www.baeckereibuettner.de

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:24:bb:00:2d:af:9e:cd:38:05:b7:ab:ed:3a:db:6b:ab was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.baeckereibuettner.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5d:24:bb:00:2d:af:9e:cd:38:05:b7:ab:ed:3a:db:6b:ab
Serial Number (int): 293031941089908439195415297589213319097259
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:52:56:62:ae:04:e8:4f:cb:5f:e0:ce:a6:0c:22:9e:e6:b2:89:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:4d:bf:52:6c:05:26:c7:79:52:a7:b1:a4:b1:f5:20:eb:4b:ab:d5
Fingerprint (sha256): 43:c7:ca:f6:cb:dc:63:88:1f:71:0c:df:39:8a:73:56:92:08:03:6a:e9:38:3c:dd:92:1c:ba:3e:93:4d:40:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.baeckereibuettner.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baeckereibuettner.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baeckereibuettner.de
www.baeckereibuettner.de

Other certificates including the domain name baeckereibuettner.de

(limited to 100 certificates)
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
mediathek.stiftung-liebenau.de
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
prospekte.intersport.de
webkiosk.dein-typ.de
catalogues.meister.com
www.baeckereibuettner.de
epaper.glasmarte.at
kiosk.storyboard.de
kataloge.quester.at
kiosk.greater.sydney
www.baeckereibuettner.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
kataloge.quester.at
kiosk.greater.sydney
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
ca.lyreco.de
webkiosk.wonendoejezo.com
kataloge.fuerholz.de
kiosk.greater.sydney
tennis.yumpu100.com
webkiosk.reven.de
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
pub.vermoegenszentrum.ch
www.baeckereibuettner.de
kataloge.fuerholz.de
baeucke.mediaflip.de
magazin.wiese-rt.de
ssl.yumpu.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
ssl.yumpu.com
kataloge.fuerholz.de
kataloge.quester.at
kataloge.my-workwear.de
webkiosk.creativstudio8.com
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
spezial.holzschwab.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
ssl.yumpu.com
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
ssl.yumpu.com
tennis.yumpu100.com
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
kiosk.greater.sydney
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
boeden.holzschwab.de
epaper.glasmarte.at
ssl.yumpu.com
cf.completesportsnigeria.com
ca.lyreco.de
tennis.yumpu100.com
journal.burgls.at
www.magazine-kraftquelle-bgl.de

Certificate

The complete raw certificate details for www.baeckereibuettner.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293031941089908439195415297589213319097259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 13:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 13:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baeckereibuettner.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745726896350890211410799882426724778047767880364710691311375137641684403816862833998584975388107252618930917234866797956180725952351886831072020024083542515616345824550625656767722899859349211672404660446426238974061517835304660463483143016811080663509714948537349267136533233070791751018230066259796203619815459004869193834203850681893142649484568104544554531164659237774418371829815352412931555239193961065794066374406382620106825647238376388708602375958633696694402271307454970828217749184983566187661014785019916124978322944879839221989701612296832036298787781393590302672070895235795365657227601636478368873169405141715004886408511871962902544472974450197582724586033659180035668896613482995665008999784188640045879900352139852333539445126101117802461501547480962778701027336127130050662022449842758051990036359725045620089350593725201544679915418702794320587696603102673126284766992974559944020917192291216401765053323260150076528913584668916699161697815695413301511485120856235056708253013378683113023688050326548929512901193920173126821926111104061162910195498965900901142801392081633115302123641435295347623243610818758103000257937618986365986863106422622420408967312815310793482974712709663437793128571400480344419427567769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38525662ae04e84fcb5fe0cea60c229ee6b2893e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baeckereibuettner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baeckereibuettner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ecda60520000004030046304402205d62749ce9658a676ab49f2182b695729b5dc0eae009aadd996656851686922502201855759bf2af50e16eaa25dfef197140e230b1c585669f1b6c106b2566cc2a650077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ecda605230000040300483046022100b64dd0ed4bcac40ac3ff6b6a48f56460d472ddece084acd9b6dd969d00816b0302210085278239fb63136c0087ca92cb165d0ab66c8902a6cf3b8f58dea9ef387e809c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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