*.bundid.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4b:bb:8b:3d:4f:a9:60:28:33:5e:f6:49:14:b8:78:8b:94 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.bundid.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:bb:8b:3d:4f:a9:60:28:33:5e:f6:49:14:b8:78:8b:94
Serial Number (int): 374219609854124916830281626078045185543060
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:d0:5b:a6:6d:47:6f:53:20:e3:a0:f8:8c:1e:2b:e0:8b:93:05:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:e3:41:b5:e9:26:9a:e1:bc:c4:1d:44:c8:bb:1d:cf:5a:d2:cb:ab
Fingerprint (sha256): 74:5b:66:01:c4:04:9c:ee:3f:4a:4f:0c:22:0b:08:c4:aa:fb:6a:e4:9e:4c:e5:b2:ab:68:98:eb:f6:ed:3f:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.bundid.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bundid.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.architekt-syke.de
*.barrierefreie-gestaltung.de
*.benedikt-wesner.de
*.benos.eu
*.buergerhilfe-offenbach.de
*.bundid.com
*.christinwilke.com
*.color1-germany.de
*.finlowo.com
*.hpnfotografie.at
*.innenraumplanung.de
*.janawolf.website
*.jonathanbugiel.com
*.lukefrancke.de
*.recht-24.eu
*.robert-franz-kaernten.at
*.transinstuttgart.de
*.vizlab.net
*.xn--florian-romann-9fb.de
*.xn--thomashecken-wetterstation-kln-meschenich-oce.de
2019.notar-liessen.de
account.gaestehaus-kicker.at
architekt-syke.de
barrierefreie-gestaltung.de
benedikt-wesner.de
benos.eu
bot.eishorn.de
buergerhilfe-offenbach.de
bundid.com
chat.gaestehaus-kicker.at
christinwilke.com
color1-germany.de
ecommerce.gaestehaus-kicker.at
finlowo.com
hpnfotografie.at
innenraumplanung.de
janawolf.website
jonathanbugiel.com
lukefrancke.de
recht-24.eu
robert-franz-kaernten.at
transinstuttgart.de
vizlab.net
www.bettina.henzinger.net
xn--florian-romann-9fb.de
xn--thomashecken-wetterstation-kln-meschenich-oce.de

Other certificates including the domain name bundid.com

(limited to 100 certificates)
*.bundid.com
imap1.hypnobirthing-vinschgau.it
*.startupvocals.de
bandfame.de
w.dt80.net

Certificate

The complete raw certificate details for *.bundid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKx3sVUcE6/DST4Dwi1l4b//g1WpR
g0q4Fvcevq9k03BY4/pQwXz+e85sLOMUvTTsoMx1q32DiO5djlsh4jNkAw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374219609854124916830281626078045185543060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 14:19:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 14:19:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bundid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042b1dec554704ebf0d24f80f08b59786fffe0d56a51834ab816f71ebeaf64d37058e3fa50c17cfe7bce6c2ce314bd34eca0cc75ab7d8388ee5d8e5b21e2336403
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dd05ba66d476f5320e3a0f88c1e2be08b93058f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.architekt-syke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrierefreie-gestaltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benedikt-wesner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buergerhilfe-offenbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christinwilke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.color1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finlowo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpnfotografie.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innenraumplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janawolf.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jonathanbugiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lukefrancke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recht-24.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robert-franz-kaernten.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transinstuttgart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vizlab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--florian-romann-9fb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--thomashecken-wetterstation-kln-meschenich-oce.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.notar-liessen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architekt-syke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrierefreie-gestaltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benedikt-wesner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buergerhilfe-offenbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinwilke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'color1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommerce.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finlowo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnfotografie.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innenraumplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janawolf.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathanbugiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukefrancke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recht-24.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robert-franz-kaernten.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transinstuttgart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizlab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettina.henzinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--florian-romann-9fb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--thomashecken-wetterstation-kln-meschenich-oce.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d894d34930000040300473045022063184ca25f2cf6b0d3ab174bb03c0323b76f592a8bc02e5430b3655bac86fcd1022100a38c0030cca64a98f9aac626825ea9c6a05642f2681abb0a04268c5489970467007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d894d34a40000040300473045022100d9fa66ae7b5fa65edbcdfaa9f623624981cbd7e2c4575e338feccc479f00c0760220027f7e0f1f97eaaa41fb018d007cba13a3793793f0c79dca9c9090820be93c01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a67952059a4697582d32861c7b5082ec9cd2d0c138a0a9bea33b1d61408d4d481cb19a72b30c9c55fb774ce84c8af4204ce74acc2bff924bb42691f6e779616e6f868a217c34a9cd0fc799cfbccd7c83cbae6a29675bdf6e0790898e17d6a92ffd83f22240fa7e11fbcb14c5536187b5cb342d5800931d9cd2c72cc810d659901dbd835925310783c4f27abcc431c08860b0c1e552c069e5191b84d4b4a970732619aa8677279bafd67a8760db5a6bc0c6cf370e6109c0edc812f4a08ac9abbb9e0b3c3535d4a4f434178d10d2497c379328d16ed45ec73cd76a0f4584e05c6370c05020935f3a914e3f1af1f49ec6f54f9a6bb5cce762950f83bfd8bac69e4