www.diamond-candles.com

Issued by STRATO SSL

About this certificate


This digital certificate with serial number 0f:2a was issued on by STRATO AG .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.diamond-candles.com

Organization unit: GT33170518
Organization unit: STRATO SSL
Organization unit: Domain Control Validated

STRATO AG

Organization: STRATO AG
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:2a
Serial Number (int): 3882
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId: 76:9e:84:69:53:07:6e:dd:a2:b1:30:12:d0:22:d4:92:47:77:63:61
AuthorityKeyId: 72:52:8c:04:14:34:63:9b:7e:5a:ce:f0:44:5c:85:3d:86:c8:bb:35

Fingerprint (sha1): 1f:ff:a0:e6:1f:26:13:19:bc:65:9e:24:c8:0a:a6:b3:07:a3:81:81
Fingerprint (sha256): 2e:0d:a0:81:e3:df:8a:1c:42:5e:92:d5:8e:a8:98:41:0e:df:14:cc:9a:7b:7b:55:38:ca:af:08:3d:bf:08:01

Issuing Certificate URL: http://strato-aia.digitalcertvalidation.com/strato.crt

Revocation information

OCSP Server: http://strato-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://strato-crl.digitalcertvalidation.com/crls/strato.crl

Check the revocation status for the current certificate on www.diamond-candles.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diamond-candles.com
diamond-candles.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgICDyowDQYJKoZIhvcNAQEFBQAwVTELMAkGA1UEBhMCREUx EjAQBgNVBAoTCVNUUkFUTyBBRzEdMBsGA1UECxMURG9tYWluIFZhbGlkYXRlZCBT U0wxEzARBgNVBAMTClNUUkFUTyBTU0wwHhcNMTQxMTI2MTE0MzM4WhcNMTUxMTI5 MDM1NDA4WjBvMRMwEQYDVQQLEwpHVDMzMTcwNTE4MRMwEQYDVQQLEwpTVFJBVE8g U1NMMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxIDAeBgNVBAMT F3d3dy5kaWFtb25kLWNhbmRsZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwjoig6tmF2Aov7DAx791v4FP3E4sYsw4C5Xotq7eALrA2WvXW4uS RpCV1oGdgQok56OpzwaMtfepd9kVh/Tf4FubiAeuGPMyVTk5mW4kKD/7T2zdYKol Va9fRK7kH9TioVbFZvPYlTQCQPlISY81Vq9CtftCCovLRCSYfehPWMVVAwfKzsR1 pitTRwzSPEspzvnL768Z5d5K820HvhIORNxW6NbB/9/FPcXxPu8yEG6cHOlZP+VG zsMRe0URg6muouiwmCeI3qSP3x5aqxaLyLU1/WEsCmt0Pr9B+jtjN1L5pk1rcIr0 Op6SNKHGjowHQg7X/+6NlpZkDxwhWNygFwIDAQABo4IB5jCCAeIwHwYDVR0jBBgw FoAUclKMBBQ0Y5t+Ws7wRFyFPYbIuzUwgY0GCCsGAQUFBwEBBIGAMH4wOAYIKwYB BQUHMAGGLGh0dHA6Ly9zdHJhdG8tb2NzcC5kaWdpdGFsY2VydHZhbGlkYXRpb24u Y29tMEIGCCsGAQUFBzAChjZodHRwOi8vc3RyYXRvLWFpYS5kaWdpdGFsY2VydHZh bGlkYXRpb24uY29tL3N0cmF0by5jcnQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA3BgNVHREEMDAughd3d3cuZGlhbW9uZC1j YW5kbGVzLmNvbYITZGlhbW9uZC1jYW5kbGVzLmNvbTBMBgNVHR8ERTBDMEGgP6A9 hjtodHRwOi8vc3RyYXRvLWNybC5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL2Ny bHMvc3RyYXRvLmNybDAdBgNVHQ4EFgQUdp6EaVMHbt2isTAS0CLUkkd3Y2EwDAYD VR0TAQH/BAIwADBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcC ARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG 9w0BAQUFAAOCAQEAYS7Zoas7yJlsPL6R1QcPsCJbgAvucMguO5hWYStjLgE2Q/+6 WwygbFTG0p5xvE1SQLY5hqbGVwKc/X88skDxQOpVWb5Tj6OFZb9jxYj62sqhqGgP Jdnbe4KaoYWJErsF8wOdWPsurktuteeAaHPwefv/Jww6MkEJpVq4hrDJ5tJJ3l9j 6qrHpvCHcV5d5TP/wEfcXH51ZCdc4eKztarOrY2sRPwQ9EWg47Ji9oZoz93seuXg vOuxkfAzAsAVdtOHCCT26uluYeTLJ5pzlIx+/ZxKsaHBM5ipPEY+Z6soQ8/hdzsy mIljfHR9REQMotSPBOgZdKvLvwcxutHV1WGQZA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjoig6tmF2Aov7DAx791 v4FP3E4sYsw4C5Xotq7eALrA2WvXW4uSRpCV1oGdgQok56OpzwaMtfepd9kVh/Tf 4FubiAeuGPMyVTk5mW4kKD/7T2zdYKolVa9fRK7kH9TioVbFZvPYlTQCQPlISY81 Vq9CtftCCovLRCSYfehPWMVVAwfKzsR1pitTRwzSPEspzvnL768Z5d5K820HvhIO RNxW6NbB/9/FPcXxPu8yEG6cHOlZP+VGzsMRe0URg6muouiwmCeI3qSP3x5aqxaL yLU1/WEsCmt0Pr9B+jtjN1L5pk1rcIr0Op6SNKHGjowHQg7X/+6NlpZkDxwhWNyg FwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3882 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STRATO AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STRATO SSL' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-26 11:43:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-29 03:54:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT33170518' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STRATO SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diamond-candles.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24518898512401706118650403315845198501790839961163202923295245638963304137893663894146288371379460310772882832894282467976024104608885759529059314931081838316251000119972327364743612877878060398505464538481728371847159134386780446241009393191756983153990583061433746557435526288592478426815159659715433213951719875338181419348947172937889854105428368694774171432894962828815910247855848481964899411184415431879026989448070119158148291993046866587632038158334530702998955113886317358849696636457077442065621920001962702099175813896352554869907951349014122196909171185238191092088720534443253981020816961273339695636503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 72528c041434639b7e5acef0445c853d86c8bb35 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-aia.digitalcertvalidation.com/strato.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamond-candles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamond-candles.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-crl.digitalcertvalidation.com/crls/strato.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 769e846953076edda2b13012d022d49247776361 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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