www.rechtsschutzhelden.de

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number d6:99:f5:1c:42:69:d1:1f was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rechtsschutzhelden.de,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d6:99:f5:1c:42:69:d1:1f
Serial Number (int): 15463660297275429151
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 98:82:96:36:74:33:8f:33:b9:d9:cc:1f:d6:0e:99:c5:31:00:f3:a3
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 5d:11:5c:00:e0:a4:d7:06:97:1a:66:e4:b8:71:f9:f7:ed:cc:95:db
Fingerprint (sha256): ae:48:0e:07:e6:c2:52:f4:63:d5:94:51:a0:9b:e0:f3:69:75:a6:24:76:56:d0:eb:5d:5c:1b:37:c6:7f:8d:32

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-135.crl

Check the revocation status for certificate www.rechtsschutzhelden.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rechtsschutzhelden.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rechtsschutzhelden.de
rechtsschutzhelden.de

Other certificates including the domain name rechtsschutzhelden.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rechtsschutzhelden.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15463660297275429151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 10:39:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-21 10:39:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rechtsschutzhelden.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751545769879202745370396852457209228311123631373207658659998172723610638645529998968018766675609643660969662023217140091368069330969453865798434094909636311586248887581582124351225712222309681140797225625304804904130950404630675758809203738779316546052481841297554597796219429246990317612405350020337938469856403109479712301273328810917140564042583950939557123767684271869718936217165481638246433802747366463282860334557081194414367294838290815304605753692734816980851794010100496246116633114905214052670231175086095900493081351867400124866946878210310485814548770076339275304385183074256000319267272196225975236136080613918159548809645700433405945087119511452270306063490795754929443085197344892328341172549613297258226218446103127276023797364660910385669340214195963379186695805600727975101693392092519106459495498783685610302040919394853868308658015400046454917312685152758310836800099736980005934444482893336273205251904326897345966081008397752252367807208453463426280323797878924708751979146205730779293766425090730269051794055472864363204354115243579621058158826307377360255035292393170996864944126223124754261046173046016365376477262994490163004132675884553889406963389236846804807529507373341807943949332249709333063301233863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-135.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rechtsschutzhelden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechtsschutzhelden.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9882963674338f33b9d9cc1fd60e99c53100f3a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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