derspiegel.eu

Issued by R10

About this certificate

This digital certificate with serial number 03:b1:ff:55:52:03:a1:3a:e3:a6:fe:d5:24:68:93:a4:b0:3a was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=derspiegel.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b1:ff:55:52:03:a1:3a:e3:a6:fe:d5:24:68:93:a4:b0:3a
Serial Number (int): 321906232887890147247144155647324985798714
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:3a:50:52:26:16:8c:46:28:f3:3e:65:a0:88:f6:45:1a:b9:84:94
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 36:b7:48:50:83:18:6a:cd:ca:97:56:e0:27:50:c3:11:be:fd:32:de
Fingerprint (sha256): ad:d6:db:f9:e5:ca:7e:63:77:75:4d:dd:0a:cb:77:17:13:45:38:0e:c0:88:45:e2:c5:ab:e5:a8:92:c1:b3:42

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate derspiegel.eu

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derspiegel.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

der-spiegel.eu
derspiegel.eu
derspiegel.info
investors-darling.de
konferenzen.spiegel.de
manage-forward.com
manage-forward.eu
manageforward.de
manageforward.eu
radar.11freunde.de
radar.manager-magazin.de
radar.spiegel.de
rudolf-augstein-stiftung.com
rudolf-augstein.de
spiegel-bestseller.de
spiegel-bestsellerliste.de
spiegel-plus.de
spiegel-veranstaltungen.de
spiegel-verlag.de
spiegel.club
spiegel.plus
spiegel.tv
spiegelgruppe-rechteerwerb.de
spiegelgruppe-veranstaltungen.de
spiegelverlag.de
spon.de
wissen.spiegel.de
www.der-spiegel.eu
www.derspiegel.eu
www.derspiegel.info
www.investors-darling.de
www.rudolf-augstein-stiftung.com
www.rudolf-augstein.de
www.spiegel-bestseller.de
www.spiegel-bestsellerliste.de
www.spiegel-plus.de
www.spiegel.club
www.spiegel.plus
www.spiegel.tv
www.spiegelgruppe-veranstaltungen.de
www.spiehel.de
www.spigle.de
www.spirgel.de
www.spon.de

Other certificates including the domain name derspiegel.eu

(limited to 100 certificates)
apiegel.de
derspiegel.eu
derspiegel.eu
derspiegel.eu
derspiegel.eu
bento.app
der-spiegel.eu
apiegel.de
dasdeutschenachrichtenmagazin.de
der-spiegel.eu
derspiegel.eu
bento.app
apiegel.de
apiegel.de
der-spiegel.eu
bento.app
arztsuche.spiegel.de
derspiegel.eu
der-spiegel.eu
bento.app
bento.app
derspiegel.eu
apiegel.de
derspiegel.eu
derspiegel.eu

Certificate

The complete raw certificate details for derspiegel.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CoJjCo4V46nbciLuYxt
YwG+HRPfd1C23YbAuimzG7ckGm1zNMN7PQMSUXUSpaJNKMlErHi0BJHpvUown8rt
2ZRKHlO52RtOnsOPpyh5dJeKZ8FxRUgkqZMFgi4CuNXQFfuu+wFh10Cg8Qv14Uhi
U+6k57SHr7XTbFyFTP/VOMQGFk/4iXyLAvQELRNlFKlgPkVYmWSL9CCBMgA3XzaC
5SfNHCk/agimhPvXbdIUAwvfFpijRLsgXuztqAZhoJ+919cOKPBNRoq140OCPnCf
ZQK6mQzSKZwiLgYvY/vCn98XDlINgALAU9XW6Cf8JycJHHEGcZOkv97RTvfqS+PK
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321906232887890147247144155647324985798714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 00:22:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 00:22:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derspiegel.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26278296795697135547042312269622519944091247729544170065053594175631470375054796280064626332480630188247872318805847040880495994424735405347946195513465203086747285679668085662187783795889729787756136647197201812675016637096856439056959788377436467512595299577139249095401488713736260035756441572020830777358950721606386033558803027993148216706339826521644316601869175968398660154965396422258451947796000682199921948076446289712916125743093188145372213130865652318944342965723040461598479541243309810862611037116165839803215789216943159890274871994379131956912442414921340574546646726221723952936367328560738249984673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							863a505226168c4628f33e65a088f6451ab98494
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konferenzen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.11freunde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-rechteerwerb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelverlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiehel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spigle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirgel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spon.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001905222ddb80000040300473045022000daeb642f944d2130928c60f85adc76432507d15cad78f73e56b6f30321b2a1022100c15df7f1fa3a0964859e72714dadd5b09824aa627f55e8e224c58f58f49a98340076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001905222ddd90000040300473045022100b508ad9cf0825f56b5493346dd6aa18cb7aa91b4b6e41f4e9a5958224a51bee1022001f803263cd4ae5320ba39eb7a86c577eac04407cc2d39b4c6e9db3a629922b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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