nivea.de

Issued by R3

About this certificate

This digital certificate with serial number 04:10:38:fd:dd:6f:85:64:be:60:63:7d:51:42:79:67:47:93 was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nivea.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:38:fd:dd:6f:85:64:be:60:63:7d:51:42:79:67:47:93
Serial Number (int): 353969416507893298346200616814106208847763
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:76:ef:7a:c7:cc:16:73:19:6a:c4:3b:e2:31:3a:e1:69:d0:05:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:aa:22:89:4b:ed:18:0a:9b:0d:d8:60:b5:1f:3b:f7:e5:fb:c4:68
Fingerprint (sha256): 4f:c0:45:bf:fd:cc:2b:79:03:e2:15:e6:62:48:0c:da:be:eb:5e:3c:cb:90:41:51:5b:89:8c:60:e0:90:d4:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nivea.de

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nivea.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nivea.com.tr
nivea.com.tw
nivea.com.uy
nivea.com.ve
nivea.com.vn
nivea.cz
nivea.de
nivea.dk
nivea.ee
nivea.es
nivea.fi
nivea.fr
nivea.ge
nivea.gr
nivea.hr
nivea.hu
nivea.ie
nivea.in
nivea.it
nivea.lt
nivea.lv
nivea.ma
nivea.nl
nivea.no
nivea.ph
nivea.pl
nivea.pt
nivea.ro
nivea.rs
nivea.ru
nivea.se
nivea.si
nivea.sk
nivea.ua

Other certificates including the domain name nivea.de

(limited to 100 certificates)
Beiersdorf Aktiengesellschaft
chiosco.flp.ch
www.glamitalia.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
magazin.nivea.de
kiosk.citytipp.org
www.nivea.de
magazin.ferienmagazin-deutschland.de
nivea.de
chiosco.flp.ch
nivea.de
ref-ci-brands.nivea.de
dialog.nivea.de
webkiosk.die-bank.de
akamai-san204.exacttarget.com
magazine.arbeit-und-arbeitsrecht.de
www.nivea.de
dialog.nivea.de
nivea.de
www.nivea.de
brochures.hilliard.com
akamai-san204.exacttarget.com
az-cdn-test.nivea.de
epaper.chili-peppers.de
shop.nivea.de
kiosk.astrosofa.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
fall-magazine.robinsonlightingandbath.com
publikationen.kmu.org
magazine.arbeit-und-arbeitsrecht.de
nivea.de
preview.nivea.de
magazine.arbeit-und-arbeitsrecht.de
kiosk.seniorenreisen.de
akamai-san204.exacttarget.com
neubau-projekte.vr-immoservice-mainfranken.de
magazin.ferienmagazin-deutschland.de
blaetterkatalog.andrees-angelreisen.de
dialog.nivea.de
www.nivea.de
www.nivea.de
www.podworko.nivea.pl
webkiosk.die-bank.de
fall-magazine.robinsonlightingandbath.com
www.nivea.de
www.sblaettle.at
ext14.nivea.de
ext14.nivea.de
social.nivea.de
www.nivea.de
www.nivea.de
akamai-san204.exacttarget.com
www.podworko.nivea.pl
m.nivea.de
kiosk.velototal.de
www.nivea.de
dialog.nivea.de
nivea.com.tr
cloud.newsletter.nivea.de
nivea.de
nivea.de
neubau-projekte.vr-immoservice-mainfranken.de
dialog.nivea.de
bhuat.nivea.de
kiosk.seniorenreisen.de
kiosk.flp.at
www.nivea.de
www.sblaettle.at
brochures.hilliard.com
chiosco.flp.ch
nivea.de
nivea.de
magazine.arbeit-und-arbeitsrecht.de
social.nivea.de
magazin.plusperfekt.de
brochures.hilliard.com
epaper.immobilienboerse-ag.ch
az.nivea.de
kiosk.seniorenreisen.de
nivea.de
nivea.de
Beiersdorf Aktiengesellschaft
kiosk.seniorenreisen.de
app-service.nivea.de
nivea.de
bhuat.nivea.de
webkiosk.die-bank.de
kiosk.flp.at
kiosk.flp.de
www.nivea.de
*.app-service.nivea.de
nivea.de
shop.nivea.de
www.podworko.nivea.pl
nivea.com.tr
brochures.hilliard.com
kiosk.flp.de
www.nivea.de
nivea.de
kiosk.flp.at

Certificate

The complete raw certificate details for nivea.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxXjpdN5t4ewGPZ4kZkF
v9V8cGzntEmyxY9V2ifPQJhP7SQzSSNHBoDjH6kxrctL4vwFLkH2IjHksBno5hWs
qswyLjrNX3tSwD/zjbdlFHE2WIHQ46t0DNlTFc/vXV8i1Hm4v4gLKJqlhSLDFlCt
Ek4h1obaxj510FUhtgVstIkniqjGVj7vlqIUGPdJntcwP5/Z+gd/mV06bLk5u6Xo
bYvKP9rJzl236819grqevUdDDZKY38xXkVH1ZbfPV/n52xqSs4U5hhGve+6kLw79
v5/JBgzJu7vyfOnkffIHsAMLTsB6UrGcdC+4uOU+1eQbv4dT1NA0w0LBFJzrRHlq
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353969416507893298346200616814106208847763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 06:11:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-13 06:11:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nivea.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22102497360066890112184441062365873512792670192211924467867295887750020233057766009650860456223830060509593728146137214369824915848528806393330363269963405930368767885782692372459481207635782195207515695890843566529830877635241869217655379322775082496613695963630559719825285308325246174030540760612967898460655670207115455996416483052692856868643472781390512917330149298953215888591024345010349556285993566890551020426444047100234510516648364774337794561346957086190858626863733414924918362356231419473239192947140412260872908053405246796623477900658900177077881346635098204652774690545332590921316603278521815100141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6276ef7ac7cc1673196ac43be2313ae169d00540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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