spirituelle-leseprobe-liebergott-ganzlogisch.com

Issued by Encryption Everywhere DV TLS CA - G1

About this certificate

This digital certificate with serial number 05:05:da:18:2a:d6:86:f7:2a:a5:1c:c4:81:b4:06:cd was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spirituelle-leseprobe-liebergott-ganzlogisch.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:05:da:18:2a:d6:86:f7:2a:a5:1c:c4:81:b4:06:cd
Serial Number (int): 6676524943244467803579618748494251725
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:de:3c:a6:f1:84:15:bf:81:ff:31:92:c7:18:b9:65:f5:7b:c1:a4
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7

Fingerprint (sha1): 41:fd:1b:db:f8:77:e0:24:1f:7c:53:9f:2e:39:1a:dc:db:e5:2e:d4
Fingerprint (sha256): 7a:58:ee:ba:fe:72:fb:5c:2f:ca:90:be:53:ef:ac:82:fd:30:69:21:9a:7d:fc:88:39:81:0a:c7:80:97:d5:5e

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate spirituelle-leseprobe-liebergott-ganzlogisch.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spirituelle-leseprobe-liebergott-ganzlogisch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spirituelle-leseprobe-liebergott-ganzlogisch.com
www.spirituelle-leseprobe-liebergott-ganzlogisch.com

Other certificates including the domain name spirituelle-leseprobe-liebergott-ganzlogisch.com

(limited to 100 certificates)
www.revistacipcisa.com
spirituelle-leseprobe-liebergott-ganzlogisch.com
digiprospekt.freyplus.de
magazine.montana-cans.com
magazine.montana-cans.com
magazine.montana-cans.com
webkiosk.magazinmarley.de
digital.queencityconnections.com
egsk.weita.ch
read.africanphotomag.co.ke
kiosk.leuchtfeuer-verlag.com
spirituelle-leseprobe-liebergott-ganzlogisch.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
digital.queencityconnections.com
katalog.hltravel.at
immomagazin.wegenerimmobilien.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.magazinmarley.de
webkiosk.airhoppark.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
epaper.hz.de
digital.queencityconnections.com
rieswick.mediaflip.de
brochures.hts-touristik.de
ebooks.teammelanie.nz
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.suncruisermedia.com
kiosk.dorfstadt.de
read.africanphotomag.co.ke
katalog.hltravel.ch
booker.turningpages.me.uk
egsk.weita.ch
prospekte.wernigerode-tourismus.de
katalog.hltravel.ch
kataloge.pricon.one
magazine.montana-cans.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
kiosk.leuchtfeuer-verlag.com
brochures.hts-touristik.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
mitarbeitermagazin.uk-essen.de
kiosk.hinzundkunzt.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
digital.queencityconnections.com
webkiosk.epaper-kiosk.beam-verlag.de
magazine.montana-cans.com
epaper.hz.de
epaper.technischesysteme.com
magazine.montana-cans.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
spirituelle-leseprobe-liebergott-ganzlogisch.com
kataloge.holzimpraegnierwerk.ch
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
epaper.hz.de
kiosk.leuchtfeuer-verlag.com
epaper.hz.de
prospekte.wernigerode-tourismus.de
webkiosk.magazinmarley.de
katalog.hltravel.ch
biblioteca.sciens.com.ar
kurse.bdb-musikakademie.de
media.auvesy.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
prospekte.wernigerode-tourismus.de
webkiosk.lurkoi.com
prospekte.wernigerode-tourismus.de
booker.turningpages.me.uk
webkiosks.theuma.com
katalog.hltravel.ch
magazine.montana-cans.com
webkiosk.magazinmarley.de
katalog.hltravel.ch
prospekte.wernigerode-tourismus.de
brochures.hts-touristik.de
prospekt.hirsch-ille.de
magazine.montana-cans.com
newskiosk.lixx-lingerie.de
prospekte.wernigerode-tourismus.de
epaper.hz.de
rieswick.mediaflip.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
www.infoblatt.at
dossier.benecos.eu
kiosk.hinzundkunzt.de
epaper.wta-suhl.de
katalog.lemo-schuh.ch
webkiosk.magazinmarley.de
katalog.hltravel.at

Certificate

The complete raw certificate details for spirituelle-leseprobe-liebergott-ganzlogisch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp8hsWlXIKBvvda1eCnu
AkxPQwADpOZkLGWWq8+6ideT0TRN+ycivLwpRJ08aetFLPjtw0Il9Drb1xWFMoi4
gqPJz1ATyIVZ4Y82OQBnnTYG0Ln5nMMyJYLTIL9B2SOtqD8WYkRjt0s/GngQgW73
Ibl8gJRQq0xKay3n/z487rr3FZ0nmE4ugLT5YjdXU1a1dkcb6VJ6msoUxaWMy6Rx
NtHbaJ0yzFV9DBTxvgZubM/iS0breiikXGAUGDurUDUKbulTH9DpSmqKyDwh0+tR
YhpiK4NRGLbAKy0phKfEP4WMTABxFYsy8MGvp78SJbSs6S/Ax1oAEgqDi8qrFD5Q
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6676524943244467803579618748494251725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22043935787273316163961108964025268957853813933761450376938865604275577417344312369043989759278458698670691249644070682497521011469413145189402758919740075491089350029778277908863086582756374082959524455088336462334217160020233720453478007640756124584903406001980802801988833933876193277471469649039765715503469590496980856510667600539565853617098195488457446119446199217725544048615491130500338718240279898242808809242538709590222089574142231782416893257493860204915830572635212647558607996250026308293838186561259306585460950440886177223422595312104590689341892325755072401745493455678096376692605954230835981734053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5de3ca6f18415bf81ff3192c718b965f57bc1a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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