review.www.11freunde.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 57:fa:39:4f:73:b5:b0:50:c4:39:38:7b:d1:79:78:e9 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=review.www.11freunde.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 57:fa:39:4f:73:b5:b0:50:c4:39:38:7b:d1:79:78:e9
Serial Number (int): 116942072240104058951045509557836675305
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:f9:09:64:51:4b:bd:01:8a:7a:23:c4:8b:a1:d6:64:22:dd:89:93
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 3e:68:dc:93:62:c1:53:d2:ae:4f:bc:d0:12:08:04:d8:b8:73:73:38
Fingerprint (sha256): 43:62:91:65:eb:bb:d8:e4:9b:6d:0d:ab:7c:f2:84:ff:7c:e7:d8:59:2b:f5:74:f8:1d:11:f0:f0:ad:de:df:2a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate review.www.11freunde.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for review.www.11freunde.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

review.www.11freunde.de
www.review.www.11freunde.de

Other certificates including the domain name 11freunde.de

(limited to 100 certificates)
serviceportal.dpv.de
serviceportal.dpv.de
serviceportal.dpv.de
*.aboshop.11freunde.de
www.weltski.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
aboshop.11freunde.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
derspiegel.eu
*.aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
int.serviceportal.dpv.de
*.11freunde.de
*.11freunde.de
bilderwelt.11freunde.de
review.www.11freunde.de
serviceportal.dpv.de
data-664e19af6d.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
cdn.prod.www.11freunde.de
aboshop.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
amp-manager-magazin-de.manager-magazin.de
aboshop.11freunde.de
aboshop.11freunde.de
int.serviceportal.dpv.de
*.11freunde.de
san-15-s10.tlsprovisioning.exacttarget.com
stage.serviceportal.dpv.de
review.11freunde.de
tippspiel.11freunde.de
baseendpoint.11freunde.de
review.11freunde.de
int.serviceportal.dpv.de
baseendpoint.11freunde.de
amp-manager-magazin-de.manager-magazin.de
serviceportal.dpv.de
www.11freunde.de
www.11freunde.de
serviceportal.dpv.de
baseendpoint.11freunde.de
stage.serviceportal.dpv.de
*.11freunde.de
review.www.11freunde.de
*.aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel-staging.11freunde.de
serviceportal.dpv.de
aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
www.weltski.de
aktion.11freunde.de
baseendpoint.11freunde.de
shop.11freunde.de
serviceportal.dpv.de

*.11freunde.de
serviceportal.dpv.de
interred.11freunde.de
aboshop.11freunde.de
amp-manager-magazin-de.manager-magazin.de
www.weltski.de
serviceportal.dpv.de
*.11freunde.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel.11freunde.de
serviceportal.dpv.de
www.11freunde.de
dev.serviceportal.dpv.de
tippspiel.11freunde.de
*.cmk.iqdigital.de
*.aboshop.11freunde.de
aboshop.11freunde.de
aboshop.11freunde.de
data-d687fc47c0.11freunde.de
int.serviceportal.dpv.de
derspiegel.eu
www.11freunde.de
shop.food-magazine.de
int.serviceportal.dpv.de

Certificate

The complete raw certificate details for review.www.11freunde.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Iho8qfWkpq87Z/pOW4
bBwnlHPoOKoF1dnFpTCGU4yu0Y6fdFzv0Md5gghBvlzdq8fvmEEDfXnIewyen+K9
/BA7nbqhsMuMxxahkUjFw9UFCr9DmJ0wYG/EWHdar4JE0t53CdkM25mP24xB80PD
KcGTK1onTS0Jwck15Vr5lcpQKcBNhOS03kopE4THRB8/SsHf+tEzZrIwSHIT2X4R
NipYHSxHRJT6PA2RLLUXRgB0r+zPG4XNtDt0hG6JWoj/j7Ioy0lHGTtwBh5Wl1GN
cusg95889GIN/80l6kKuitw4bsN6ESP+MI2SCVs/BTnI/pp4RivqAFVAcvApkJOy
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116942072240104058951045509557836675305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'review.www.11freunde.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26692562641490550197156141681617807354048994867772404629094362597410111363513866262066523228621266861385217483273284686587062329717723174761289132379321251679359944493321644850600433605951663934115684172617554474033670746815662237827662978973047257292166152333416053638744830417562688874320061372442461161751244883890407181565008412126609530153459865284952137205755727191349385433008648984007761104797329810043447048755635704784769188263358461280339459283030202876424966117675345800900748024751195185638504971417001837394817536021385541837329887370439710197066847108905548598476635781709103399529905926572026199519949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4af90964514bbd018a7a23c48ba1d66422dd8993
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.www.11freunde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.review.www.11freunde.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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