news.steinberg.net

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:63:b0:e5:9d:97:f9:ce:a6:10:4c:c4:99:35:51:62:57 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.steinberg.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c5:63:b0:e5:9d:97:f9:ce:a6:10:4c:c4:99:35:51:62:57
Serial Number (int): 328504996151693081029091559189274749395543
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:2c:d2:05:d5:76:7d:cd:8e:8e:f1:32:0c:9c:0a:6b:ef:be:ff:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:70:1f:a2:51:8a:a3:00:67:4e:92:48:52:2d:df:52:55:9f:02:76
Fingerprint (sha256): b0:e7:ea:48:c6:a9:73:7a:bd:75:d5:72:f4:b4:8a:fe:da:f8:5b:22:72:f2:da:3c:8b:36:85:20:24:ce:cc:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.steinberg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.steinberg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.steinberg.net

Other certificates including the domain name steinberg.net

(limited to 100 certificates)
www.steinberg.net
id.steinberg.net
product-line-management.mbstage.steinberg.net
*.steinberg.net
shop.steinberg.net
shop.steinberg.net
www.steinberg.net
*.mbtest.steinberg.net
shop.steinberg.net
*.steinberg.net
download.steinberg.net
download.steinberg.net
steinberg.net
*.steinberg.net
download.steinberg.net
*.steinberg.net
pathfinder.playground.steinberg.net.io.steinberg.net
*.mb.steinberg.net
www.steinberg.net
product-line-management.mbstage.steinberg.net
beta.steinberg.net
download.steinberg.net
shop.steinberg.net
download.steinberg.net
news.steinberg.net
*.mb.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
*.mbstage.steinberg.net
b2b.steinberg.net
b2b.steinberg.net
mbstage.steinberg.net
*.mbstage.steinberg.net
testweb.steinberg.net
product-line-management.mb.steinberg.net
webmail.steinberg.de
news.steinberg.net
*.steinberg.net
www.steinberg.net
mb.steinberg.net
shop.steinberg.net
*.mbstage.steinberg.net
shop.steinberg.net
ru.steinberg.net
forums.steinberg.net
*.steinberg.net
shop.steinberg.net
news.steinberg.net
steinberg.net
product-line-management.mb.steinberg.net
ocl-steinberg-live.steinberg.net
shop.steinberg.net
shop.steinberg.net
id.steinberg.net
*.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mb.steinberg.net
code-pool.test.io.steinberg.net
download.steinberg.net
steinberg.net
*.mbtest.steinberg.net
sdk.steinberg.net
*.mbtest.steinberg.net
steinberg.net
news.steinberg.net
www.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
id.steinberg.net
www.steinberg.net
shop.steinberg.net
mbstage.steinberg.net
mbtest.steinberg.net
newshub-publisher.mb.steinberg.net
*.mb.steinberg.net
news.steinberg.net
download.steinberg.net
pathfinder.io.steinberg.net
www.steinberg.net
www.steinberg.net
devweb.steinberg.net
forums.steinberg.net
*.mbstage.steinberg.net
sdk.steinberg.net
*.mb.steinberg.net
auth.steinberg.net
partner.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
openam-steinberg-euw-dev.id.forgerock.io
forums.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
beta.steinberg.net
*.steinberg.net
news.steinberg.net
steinberg.net
steinberg.net
mb.steinberg.net

Certificate

The complete raw certificate details for news.steinberg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlBkjVoOSgLExPehuhqd
sIRib2Nh7caVkqelV9YKdFxT+xwOnNwdxNAr9EIadUARnaHT59H8Yd+QCNrAElRv
EcjEJdFK0VF85vf5RjOBlaRTtIDwJTvqG32fApBvTPCiC3gqrD0ZMrPArQzBnFb7
A8YKgcSWucgg36J6P0q2PXs3UtrSZvIeee8Rdxk0l9yeEIEePvP66iZQGGsHL0Ii
vbRXbvzTX6EckWSO4eEIKZor4Ho4wG5SC/pmwyOZmZFBvMGjzeD4cl4inP7getpb
AF7xDs3vho8vPkEF4XCRL+4l7fpS3AVExuLV8ZjnKtZblEVQvZyto/YgzfVxE2YH
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328504996151693081029091559189274749395543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 08:21:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 08:21:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.steinberg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21500155002484396027911314709337004273550844610733559095944304055415812889180472200565368443365235977402394537389908907827571194541337543843838944230731406631918799101681264039915935415484039442125918179089616757310012780255390909593399332546206156578561146410647572566796591789687942447251944507848344769112671020110186258878951049527155816626893784269143192789384574129083501700786105648890288400854626135093920134727121698328922655005673417649507165880719075739753195651838491140811156625769315476002724258039630904224811491246232964239792125073132530181296357768343884270399682586447152837165480839604584548009811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d2cd205d5767dcd8e8ef1320c9c0a6befbeffa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.steinberg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dd01e9bc90000040300473045022100a06015cd4f1799d07c95f7aa19baea2c5d3080ff2dc4fb17216f91e01584d24b022001940e6e1e544e7f8213dea9e83981258d86da80aba29b9f357cbe5f1de309480077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dd01e9cbb0000040300483046022100bb6aea5b265fe657087561a0dc2156ea3c87a166cfea5f93acb6d97c9f6b06d4022100f78536310646f31bd3bdf2bdca1a13e579d6f903d1476842372a588d70a972d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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