qr.net-promo.de

Issued by R3

About this certificate

This digital certificate with serial number 04:70:c5:93:de:76:e6:40:ae:3e:cd:eb:da:72:b9:8d:c1:6e was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=qr.net-promo.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:c5:93:de:76:e6:40:ae:3e:cd:eb:da:72:b9:8d:c1:6e
Serial Number (int): 386823394517109042474732693016197999739246
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:f7:31:21:86:04:0e:c4:4e:20:52:f3:65:22:64:3f:32:5c:33:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:9d:80:39:15:e3:3f:64:a6:b0:93:ab:cc:67:cb:6d:c1:57:33:71
Fingerprint (sha256): 4f:3a:84:8f:e7:ff:02:f8:b3:f3:86:cb:4c:4f:69:d3:82:d0:ea:5e:23:a0:4b:b7:31:d2:76:49:16:99:3a:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate qr.net-promo.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qr.net-promo.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsgvo.net-promo.de
net-promo.de
netpromo.de
qr.net-promo.de
sprachzertifikat.net-promo.de
www.net-promo.de
www.netpromo.de

Other certificates including the domain name net-promo.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for qr.net-promo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386823394517109042474732693016197999739246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 01:17:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 01:17:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qr.net-promo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023219679417607432311832529744125964539030147774101123045820583464933303040125210951400698396699169183704861107668748707821606312205290516336152751793246022627833270302664788963237992580175987708329632398567175347698481502049270944248352821398344248388381400475938248527920667957896725954222812836283416066305217702212620291573056728667319473274516479819706168854668174214547218245658987716112166564907722524200874553486327864509789439999215709213784765184280698217700368831951637724680730979563904124166063773534814957150612331242528887734344383474484722962783990414476713655174459831269877051861128893224085550576251998470643268133478501792439086956660142475522454113050934975639098833682187720812506040120126826730524274079978843874094631172762571236506291902984503093887933066156874676882633165747956504913935803639317314517638430765386105976087219125383999686369697419424465199507484703213561797120961876071092614338868051308358886827416801722409031511840418307385190291932075925351790184464272630212836443444200198503636319015120572668003943865140465582943343664938758061641689326473564045430993101156937934142407403578340893719963876388962460313594389598208333135230033892677865422120242581687851500253896534939293678293125287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13f7312186040ec44e2052f36522643f325c33f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsgvo.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpromo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprachzertifikat.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netpromo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cae36b664000004030046304402203a6e80a29f76a2c827e6fe203766d9352e0868ef482bfdafba8b9d6fd6be064b0220236c0cba4853ed69c9789f8c5a57a7d208cabf7f21809458f634fbd1069aaad100770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cae36b71700000403004830460221008a120c5424974d6483eaebbe94f8fd5faab72635a5faf87db4df6c1d56281a2c02210089e610ee5a680fd8847d29b3c26046a62dd14f9a332158149696efd0f01490fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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