nannenpreis.de

Issued by R3

About this certificate

This digital certificate with serial number 04:69:1e:ad:60:13:e2:ea:28:62:3f:b7:72:c5:d7:93:b9:d6 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nannenpreis.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:69:1e:ad:60:13:e2:ea:28:62:3f:b7:72:c5:d7:93:b9:d6
Serial Number (int): 384219569309656482981416610198660339448278
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:16:12:51:ec:f6:a4:f7:11:95:ab:8a:3e:1d:a8:ee:14:97:27:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:fb:ea:d4:ac:57:5a:fe:c4:4c:5f:30:2d:db:e6:69:14:50:9a:24
Fingerprint (sha256): 4f:02:1d:63:8d:35:97:4f:37:79:e7:e9:2f:2a:3e:4e:00:4e:85:61:ea:6e:4d:8c:0b:d0:2f:7d:98:9f:4a:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nannenpreis.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nannenpreis.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitmanager-media.de
bitmanager.de
gruner-jahr.de
gruner-und-jahr.de
grunerjahr.de
mechabuilders.de
nannenpreis.de
www.bitmanager-media.de
www.bitmanager.de
www.gruner-jahr.de
www.gruner-und-jahr.de
www.grunerjahr.de
www.mechabuilders.de
www.nannenpreis.de

Other certificates including the domain name nannenpreis.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for nannenpreis.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISBGkerWAT4uooYj+3csXXk7nWMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDgwMzQyMjRaFw0yNDA1MDgwMzQyMjNaMBkxFzAVBgNVBAMT
Dm5hbm5lbnByZWlzLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
pZHFowFxkYx3tLPmlU+kTX8isRqoRXLVfFPrR4QtAbtkPot7gwdQijHrpkEREgVc
KPhksIeX9wsqjyfrLJEoH5dBCAoi9Wh01VYLHiNX5KIH01yiXSMtQSbzyoKvMCsv
LiTO/epLLymw4EZcMhHQUkozXofSV4KhAmesqhlRkEnMmQok9k479GzXPIj1bKQ2
HMXumhRlRBjqe1KRPHkAlZfqPZgCBkARKXeLfXllPhJPlhe7CRDXp/q9n4yfYe+E
gc/tg/3zPuSfdBROCUkei3hLrujpv9J+ahVjehr4ERCgem3yH4baaIGyYOstUICP
e839X1eKfV7KlA7tNW+AJQIDAQABo4IDFjCCAxIwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQWFhJR7Pak9xGVq4o+HajuFJcnJzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCARsGA1UdEQSCARIwggEOghNiaXRtYW5hZ2VyLW1lZGlhLmRlgg1iaXRtYW5h
Z2VyLmRlgg5ncnVuZXItamFoci5kZYISZ3J1bmVyLXVuZC1qYWhyLmRlgg1ncnVu
ZXJqYWhyLmRlghBtZWNoYWJ1aWxkZXJzLmRlgg5uYW5uZW5wcmVpcy5kZYIXd3d3
LmJpdG1hbmFnZXItbWVkaWEuZGWCEXd3dy5iaXRtYW5hZ2VyLmRlghJ3d3cuZ3J1
bmVyLWphaHIuZGWCFnd3dy5ncnVuZXItdW5kLWphaHIuZGWCEXd3dy5ncnVuZXJq
YWhyLmRlghR3d3cubWVjaGFidWlsZGVycy5kZYISd3d3Lm5hbm5lbnByZWlzLmRl
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNhwYsTQAABAMASDBG
AiEAlnx7geX7H/GkWUYsqGW4qPgwkkmCKVU7Br1VILufOEsCIQD1GcP7E3x6cXcd
Sdfd+oRKcZEQUb2YwZ6XtzbDRbBWCwB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i
2reK+Jpt9RfYAAABjYcGLHUAAAQDAEgwRgIhAPE9El3KwAW8FpEYy25gfHyAjzQr
WKIzkTU8sdAQm5kwAiEA/bHfL0R701e/zynE5MFJ1hAvtwiRI2RBa0dzH1/QOr0w
DQYJKoZIhvcNAQELBQADggEBACRAbJZCuO7x8TobmNi5lpbzE9QorjNboEurmhkt
sisD43efdGKSgdJjR2HrTDYE2aTWBEhQZQTO/vj6fcjCsvrM9pN0vEnkmA1Ygd00
8TbbfjHgnhUiAC4rs5jesaOk4odGpNUcIUo2+KB6nH3jSqqz0hDpVdaX0t1aySVI
DSnsj7K3glaqh8toUsxZ9WLoGuRvirhONijVBffvZdpUzMK0wOsdrB2/3pmxe2vY
hfLZbeKl1RhtjZy8+cksLm0dw/s9RhJyZR7DyLY6M+cMpVQUBKrp0cNbWMu+kaKA
y7VNnCmAqfEEAgaySD8vuUAlKFQJJK7IgLUGwnNJVstjenQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZHFowFxkYx3tLPmlU+k
TX8isRqoRXLVfFPrR4QtAbtkPot7gwdQijHrpkEREgVcKPhksIeX9wsqjyfrLJEo
H5dBCAoi9Wh01VYLHiNX5KIH01yiXSMtQSbzyoKvMCsvLiTO/epLLymw4EZcMhHQ
UkozXofSV4KhAmesqhlRkEnMmQok9k479GzXPIj1bKQ2HMXumhRlRBjqe1KRPHkA
lZfqPZgCBkARKXeLfXllPhJPlhe7CRDXp/q9n4yfYe+Egc/tg/3zPuSfdBROCUke
i3hLrujpv9J+ahVjehr4ERCgem3yH4baaIGyYOstUICPe839X1eKfV7KlA7tNW+A
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384219569309656482981416610198660339448278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 03:42:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 03:42:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nannenpreis.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20901203180842161189978658146066315463030476897288908867535141756097056379118012859568162949265510861251006507973718356632021334956595456687792888652018553476220051474387100141901654341301570401479540024472461985761718432545230750350818492389908473165671587383204524201486292028653507168234680854162988378175466978692552637506123832505710257956668097930135604654044230773395965740625875511190488184859119895398658579830175217320503767533973103364192800790652760868783010284050331342916046334621141699066647345558801728218793606715622765939126348516232485323955785598943369921247210627501297198100612296314145188315173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16161251ecf6a4f71195ab8a3e1da8ee14972727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannenpreis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d87062c4d0000040300483046022100967c7b81e5fb1ff1a459462ca865b8a8f83092498229553b06bd5520bb9f384b022100f519c3fb137c7a71771d49d7ddfa844a71911051bd98c19e97b736c345b0560b007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d87062c750000040300483046022100f13d125dcac005bc169118cb6e607c7c808f342b58a23391353cb1d0109b9930022100fdb1df2f447bd357bfcf29c4e4c149d6102fb708912364416b47731f5fd03abd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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