geo-circlefy.com

Issued by R3

About this certificate

This digital certificate with serial number 04:30:3e:a5:b9:85:77:23:92:45:9c:5c:85:2b:f4:47:8a:1e was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geo-circlefy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:30:3e:a5:b9:85:77:23:92:45:9c:5c:85:2b:f4:47:8a:1e
Serial Number (int): 364865969966786349872694533508715185146398
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:88:1a:a3:79:01:1c:90:94:b1:ab:fc:87:99:a1:c7:c9:f6:b4:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:76:cf:31:0c:0d:d0:5d:7f:2f:b8:7b:06:31:75:ae:a2:fa:56:fa
Fingerprint (sha256): 7e:63:81:46:ba:96:15:8e:66:79:97:a2:49:e8:81:31:10:7b:b8:29:15:d4:25:64:ce:27:74:9a:3d:f5:54:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geo-circlefy.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geo-circlefy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitmanager-media.de
bitmanager.de
geo-circlefy.com
geocirclefy.de
gruner-jahr.de
gruner-und-jahr.de
grunerjahr.de
henri-nannen-preis.com
henri-nannen-preis.eu
henrinannenpreis.com
henrinannenpreis.eu
mechabuilders.de
nannen-preis.com
nannen-preis.de
nannenpreis.de
www.bitmanager-media.de
www.bitmanager.de
www.geo-circlefy.com
www.geocirclefy.de
www.gruner-jahr.de
www.gruner-und-jahr.de
www.grunerjahr.de
www.henri-nannen-preis.com
www.henri-nannen-preis.eu
www.henrinannenpreis.com
www.henrinannenpreis.eu
www.mechabuilders.de
www.nannen-preis.com
www.nannen-preis.de
www.nannenpreis.de

Other certificates including the domain name geo-circlefy.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for geo-circlefy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YtbajClmNDN6RPvwwzf
aD+uDPiicTAnG3je2OHqpGj5hXxqxr+i5fXyipkVx323gwMPmgmN14rLYMX8br81
Q3bRxjzIQ8geL2w2w0D4A3S+dt8gB9sc9MhkeV7R6RJkxk2H/1PyVfWBm7F3VixR
6ITykwhr2u969DjLmMz1P+TVwArbjdmEm2DDBYJQmrYlXPwG3KzpdXjzx01bvhYw
r2j8CWALsOEL2dKXp1bZv3Ow4om5+JpTn+1dt/5KyGTIeSb0ceKBPdQbA9cQKe7A
3+WwLCfjDCCctGEI2/d7rRGvpe2t7l82arrMDPl/Udw1lkIBNZpklm2q8Bi5rcuZ
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364865969966786349872694533508715185146398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 02:31:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 02:31:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geo-circlefy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26452525279744600491543035087488733295730838368985568915163744653973909233112978896854061731031341892319145514388874890996936486860924651908730918248825624031279895679878189431182017390114927583737782353805285515144534749365915815855750639876011415758547992171853620444639266533289245037055089874451762748999043348488426491051655433335335088487690791444220680574432123720647712437711042715236648928459543789458599750732019152254105799562358637713195892340948171331565617474356114665441391387688252279536123593458859317833769945976380425464791679988711701055586062470487019669589645114223600445769631890788466347973117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2881aa379011c9094b1abfc8799a1c7c9f6b4c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo-circlefy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocirclefy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henri-nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henri-nannen-preis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrinannenpreis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrinannenpreis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geo-circlefy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocirclefy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henri-nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henri-nannen-preis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henrinannenpreis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henrinannenpreis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannenpreis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d86c4ee7b0000040300473045022005c5f531ab28880a7e01433874d2325ff8f80dddb6fb8d4dd1c87442e4db9417022100f381388019a3a96062ab3e5a0137ac87b30a6c9fe34ca82c36e226e80a6f6e31007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d86c4ee830000040300473045022100f8e637ab6b02fc5e92c996580aaca273519f6ad8dcdc0860b0821ec773c9c52b022058fd6a46c2c335c21b5d870112329e88a137eb34fa2ba1502e7b74fdbc5f0fb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00795ea44df46eddac837ba1c849d8b6ec4cb3d0d21d58c70713763370c4e876009bca669fb99d563fc6b3f565855c135537a91a37942e4d3c3a2f0be03dce8ac9474a394b1579b9b148d353a6deb9ceb0d504832552ce04175645a0a6f2a3afa26db5a303d4571e64476bf3c50d594dd6e2a0e9f784d6f7dfd2048b99f5d0a1b1f964418ec89913feeecb66677fb31b36043b9c65e27d20d99d7519da32f445e09910a37232f71655630269229ce18fc893d2f22caae5d3bc1fd56b1d124d7ffb26054d2cca8bddad44bf3430459a2b14150cb10c8fc5f868f1870d9b1fc201c951fd86e8d4b7945ebbc3e1771970f80f939da000096790d90fefb586ca693808