*.lonelyplanet.de

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0d:66:a0:ca:16:b9:8c:9d:36:62:4b:0e:d1:75:52:5d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lonelyplanet.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:66:a0:ca:16:b9:8c:9d:36:62:4b:0e:d1:75:52:5d
Serial Number (int): 17812839421432856438587124250085511773
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:25:98:30:1a:67:70:18:7f:1f:42:64:ea:d6:75:6e:16:60:27:20
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): aa:65:21:28:bb:a4:9f:18:f3:0f:c5:f3:23:7e:ff:59:55:18:5c:64
Fingerprint (sha256): 8e:58:0a:aa:0c:76:3c:df:5c:78:40:f1:88:22:7e:98:9c:81:c7:0e:82:40:83:69:15:b7:0b:7c:75:b9:e2:4c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.lonelyplanet.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lonelyplanet.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lonelyplanet.de
lonelyplanet.de

Other certificates including the domain name lonelyplanet.de

(limited to 100 certificates)
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
*.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop.lonelyplanet.de
*.lonelyplanet.de
shop1.lonelyplanet.de
shop1.lonelyplanet.de

Certificate

The complete raw certificate details for *.lonelyplanet.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17812839421432856438587124250085511773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lonelyplanet.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709242709958922617923663110126010478093177936487115822695311111111518193174310838660298934873921559713456156643718112166916786536363451218437405969322602288263676396496678667363160392715561929596240569850282585242037217372678019496876415601348735406084230498182773676136625064848797224010459151603417130228110278339577505233526421789459536503935877954312028072403380540047805418296744651087216003320812496360620756989039989420700208648802110059050004160313780347424747296580824149859354270480405791544976100936038085803981624894689447585922174020341995785748627451565273104675136746226943581456860003882440999393642778651728478487411524853491719539045452491347395063698310885509456153501247036702440252590319523034844918593999085677495698986757421499696118035858752993291459374964832960624533674971614200599547552359092298425498919063206915729826712009624277274014259924331526540228892225199505974440680042117184402953974203796539633992750994937955821239099320332843735520550983048992015069305006019087836584832228193398047732194728391051322120668087678854910853250172060572639799339926661337207560320943065081755917251550252603260665033078802718051130240868913497498354776406909115578440958737730350910503955969368662689988029366621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							562598301a6770187f1f4264ead6756e16602720
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonelyplanet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonelyplanet.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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