vendidero.de
Issued by R3
About this certificate
This digital certificate with serial number 03:c9:1f:62:dd:5f:49:8c:f3:18:cb:e0:a8:03:b4:59:f9:fa was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=vendidero.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:c9:1f:62:dd:5f:49:8c:f3:18:cb:e0:a8:03:b4:59:f9:faSerial Number (int): 329775332949312800550376056732534091414010
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ee:38:aa:4b:49:c4:35:d0:5c:f2:c5:76:52:54:fc:57:26:6b:af:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 53:b6:8a:09:e6:0c:e4:a7:29:45:cf:35:8e:e4:f1:8c:93:ff:24:98
Fingerprint (sha256): 8d:52:20:1e:fd:0a:d9:90:0a:31:19:ec:1c:da:05:f7:68:8a:2d:36:ca:52:2c:b8:82:f1:05:c9:65:82:0c:cb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vendidero.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vendidero.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vendidero.de
www.vendidero.de
www.vendidero.de
Other certificates including the domain name vendidero.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for vendidero.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISA8kfYt1fSYzzGMvgqAO0Wfn6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTcwMTA3MzJaFw0yNDA2MTUwMTA3MzFaMBcxFTATBgNVBAMT DHZlbmRpZGVyby5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKe+ kCM+XrrD9oomQcEb05IdkV2vefB6JfkuyJJzHDUloSin7a3itWW4Yf6OQO5bmlzH 8Ma/rJdPPlRjmc2wVcJGGzI5PTXQiYDRYvTMX3fdFVWAEfcF2Y7pIb7EeHPWl25v XF34z2XX2P+v4xzCAgIP9eEE/eTeM/clAPfeT0HGrHwPyKHgqCJ0s9TTyFSatwM0 FW1zQvdwxivv+1GLVTsN1xY+ycyFQH69rt5VlHaXKnXw/itoerB+9bSGlVW2OqRW wxfqxl3lQRjAwVGeKesY2bn5V9r/8wSrTso6uEaR8JM580Suqi0ohDirOFvcFBX+ ptll88wsQ7MkHpHAe1/4J+0BUviTogMK/EImEIcLP6KZCJe/Yvd3ZS+tgHTBu0cS t93TQccgJb9HEQzs+pLBDkKkVwHIIcNdUU7bU44qjZuj7ZZSQkAM58coR7xLal4T 6+qsPU8cXqms95Dkp4gHGbo/qF3uI6OVWdAi81Mq9ik84/fJA96WE6wmKU8hUhoF O0h0A/LVde3XO5YSy4EuUKBkV3oPojvif3wV/+xJh9flLollXEx5OdX9l/6ZTijB LSMKGIsjch9EQ+RvQPoj8TBXo0lkJIdMBPH9+jN1eM1ZhqrXq3/zlmCqTyGZjlj2 aAgmlRoht+qkLYh1L0V7h7OlDnWGAqNvvn5JpfaLAgMBAAGjggIhMIICHTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFO44qktJxDXQXPLFdlJU/Fcma6/uMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDHZlbmRpZGVyby5kZYIQd3d3LnZl bmRpZGVyby5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE gfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjkoq CRsAAAQDAEgwRgIhAM8DdxIfd6X/Z/vluqYQrEC3fqZ3+tz6mYlyG3PZWcyVAiEA xonct6lrrChFwGMP+nSOJqkRCl/9GfgN3ThK9nv6a9AAdgDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAY5KKgkpAAAEAwBHMEUCIFGsFUwdLxcMGrby 7GddRleKrF4zksTdaD14YUXLTdPaAiEAv8RFwRnzgxrjEfnPIAq7QRJx/gfkpQS1 FJzHvEsZ6dYwDQYJKoZIhvcNAQELBQADggEBAGDJVbXzaI47UE9pPmS/S5TGnHGK D5AGU/ve9ipFTEvxFtsl3eOANHoQzDlMgi+eaZz8rzGfcrUurnaAhp0hl4R3Ve13 0YHngkj5NyXKcaX8m29dwQ/5qItv6Qlk/dr/4n5oZKl8PhcnP0KQ2tv531S5YX9h p58noseEsS+qhC+P1/lUwiIGXc80qtydihd+kYWSrl4TgfxurDWPTKYBupChYRHP 79YDWFYJUA+/dmJGtIJ1PVXhg52vLlp30QMJXQCWn5DxPkaM/DJAlZi4Qhxk9PM3 0lTKk9CXI2xX1wiGZKBJyEyBQvrd9Do5jxEHStrVTtK8Wi+ZIMT5RAgshaQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp76QIz5eusP2iiZBwRvT kh2RXa958Hol+S7IknMcNSWhKKftreK1Zbhh/o5A7luaXMfwxr+sl08+VGOZzbBV wkYbMjk9NdCJgNFi9Mxfd90VVYAR9wXZjukhvsR4c9aXbm9cXfjPZdfY/6/jHMIC Ag/14QT95N4z9yUA995PQcasfA/IoeCoInSz1NPIVJq3AzQVbXNC93DGK+/7UYtV Ow3XFj7JzIVAfr2u3lWUdpcqdfD+K2h6sH71tIaVVbY6pFbDF+rGXeVBGMDBUZ4p 6xjZuflX2v/zBKtOyjq4RpHwkznzRK6qLSiEOKs4W9wUFf6m2WXzzCxDsyQekcB7 X/gn7QFS+JOiAwr8QiYQhws/opkIl79i93dlL62AdMG7RxK33dNBxyAlv0cRDOz6 ksEOQqRXAcghw11RTttTjiqNm6PtllJCQAznxyhHvEtqXhPr6qw9Txxeqaz3kOSn iAcZuj+oXe4jo5VZ0CLzUyr2KTzj98kD3pYTrCYpTyFSGgU7SHQD8tV17dc7lhLL gS5QoGRXeg+iO+J/fBX/7EmH1+UuiWVcTHk51f2X/plOKMEtIwoYiyNyH0RD5G9A +iPxMFejSWQkh0wE8f36M3V4zVmGqterf/OWYKpPIZmOWPZoCCaVGiG36qQtiHUv RXuHs6UOdYYCo2++fkml9osCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329775332949312800550376056732534091414010 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 01:07:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 01:07:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vendidero.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684337392822811718753376450134590414296037759673597813297988731143064778821579983844332302283967139719147527486566847951415150940520810567323464953967803250839092476315332088034131294437101519794151770223950502399159785815471083113963954892455266648409519722335328736783458619318306680008396274909677168477687988807660452740848332936111152757593513867888812855686229149253647363499716055887542424428838001734087877677712828435943223313293709437369865730183383290301089253988154685781294706357788553317642979917641760755331746307952097203116095203856834101612584298323982449335243124852243313813439664319179255522048637593788915690278944033511849038236639121307256980536237877181547814124328924195895901060240348439431867273239293417539713102757252919089677338741905508645250834341699624643899435988200364630053038806698327467567548118149837313429194302945371371666895568091338246401998912173834954081421813951603645580615083718097307596415413200545838491505303618533444695364984808596696912853912117396523405761919541033753572553801363508969151228966026605548284848233123953463195596993724440449864955528263468898457760232309471058573394200155980869914902466710732013586421219077445096708572341210612992052248815956334525134341011083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee38aa4b49c435d05cf2c5765254fc57266bafee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendidero.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendidero.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4a2a091b0000040300483046022100cf0377121f77a5ff67fbe5baa610ac40b77ea677fadcfa9989721b73d959cc95022100c689dcb7a96bac2845c0630ffa748e26a9110a5ffd19f80ddd384af67bfa6bd0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e4a2a09290000040300473045022051ac154c1d2f170c1ab6f2ec675d46578aac5e3392c4dd683d786145cb4dd3da022100bfc445c119f3831ae311f9cf200abb411271fe07e4a504b5149cc7bc4b19e9d6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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