qr.net-promo.de
Issued by R3
About this certificate
This digital certificate with serial number 04:70:c5:93:de:76:e6:40:ae:3e:cd:eb:da:72:b9:8d:c1:6e was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=qr.net-promo.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:70:c5:93:de:76:e6:40:ae:3e:cd:eb:da:72:b9:8d:c1:6eSerial Number (int): 386823394517109042474732693016197999739246
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 13:f7:31:21:86:04:0e:c4:4e:20:52:f3:65:22:64:3f:32:5c:33:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 33:9d:80:39:15:e3:3f:64:a6:b0:93:ab:cc:67:cb:6d:c1:57:33:71
Fingerprint (sha256): 4f:3a:84:8f:e7:ff:02:f8:b3:f3:86:cb:4c:4f:69:d3:82:d0:ea:5e:23:a0:4b:b7:31:d2:76:49:16:99:3a:2b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate qr.net-promo.de
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qr.net-promo.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dsgvo.net-promo.de
net-promo.de
netpromo.de
qr.net-promo.de
sprachzertifikat.net-promo.de
www.net-promo.de
www.netpromo.de
net-promo.de
netpromo.de
qr.net-promo.de
sprachzertifikat.net-promo.de
www.net-promo.de
www.netpromo.de
Other certificates including the domain name net-promo.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for qr.net-promo.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISBHDFk9525kCuPs3r2nK5jcFuMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjgwMTE3NTBaFw0yNDAzMjcwMTE3NDlaMBoxGDAWBgNVBAMT D3FyLm5ldC1wcm9tby5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB APrPntZ1tx1u1mq7HNTGRo8DjqZvBDBQlKk4BGqoDoEzChTz6OlvNkGcVRMFHAmn lsJA62B8eLf9P85oDt/VCQvEpJdbhSp1dWVnFOE0Vm1c8Q+SMrTxMWCmQM5xwPoF PYWRDMK7AgXQNS0Qch8MMfCRmhBqRdeldO7k3zCaJDJf2IxHSA12tLrae3gWVFdc WZMiL06rCFHgeG/m8y83JdcrhOcX0Xps6BaOqHQVC9EF6nCMKFm4QzyHH+zcxgfd i7uGcPcr05D71Zm7I2gNSVlXLBu3CA+IvPmOhPqvKiKacSPf0glW+nlX4UnhAT+b NaoEt5j1Z0x2+eC7p8q/aILB1D4curATHmCc2FeZqDLnIEPz0tCkjqYeVxeVaGu/ yKpVTpBr+lNrttmtmsjjxXW+tPr1jy0HydL9LzUg30Lf1KFDVuVJTCpM7WNuZ21e o2I1rdOhhjnYpjnusZUUqnh5564yzFqmvyJQ9pGIVag4fpb3V2tsA9srZbLlMXjJ FzCeXByuU7gQP/TEOKqoePNyVxL0YCLVJ49VxxBJIW+Avov9b8zRtyrsyEAO9l06 tKCKZDQ2p3vAdoQYLr7Q5y/HOejg4yWaOqeIc+nHBMgiktJUspqQQYwXMS/gwDLO mnV3FKHlMeRTnUoK561V4+2zrr3rSYW2Y5Gi7ZAKBoinAgMBAAGjggKFMIICgTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBP3MSGGBA7ETiBS82UiZD8yXDPyMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMIGNBgNVHREEgYUwgYKCEmRzZ3ZvLm5ldC1wcm9t by5kZYIMbmV0LXByb21vLmRlggtuZXRwcm9tby5kZYIPcXIubmV0LXByb21vLmRl gh1zcHJhY2h6ZXJ0aWZpa2F0Lm5ldC1wcm9tby5kZYIQd3d3Lm5ldC1wcm9tby5k ZYIPd3d3Lm5ldHByb21vLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB BAHWeQIEAgSB9QSB8gDwAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGMrja2ZAAABAMARjBEAiA6boCin3aiyCfm/iA3Ztk1Lgho70gr/a+6i51v 1r4GSwIgI2wMukhT7WnJeJ+MWlen0gjKv38hgJRY9jT70QaaqtEAdwAp0DobtnSq cRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYyuNrcXAAAEAwBIMEYCIQCKEgxU JJdNZIPq676U+P1fqrcmNaX6+H2032wdVigaLAIhAInmEO5aaA/YhH0ps8JgRqYt 0U+aMyFYFJaW79DwFJD6MA0GCSqGSIb3DQEBCwUAA4IBAQCebPXjMEuCXVhWmyAd QQJaG/uH6YT+Pubeu5eyqpVsj+kexHJ3QxnUoJ0sAc+crVNIuyTagDcVcBdSXE0E bdfhW4lBFQgJ5FSmU2glli1VkCvpKl7YdjiAZT5sffR/Z27mmgrVK/OYoTSpKTaK bVntxBWs+azobw0E67OXUsyNI9yrTFYvNKLiswQEWRxasB8WJpilgY/4BRwoNXYt q6Zm9zlBmUeP4a19k4G7SdqKwxbXwUzTRoogM96yRFNiIgjJZLxRBSwFbKg9pVV0 1kjue6xMPoS+32HLavzxc3feqwZyYIQ1j4h+u5c6HF65tdMJhITAct3AcDE7FSpx UhYA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+s+e1nW3HW7Warsc1MZG jwOOpm8EMFCUqTgEaqgOgTMKFPPo6W82QZxVEwUcCaeWwkDrYHx4t/0/zmgO39UJ C8Skl1uFKnV1ZWcU4TRWbVzxD5IytPExYKZAznHA+gU9hZEMwrsCBdA1LRByHwwx 8JGaEGpF16V07uTfMJokMl/YjEdIDXa0utp7eBZUV1xZkyIvTqsIUeB4b+bzLzcl 1yuE5xfRemzoFo6odBUL0QXqcIwoWbhDPIcf7NzGB92Lu4Zw9yvTkPvVmbsjaA1J WVcsG7cID4i8+Y6E+q8qIppxI9/SCVb6eVfhSeEBP5s1qgS3mPVnTHb54Lunyr9o gsHUPhy6sBMeYJzYV5moMucgQ/PS0KSOph5XF5Voa7/IqlVOkGv6U2u22a2ayOPF db60+vWPLQfJ0v0vNSDfQt/UoUNW5UlMKkztY25nbV6jYjWt06GGOdimOe6xlRSq eHnnrjLMWqa/IlD2kYhVqDh+lvdXa2wD2ytlsuUxeMkXMJ5cHK5TuBA/9MQ4qqh4 83JXEvRgItUnj1XHEEkhb4C+i/1vzNG3KuzIQA72XTq0oIpkNDane8B2hBguvtDn L8c56ODjJZo6p4hz6ccEyCKS0lSympBBjBcxL+DAMs6adXcUoeUx5FOdSgrnrVXj 7bOuvetJhbZjkaLtkAoGiKcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 386823394517109042474732693016197999739246 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 01:17:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 01:17:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qr.net-promo.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023219679417607432311832529744125964539030147774101123045820583464933303040125210951400698396699169183704861107668748707821606312205290516336152751793246022627833270302664788963237992580175987708329632398567175347698481502049270944248352821398344248388381400475938248527920667957896725954222812836283416066305217702212620291573056728667319473274516479819706168854668174214547218245658987716112166564907722524200874553486327864509789439999215709213784765184280698217700368831951637724680730979563904124166063773534814957150612331242528887734344383474484722962783990414476713655174459831269877051861128893224085550576251998470643268133478501792439086956660142475522454113050934975639098833682187720812506040120126826730524274079978843874094631172762571236506291902984503093887933066156874676882633165747956504913935803639317314517638430765386105976087219125383999686369697419424465199507484703213561797120961876071092614338868051308358886827416801722409031511840418307385190291932075925351790184464272630212836443444200198503636319015120572668003943865140465582943343664938758061641689326473564045430993101156937934142407403578340893719963876388962460313594389598208333135230033892677865422120242581687851500253896534939293678293125287 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13f7312186040ec44e2052f36522643f325c33f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsgvo.net-promo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-promo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpromo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.net-promo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprachzertifikat.net-promo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.net-promo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netpromo.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cae36b664000004030046304402203a6e80a29f76a2c827e6fe203766d9352e0868ef482bfdafba8b9d6fd6be064b0220236c0cba4853ed69c9789f8c5a57a7d208cabf7f21809458f634fbd1069aaad100770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cae36b71700000403004830460221008a120c5424974d6483eaebbe94f8fd5faab72635a5faf87db4df6c1d56281a2c02210089e610ee5a680fd8847d29b3c26046a62dd14f9a332158149696efd0f01490fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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