schwab.de

Issued by R3

About this certificate

This digital certificate with serial number 04:1d:9f:5d:58:29:be:dc:a1:4f:1e:9e:52:93:1b:6f:a5:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=schwab.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:9f:5d:58:29:be:dc:a1:4f:1e:9e:52:93:1b:6f:a5:93
Serial Number (int): 358529164290845316051433329030059843888531
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:e9:11:81:5c:73:c6:af:13:30:de:27:b4:b2:31:04:d5:50:0f:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:d9:d5:12:02:14:7d:8e:21:88:ee:4a:58:27:b2:01:f2:b5:ac:3d
Fingerprint (sha256): 49:de:15:c0:01:ca:2c:10:35:b4:be:cc:cf:42:d3:6f:8a:12:c0:cf:50:27:ee:52:f7:3e:1b:02:e0:13:eb:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate schwab.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for schwab.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

schwab.de
www.schwab.de

Other certificates including the domain name schwab.de

(limited to 100 certificates)
news2.schwab.de
news2.schwab.de
test3.schwab.de
ews.app.schwab.de
news2.schwab.de
staging.schwab.de
img.schwab.de
m.schwab.de
testexport.schwab.de
img.schwab.de
*.oghub.io
web.schwab.de
m.schwab.de
js.oghub.io
news2.schwab.de
schwab.de
*.oghub.io
m.schwab.de
*.oghub.io
img.schwab.de
testexport.schwab.de
cakmzz.schwab.de
schwab.de
schwab.de
js.oghub.io
*.oghub.io
news2.schwab.de
img.schwab.de
sv.schwab.de
img.schwab.de
cakmzz.schwab.de
*.oghub.io
js.oghub.io
gitlab.schwab.de
jira.app.schwab.de
gitlab.schwab.de
www.schwab.de
gitlab.schwab.de
news2.schwab.de
schwab.de
schwab.de
*.oghub.io
www.schwab.de
project1.schwab.de
testexport.schwab.de
gitlab.schwab.de
export.schwab.de
news2.schwab.de
*.oghub.io
news2.schwab.de
remote.app.schwab.de
news2.schwab.de
staging.schwab.de
staging.schwab.de
export.schwab.de
js.oghub.io
schwab.de
asmreports.schwab.de
news2.schwab.de
news2.schwab.de
*.oghub.io
gitlab.schwab.de
*.oghub.io
news2.schwab.de
web.schwab.de
*.oghub.io
news2.schwab.de
cakmzz.schwab.de
gitlab.schwab.de
js.oghub.io
news2.schwab.de
js.oghub.io
testexport.schwab.de
testexport.schwab.de
export.schwab.de
gitlab.schwab.de
www.schwab.de
web.schwab.de
img.schwab.de
schwab.de
m.schwab.de
www.schwab.de
remote.app.schwab.de
img.schwab.de
schwab.de
export.schwab.de
gitlab.schwab.de
js.oghub.io
gitlab.schwab.de
export.schwab.de
www.schwab.de
www.schwab.de
js.oghub.io
schwab.de
export.schwab.de
export.schwab.de
schwab.de
web.schwab.de
schwab.de
sv.schwab.de

Certificate

The complete raw certificate details for schwab.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISBB2fXVgpvtyhTx6eUpMbb6WTMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEyMDkxOTA0MDJaFw0yMzAzMDkxOTA0MDFaMBQxEjAQBgNVBAMT
CXNjaHdhYi5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoiOAd9
83WdNE4I71ibuZ6Rmr00Gsa7W/BC/plr9CpvHxkwUMIMUu0YwVQG5UrMKFNkjTGc
MA8Z/BRHjYKjE7boA8nJPSmKOHByJFkfRUaK+BnnxrcZy0Js07+yJgtKP96bNZGu
Oyy2ZNDUp01mC3ZHax6mmYNcquapK31CP8UmtGIPb55FvrSMrDS1QGe97IpOhH9z
v16tpcruHKE5KNOWSMz9LQJivm0L8PTF+GPG2941MKNoxrorN8LQUCKaLqChBd0E
1LaUnwq9n4oyYb3og6X+NOAs3rrsSllIKtuOqw1SD0pvSe6cU6FuZTsXWHrEqe91
c3vHg6fvBQvkIjMCAwEAAaOCAlIwggJOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
mukRgVxzxq8TMN4ntLIxBNVQD5MwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIwYD
VR0RBBwwGoIJc2Nod2FiLmRlgg13d3cuc2Nod2FiLmRlMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAtz77JN+c
Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGE+HzZ8gAABAMARjBEAiBWC1d0
lfR2S3N8sHLsSysP6LtS8V8T45bQiowuX5+9ZwIgDZMJsoec1wZcanpp32xd/yWA
KMGU6hm+atJxcY8fONYAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9
bgAAAYT4fNnsAAAEAwBHMEUCIBMJ7W5E5S94j5IuwnDJiE6u8UTPrUKKhhPhDkyU
CKFMAiEAj66nJsPVSg9R9K4wPakeuiuRckHlsQusHbiTaPE6nQ0wDQYJKoZIhvcN
AQELBQADggEBAFX+4JH8BMk+sSSOQyRg5nt3HIWd117Em0ghTfIR6LOYQ6//Sn1s
kMRGJTyUXbobPUUKLsQqVc48uq/SrtaboTMRDC4RBRjSt426DNCgwFyN0Fn1eBdw
RPClhfqZWufRZDOn9rnq9bqBEFJYcYrzRC6+01p0uYVuzP4rHLsIV0OBSxJF1CYQ
zOBtgMiuaZNyRRd6kEnlTC3iQGXzr1rFjC+/5PR9M50Ykpz9kWkhqH0dDBs6fSjH
ee/K2PkLDzlJpXxifgyTVzHKkKX5Vk5LdPVxPypS6XTMENGC1mhXA+bY1YX7xvzU
tzbLL0eBHX9PXdDz+HiG8hHWOzecz/qITzA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiI4B33zdZ00TgjvWJu5
npGavTQaxrtb8EL+mWv0Km8fGTBQwgxS7RjBVAblSswoU2SNMZwwDxn8FEeNgqMT
tugDyck9KYo4cHIkWR9FRor4GefGtxnLQmzTv7ImC0o/3ps1ka47LLZk0NSnTWYL
dkdrHqaZg1yq5qkrfUI/xSa0Yg9vnkW+tIysNLVAZ73sik6Ef3O/Xq2lyu4coTko
05ZIzP0tAmK+bQvw9MX4Y8bb3jUwo2jGuis3wtBQIpouoKEF3QTUtpSfCr2fijJh
veiDpf404CzeuuxKWUgq246rDVIPSm9J7pxToW5lOxdYesSp73Vze8eDp+8FC+Qi
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358529164290845316051433329030059843888531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 19:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 19:04:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schwab.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23497198674583260963427577358706265649890154648619506404800269791538101106807672372760555223852587658900221869810657774365280500262615215532357909724252924232729257246461485910798093324108372275084208294437847993374289861558314119637746229928990070183952341317228264408114471280824491408907506173320569315254811020790931206293355890325601031021733629297078260494041408931538518285296423936159078385436637562281968657952603147802844342059128534125455354085383646639542910929505282155234754720788193429911755885275618119355072550641534382287152230764585465962849467957896079035063941081764373002255205890514142403764787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ae911815c73c6af1330de27b4b23104d5500f93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schwab.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184f87cd9f200000403004630440220560b577495f4764b737cb072ec4b2b0fe8bb52f15f13e396d08a8c2e5f9fbd6702200d9309b2879cd7065c6a7a69df6c5dff258028c194ea19be6ad271718f1f38d6007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184f87cd9ec000004030047304502201309ed6e44e52f788f922ec270c9884eaef144cfad428a8613e10e4c9408a14c0221008faea726c3d54a0f51f4ae303da91eba2b917241e5b10bac1db89368f13a9d0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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