www.testshop.bestlife-sleep.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:7d:1e:3e:4e:b7:50:e9:a1:12:70:4a:a3:e9:72:b2:e7 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.testshop.bestlife-sleep.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:7d:1e:3e:4e:b7:50:e9:a1:12:70:4a:a3:e9:72:b2:e7
Serial Number (int): 403400915333436875409702446487459373167335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:1d:27:59:be:46:a8:d5:b8:ee:57:67:88:ad:08:17:1a:ef:b5:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:78:47:22:28:1a:3e:a9:8f:51:6a:44:f6:83:39:bf:5d:af:e0:ae
Fingerprint (sha256): 50:3d:cf:65:e8:dc:26:cf:2d:82:be:69:61:26:c9:44:8b:ee:cb:5a:f2:f4:61:ba:05:05:30:86:ae:21:93:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.testshop.bestlife-sleep.de

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.testshop.bestlife-sleep.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.calco2go.de
*.designstudio-ketzer.de
*.esmer-tools.de
*.gomoll.cloud
*.jung-dienste.com
*.jung-dienste.de
*.mare-shop.at
*.megabuds.fr
*.mittelrheinwerbung.de
*.schee-ammersee.de
*.stempel4punkt0.de
*.wetzlar-zahnarzt.eu
*.xn--gh-fka.de
*.xn--ghde-5qa.de
*.zahnarzt-wetzlar.eu
alloyflanges-smtp.jaegerhof-schneider.at
b.peterschlenker.de
calco2go.de
db.no-key.info
designstudio-ketzer.de
esmer-tools.de
gomoll.cloud
hop.kevinkoziol.de
hostmaster.enjoi-sailing.com
jung-dienste.com
jung-dienste.de
kiwi.ki
mailsrv.fliesen-keil.de
mare-shop.at
megabuds.co.uk
megabuds.fr
mittelrheinwerbung.de
n11.lima-city.info
og.dt80.net
schee-ammersee.de
stempel4punkt0.de
wetzlar-zahnarzt.eu
www.adventskalender.juenger-radio.de
www.breitsprecher.org
www.details.silverstrikez.de
www.kiwi.ki
www.limo.pt1602.de
www.memes.joundjo.com
www.selbstbewusstsein-selbstwert-leben.anovila.de
www.testshop.bestlife-sleep.de
xn--gh-fka.de
xn--ghde-5qa.de
zahnarzt-wetzlar.eu

Other certificates including the domain name bestlife-sleep.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.testshop.bestlife-sleep.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqICArRqcZiCH9NL9Z+HOo9f4q+mK
wX878bNSkybN5GFyQTmWVdhTWAYdzDTrb689weUoQXz35X06Nhn4Ab9eaA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403400915333436875409702446487459373167335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 08:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 08:13:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.testshop.bestlife-sleep.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a88080ad1a9c662087f4d2fd67e1cea3d7f8abe98ac17f3bf1b3529326cde4617241399655d85358061dcc34eb6faf3dc1e528417cf7e57d3a3619f801bf5e68
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a1d2759be46a8d5b8ee576788ad08171aefb5fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calco2go.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designstudio-ketzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esmer-tools.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gomoll.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jung-dienste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jung-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mare-shop.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megabuds.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelrheinwerbung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schee-ammersee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stempel4punkt0.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetzlar-zahnarzt.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gh-fka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ghde-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahnarzt-wetzlar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alloyflanges-smtp.jaegerhof-schneider.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.peterschlenker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calco2go.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.no-key.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designstudio-ketzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmer-tools.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomoll.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hop.kevinkoziol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostmaster.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jung-dienste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jung-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwi.ki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailsrv.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mare-shop.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megabuds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megabuds.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelrheinwerbung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n11.lima-city.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'og.dt80.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schee-ammersee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stempel4punkt0.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetzlar-zahnarzt.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventskalender.juenger-radio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breitsprecher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.details.silverstrikez.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwi.ki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limo.pt1602.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memes.joundjo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selbstbewusstsein-selbstwert-leben.anovila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testshop.bestlife-sleep.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gh-fka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ghde-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahnarzt-wetzlar.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018798ca0e090000040300463044022064f14aab92ee2e9256fb810c5fa860bcc0d5bf287b39567a53db31c79f8fdf5d022053404026ad5fded924944e048e04d6c6464313675410545976b8419f372cd7c4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018798ca0e0500000403004730450220517f65efece40625551e484506a56d89234231c84f30b09533a13466f93ebdae0221009d104811655bed94b18e790e71ee5c947b03805e7ef677f928f8fbf0ecb480da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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