DV SSL/TLS Certificate for deich2.de

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo RSA Domain Validation Secure Server CA)

About the deich2.de DV SSL/TLS Certificate

This certificate with serial number 02:3d:20:4b:68:6e:03:b0:c4:76:c4:26:8f:32:1d:4c for deich2.de was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for deich2.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 02:3d:20:4b:68:6e:03:b0:c4:76:c4:26:8f:32:1d:4c
Serial Number (int): 2975841111479401943887480311468137804
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: d2:7a:12:f3:ad:55:ee:f6:8b:99:52:48:0f:f4:15:e3:f1:c9:ac:62
Authority Key Identifier: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (SHA-1): c4:e3:6b:f6:92:f0:e0:d7:e9:5a:c8:2b:47:0f:6a:0d:22:a7:27:8e
Fingerprint (SHA-256): 64:af:f2:37:85:04:4a:fa:47:cc:d7:d9:a1:5c:01:67:2f:27:89:de:3b:48:87:90:f0:a5:66:62:1b:03:5d:eb

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate deich2.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for deich2.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for deich2.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2975841111479401943887480311468137804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deich2.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794493257233678215022065309142944937241117329563713975084409202698153979569251819187162972369422109242531369612166725768881624071333944299500406658996139690591032408858070901215580817833948726425576607849900188000049829405035200109672968805902856627846763257492640960553011149162414085734383144664328312054566325900643540683096945407687863402761646796856925321707962797690561217223544546279369003974844750936942741836216324546080635883774238579238286945290942514530889439182294491185699249862925026203959788885859880305136613419144019100078506947305294852126639299710310231684544805863356170130772964736376901243150189456616066516989577206437513765035984204714418905682326006167340811650501610115889334632302363248800182166332662590071408085417967803922639290564422020161822099110323675643757800194253171452536457110156500854195831005246766709936137630292686662249293942129911973812570733448727828124379214426527936906788870449963646325755649715916333979239503597307287570786209068461623496841807722364936562252942773323782069020759948526075589900616864543321527485102089547637534511988433690561379955863962693027976534260429315229882785014583424625041962709810421072489536819223415135416943043874239617695762512437826645362313038459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d27a12f3ad55eef68b9952480ff415e3f1c9ac62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deich2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deich2.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007c13857430f4a6a63b40fc4a7860e8608df50f064aa318e1d007aa99cdf50d377d6505a2bdb985e36011803b1b8c4f8d07d15392d926a5ca5dc45fcdd575a8c53ef079562b91335064c4b6d8ae29ae8c1ed431e1e3b8c3a4ca7ded381706e15a77f4f5de027b9b013d661ee770ca0d44c549df6b8e434a1ade643b17f899cbd0552f45c3e1bca01c1ffe215bd82dd40fa7709977fe570840e38ed2d8322acbf4e1d6acf4156c9c0ed21415f6edd535c9fb5ea374031adb65955d8ca55406c97f188dd97117f71471964a47b250b5bb080f1cfa2d5a6ef85b7c3fc5d38e2353ac6feb2c668ea7e51db745161b000d64cf81c299d49727414c4ac925d9f02e8c8