm.spiegel.de
magazin.spiegel.de

Certificate

The complete raw certificate details for abo.spiegel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe5nzy9oYrb9xTLxiffi
e4+tm1v2RWwVpRl19QN2cp7QygcAgyuGf+DrCMZwK2qAA+b8ciVWvgao9d0Z7cIQ
zrMEN2essGiBkIPpnZ8RzmcKa0hgiUb+ePJz3C2u4KZEcl4QIvcu1cmx6+bo7KvH
miKJS4yv8RBHGW36c2DLAO42CeAYNJtEEa1VydIfCUCTgQp4AATgp4UABM9IUlPq
x3rNut2CBSnsX4BlaG4YGzC9ij4B8zZltCbWxvkXZdppluLwaXEVqV79AXEcIEtS
GUsPE1OY8SA8clYxLH1hYpZAjrAnIi8arbHNDtmtSckbrXsTQJ4L7qg+7mxpiA6X
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320673360224614224555636134985563638772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abo.spiegel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24481554994637162306536247513406686994256052999595535813225200534842061066425191757058969465309666936327885785962954212956173298027918137304527597800852597819460225719692435051169971514083758949822857317591940371676731297028468071141961885886358359145216369904242796648288217203851336953145934791036430760092435464427764199392289655456283389258068435433225968084936512283038453690976522216994775057348280269383568336962955673409894763734593771598326023012111585541464085841656947643731781320381442720613075887362778832247130372390368891592966188399024655027887655520992826464577394340168127217786006927168572511655849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0fd1b9fc1f71e772f8cf60b19dc4fdda9739794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo.harvardbusinessmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo.manager-magazin.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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