www.neuer-bund-verlag.de

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 03:bd:ae:91:43:72:15:fe:bb:5e:8f:f0:6d:50:cf:b6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.neuer-bund-verlag.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:bd:ae:91:43:72:15:fe:bb:5e:8f:f0:6d:50:cf:b6
Serial Number (int): 4972568741845847069623112183604891574
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 62:67:32:f3:5a:28:26:f3:43:36:a0:0d:dd:b0:e5:05:6a:1d:97:f6
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 5e:cf:61:6f:48:c7:5d:7a:30:cf:60:44:81:92:5f:08:52:bd:47:d8
Fingerprint (sha256): 3f:8b:5e:cb:fa:e0:67:4b:61:08:0f:a7:6b:2c:d1:83:14:8e:52:68:fd:1a:5b:2f:60:27:3e:30:d9:72:30:7f

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate www.neuer-bund-verlag.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.neuer-bund-verlag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.neuer-bund-verlag.de
neuer-bund-verlag.de

Other certificates including the domain name neuer-bund-verlag.de

(limited to 100 certificates)
www.revistacipcisa.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
digiprospekt.freyplus.de
webkiosk.magazinmarley.de
egsk.weita.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
www.neuer-bund-verlag.de
www.neuer-bund-verlag.de
autodiscover.epaper-poonen.neuer-bund-verlag.de
katalog.hltravel.at
katalog.isa-racing.com
immomagazin.wegenerimmobilien.de
neubau-projekte.vr-immoservice-mainfranken.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.airhoppark.de
publikationen.manres.ch
epaper.hz.de
rieswick.mediaflip.de
ebooks.teammelanie.nz
www.neuer-bund-verlag.de
neubau-projekte.vr-immoservice-mainfranken.de
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.suncruisermedia.com
www.neuer-bund-verlag.de
kiosk.dorfstadt.de
booker.turningpages.me.uk
egsk.weita.ch
kataloge.pricon.one
*.neuer-bund-verlag.de
webkiosk.magazinmarley.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
mitarbeitermagazin.uk-essen.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.epaper-kiosk.beam-verlag.de
epaper.hz.de
epaper.technischesysteme.com
epaper.ictjournal.ch
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
epaper.hz.de
webkiosk.magazinmarley.de
katalog.hltravel.ch
programme.holiday-event.de
www.neuer-bund-verlag.de
media.auvesy.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.lurkoi.com
booker.turningpages.me.uk
webkiosks.theuma.com
katalog.hltravel.ch
katalog.hltravel.ch
brochures.hts-touristik.de
prospekt.hirsch-ille.de
oldnick.thesatanicwarlock.com
newskiosk.lixx-lingerie.de
epaper.hz.de
rieswick.mediaflip.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.magazinmarley.de
www.infoblatt.at
dossier.benecos.eu
epaper.wta-suhl.de
katalog.lemo-schuh.ch
webkiosk.magazinmarley.de
katalog.hltravel.at
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
newskiosk.lixx-lingerie.de
prospekt.hirsch-ille.de
autodiscover.epaper-poonen.neuer-bund-verlag.de
katalog.hltravel.ch
publikationen.kmu.org
epaper.hz.de
neubau-projekte.vr-immoservice-mainfranken.de
webkiosk.magazinmarley.de
epaper.technischesysteme.com
epaper.hz.de
oppelt-kuechen.mediaflip.de
broschuere.arbeitgeber-banken.ch
webkiosk.lurkoi.com
webkiosks.sufijournal.org
katalog.hltravel.ch
kiosk.suncruisermedia.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
library.crestawards.org
egsk.weita.ch
epaper.chili-peppers.de
magazine.infoboard.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.technischesysteme.com
webkiosk.tii-group.com
katalog.hltravel.at
webkiosk.epaper-kiosk.beam-verlag.de
immomagazin.wegenerimmobilien.de
katalog.hltravel.at

Certificate

The complete raw certificate details for www.neuer-bund-verlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPx+wHemuSfHuHmmoshb
MjwYPGw5aQVRVdbYOhqqANetA45JUP5FNRWSFag0uW8OrrVWIAEjVEfp70Za7hDb
5xaS3S3cLxsWQMdf1r5zrY1wtBrbf4AU3mWtyxiuz9O+pIbv2hopWKx8ISNBHDRA
JbUgSmXryO8R7flTZr0s3bBKDWDHNeGNW8hagnG4zwOw7gvpts+VxFfCQAfe82Uk
2Y4NIE0dJEsbDukaPpxWyRb8JKQXDKkeQ+RfjOLyg63OC3ZfhvY8CtFEA6EPYWA4
gKmBwDYEOC8oLG29jug52JE1oI05twM6+VYuVaLAaPtW8SSUTV3iUkivcebuNjg4
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4972568741845847069623112183604891574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.neuer-bund-verlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18807779121329250389172967250565145420981342934089023212645004506160576754151356110278698809566460881126038187246477521517309828562891692910751193393028475913623229338161567802072720336685171123794785378268453357994082209572527092554674891000907590401842298671052614613948485020284627897502973196416459123901827414706306907224435400595913652466698583377626685360351104061137230736168203565473556094268119502627397269491514531001085731624165258911532901675544032652571802782367482642806426650338494671013256949625866891230962445538740898912761793341319460873199722729117944201071592383164506002006044113688013691173101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							626732f35a2826f34336a00dddb0e5056a1d97f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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