profile.newsletter.manager-magazin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:f8:e3:52:d3:c1:fa:32:7b:87:37:c0:bc:d9:59:a6:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=profile.newsletter.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:f8:e3:52:d3:c1:fa:32:7b:87:37:c0:bc:d9:59:a6:e7
Serial Number (int): 269153898741817695545111950828967791535847
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:99:26:51:de:0f:54:e6:e5:4a:7b:e0:2c:e1:6e:0f:9c:cb:f6:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:05:72:e3:1b:f6:41:9f:1c:da:fb:7d:dd:40:6d:6e:2f:c9:a5:d0
Fingerprint (sha256): 5c:c0:04:c6:ed:02:e3:6e:1a:f6:dd:a4:39:f0:9e:4d:55:4a:ad:b8:f4:eb:da:9e:d5:a5:4a:f5:40:15:03:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate profile.newsletter.manager-magazin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profile.newsletter.manager-magazin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

profile.newsletter.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for profile.newsletter.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnLXLW21uhIyysGfiZ2W
N2thHF4STyvpU42dYqBTRGr5OdI4z0QSFGxqacFMCg6ORxOeTL0gq91WCO4kD2gn
j/IyVv7yBHk0MitjyNxFgWe+//ycElIPI5p0KdX86IGFRJbFwrdzutlJ/ed/HxDL
6f/zjb/W5hFIFep0hqmVKH38sj2KrNVfqrm0EcreZ8DlI4gVPDnJ1NK3rjid+QEf
4qqX979qS+2LF6eNCFwmimr/T0o6boYRzdJpvqjINFZ7L8B/3sS/QBD82eiMxchp
ENZN6yDnsaYcGOR9z2BDMqTkczEZ1FWj5hfP0PuwvSQA6CdS/i1nPNbX1jV1Ja6V
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269153898741817695545111950828967791535847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 01:00:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 01:00:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profile.newsletter.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22022095043484949564553939755790077904935031255605180228229944141399258395997937161246918288584686625796272074981240782153155269996922228397410846750142936290662175452175217788577076278981224660006829446992570101834832730918235492628968609801880940315557936316668101366793412747026498810918204401590251273412938213838291885095319231542513316536579450966470081279736753544914714542488196868810931615097288290889749211337339597950397566863852293739417357426981754742482099948922835311491597181605247095546988819242755787903038148809602568783752020328676752788864533378768828209187630060046006372526938976318597649831281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61992651de0f54e6e54a7be02ce16e0f9ccbf608
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.newsletter.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4740299a000004030046304402201716919599bc9dafd82c6d47a00ac746e29b262bc2503d139ea67359f8bc312b022037585372429bb5b94065a4dd6a9217c56cef078eb7b522eaf85435294fc0016a00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4740298e0000040300483046022100b8966d5b7f0cf51280cf5d5402d03b0ec438cd5d267a07b1a4af5d484be2727d022100f51d4856a5f494e4447ca0e73fa6c532555ceced5bc82bd919ea93cc703e4368
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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