ssl.1.damoh.manager-magazin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:2c:2c:89:27:c2:25:ac:56:3e:fc:a9:a9:36:e8:f9:10 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.1.damoh.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:2c:2c:89:27:c2:25:ac:56:3e:fc:a9:a9:36:e8:f9:10
Serial Number (int): 263096986904601843762345812061768076818704
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:f0:ce:96:19:e3:e3:cf:70:8a:bc:c4:32:e1:f9:d2:aa:86:bf:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:3f:9a:99:ca:c6:94:b8:56:7f:ec:ff:e2:ee:29:d8:fd:3b:32:7e
Fingerprint (sha256): 5a:43:94:d6:68:cd:ee:ff:1d:fe:f4:ce:e5:f0:a4:c1:46:8a:f4:a4:1f:de:5c:dc:a5:de:92:0b:26:d6:fe:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.1.damoh.manager-magazin.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.1.damoh.manager-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.1.damoh.manager-magazin.de
ssl.2.damoh.manager-magazin.de
ssl.3.damoh.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for ssl.1.damoh.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263096986904601843762345812061768076818704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 11:58:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 11:58:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762102572434540674200277571222858639269488101578706533610097792928910736370496039776780067294791187410150189266656321088797274872467795968301232000044006084661110560502329797571459447980494154641428915519815702270903453769494602737864058177823236434226061343889552986558401937681524003136398080413279844889902883850076562511901297957860744555459639144610346619765670370220359364344271841631907074094068173796993700706868539164899132771335861873098519972708151817068074690713922807141073175695077758755834709429445096010482445725225635557762392087499660226043330279481896345507781792563289755673013055067560369283594525451699008151259415336321671960803722139320183273636975808647287884990396180634265673018782891046977637402746245558133019538472629597710249599546662554005830851952416524317824037372477045280369424845836674676172046495252947639017960531177924975178416005266348446148789588548557631796228830315440075025375144197527274235901143992500877689387830442095610903223748326476306296750656991239509364517376336973123279395356179797922972770263390389168832051959044349539268110064337511089352175628716501726184704667889977585487972265295983474955177983838301029084809989794609190930906588340774854405330532412041770617173305061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aef0ce9619e3e3cf708abcc432e1f9d2aa86bf14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.2.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.3.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec6b0be1e0000040300483046022100c17141dcee30ee23b3358aafda8b0d5d6af530a95dc861598a3c0a7cb1704829022100e5d4f99706b218513073efae063e421a5657014c79bef409b0ea199d8099694200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec6b0be48000004030046304402201e89321c3fa28945803ee1212e2f40dbf4838f030a67b6322c62df9f51d34fe902207be2ff7225295a28af651746224d1f0089c7feb4ca4f0e1707a7f045c80c9e2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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