dolcevita-magazin.ch

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 3d:c4:83:f0:14:c0:00:8f:c9:31:71:43:1c:ac:75:14 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dolcevita-magazin.ch

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:c4:83:f0:14:c0:00:8f:c9:31:71:43:1c:ac:75:14
Serial Number (int): 82103273943991592860765573423139943700
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 2e:e0:93:85:4f:ab:7b:3a:c4:a3:41:ef:31:71:84:dc:c6:9c:5d:ab
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7d:ff:03:44:18:de:00:c0:a1:ec:c1:7c:4b:9b:7b:af:88:74:53:44
Fingerprint (sha256): 3d:8d:96:4a:64:79:08:af:0e:42:10:06:bc:36:90:cd:6e:cd:13:c6:f5:1a:20:39:68:02:fb:9a:38:98:3b:b5

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate dolcevita-magazin.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dolcevita-magazin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dolcevita-magazin.ch
www.dolcevita-magazin.ch

Other certificates including the domain name dolcevita-magazin.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
broschuere.bildkunstakademie.de
www.dolcevita-magazin.ch
kataloge.vitaltours.de
kiosk.dolcevita-magazin.ch
epaper.treffpunkt-bau.eu
moebel-mmz.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
moegro.mediaflip.de
ruesen.mediaflip.de
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
angebote.dersteirerhof.at
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
katalog.seglerbedarf.de
www.dolcevita-magazin.ch
kataloge.triplex-fischer.de
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
epaper.treffpunkt-bau.eu
sonavsofab.xp1.com
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
moebel-berta.mediaflip.de
epaper.sinntec.de
moebel-mmz.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
moebel-gruber.mediaflip.de
moebelundobjekt.mediaflip.de
katalog.unzerbrechbar.de
webkiosk.edeka-koehne.de
medien.koinno-bmwi.de
moebel-meyer.mediaflip.de
ruesen.mediaflip.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
logo-moebel.mediaflip.de
katalog.unzerbrechbar.de
catalog.triebel-guntools.de
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
moebel-gruber.mediaflip.de
epaper.treffpunkt-bau.eu
moebel-berta.mediaflip.de
moebel-meyer.mediaflip.de
mobila.mediaflip.de
kataloge.werbeartikel-laeser.ch
moebel-mai.mediaflip.de
moebel-mai.mediaflip.de
moebel-mai.mediaflip.de
webkiosk.werk5.ch
www.dolcevita-magazin.ch
dolcevita-magazin.ch
dolcevita-magazin.ch
jobst-wohnwelt.mediaflip.de
jobst-wohnwelt.mediaflip.de
medien.koinno-bmwi.de
dolcevita-magazin.ch
trop.mediaflip.de
moebel-mmz.mediaflip.de
www.dolcevita-magazin.ch
magazine.grossglockner.at
dolcevita-magazin.ch
moebel-gruber.mediaflip.de
webkiosk.holz-speckmann.de
moebel-seesen.mediaflip.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-mai.mediaflip.de
medien.koinno-bmwi.de
moebel-mmz.mediaflip.de
epaper.transgourmet.ch
webkiosk.tkmparkett.de
webkiosk.mediabiz.at
moebelundobjekt.mediaflip.de
epaper.transgourmet.ch
jobst-wohnwelt.mediaflip.de
dolcevita-magazin.ch
moebel-mmz.mediaflip.de
wohnland-hauber.mediaflip.de
epaper.transgourmet.ch
moebel-brameyer.mediaflip.de
katalog.seglerbedarf.de
trop.mediaflip.de
ruesen.mediaflip.de
trop.mediaflip.de
www.dolcevita-magazin.ch
moebel-mai.mediaflip.de
epaper.mediaradius.it

Certificate

The complete raw certificate details for dolcevita-magazin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXKqeDA956o8V0GBJUl8
+oKOe7xdpTxn+10HGqnAko5r3U6P3ypC0WLP3uEGSEf3bAs/nzqdzennzk86m8T8
nlUi23fBxX/LAalOzDf8LiNyl/ysHXI7f4U3XTO21oN+TLR01Tn7QJse3/R9xJsp
plQmHbgEhztbk9ZnA0QxAKmY8RYineh+B3a0+zApLqVmq3FnGmS7i2MqqOFbc4nC
OaaImtv4M7Wq6MMrjqMNqrOPrhr1gfAH8v5HLqbawPb0KmMjm7M9qyQSAt47LNCr
swpxeg2O3F985yWwEoIw8P0UcFBRBJAQZu7iML4tm1TQ7WSukmorWoOJMiwTekyJ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82103273943991592860765573423139943700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dolcevita-magazin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16846238421434048570443877957212229359548794802907325585107340757940929287242147995431969702991952642951121772574422100740595387665612026928295601219747157491156690534704942409669610620329384567193960955627514920893076537235010100262141747537664714530447403013842140392230995432116862508843118542560145175543326051292842210063207833129400433398441528447211388051487449080869160465372945272783852007427466229185976803447449275461116528169470539882395994257387816573968043834058501954021530228254869687573554651023591420052729657286185367925375868332794900367190421337787107168503708376448717802547393406954630923717049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ee093854fab7b3ac4a341ef317184dcc69c5dab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolcevita-magazin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolcevita-magazin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168fcbf655a0000040300473045022100f2b1083adf2cb6831b4fc6e48ff9a6b6379d0eab1826662506562545b8516de302207c91d7eee55aba9aa2ea62be28838363998040afd7a6e8aeb9df0f4c50267caf007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168fcbf65990000040300473045022100f136a273541d39caf814083431ecb235fe6be96de72215a528a54699bee3831f022021f5032cbd669440ff94eaa1e08d05d662ba2f177570c95dd55d02d2adbb1584
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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