kusel.de

Issued by EUNETIC RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number cb:8f:98:99:b9:8d:70:cb:6b:d8:4c:6b:4a:8d:2e:fa was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kusel.de

EUNETIC GmbH

Organization: EUNETIC GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): cb:8f:98:99:b9:8d:70:cb:6b:d8:4c:6b:4a:8d:2e:fa
Serial Number (int): 270578876700702740301721459978153045754
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 31:a0:b1:84:58:25:a6:5c:9b:ed:30:4d:f5:0f:87:e4:e7:06:76:4b
AuthorityKeyId: 37:9c:da:21:6a:3c:6e:90:87:9d:eb:e4:24:4b:24:cb:53:65:a4:81

Fingerprint (sha1): 42:1c:a9:bc:50:4e:6a:4b:f7:e4:1b:ea:40:74:4c:03:06:58:18:84
Fingerprint (sha256): b1:1a:83:c6:11:08:d7:a1:63:f5:5a:1d:8d:3a:3d:bb:d6:92:a2:53:bc:dc:bf:98:ff:5d:6b:13:a7:22:a0:c1

Issuing Certificate URL: http://crt.sectigo.com/EUNETICRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate kusel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kusel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kusel.de
www.kusel.de

Other certificates including the domain name kusel.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kusel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdjCCBN6gAwIBAgIRAMuPmJm5jXDLa9hMa0qNLvowDQYJKoZIhvcNAQEMBQAw
XzELMAkGA1UEBhMCREUxFTATBgNVBAoTDEVVTkVUSUMgR21iSDE5MDcGA1UEAxMw
RVVORVRJQyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAz
MB4XDTIzMTIxODAwMDAwMFoXDTI1MDExNzIzNTk1OVowEzERMA8GA1UEAxMIa3Vz
ZWwuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5LCQDTXFGQ3V
OwwImSZLUOpjf6n9Y+A/ddjO8orCxajI3VG/saE9ZZtA5Jkd182TrF+JAOdj3N8Q
UlLxMUShfP58n7XHtlj7RuPlg6An3Z0pfIBeCRpznbNp1JJ4idIWtIkUh7ezDsWS
PdSPwRlCr/7O3+fL0v7LyrQJmkOBtb2xYqCGdKLOIZ7HaaAb6lTm9OcxYwg2QuiA
Zx5+UI0IqtzyZfkxQ7yqRDuI7h4TXZ1/E9AL49/6hNXwygQ58tjyQJ+thT+EaK6u
Sw8C87Ijpu58O2yqHZDDCueKhLOqukY+fgGEK9khVWkiD5Gf6H4lg9udUla+QNIF
UhUtacADAgMBAAGjggL3MIIC8zAfBgNVHSMEGDAWgBQ3nNohajxukIed6+QkSyTL
U2WkgTAdBgNVHQ4EFgQUMaCxhFglplyb7TBN9Q+H5OcGdkswDgYDVR0PAQH/BAQD
AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAmswJTAjBggrBgEFBQcCARYXaHR0cHM6
Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGFBggrBgEFBQcBAQR5MHcwUAYI
KwYBBQUHMAKGRGh0dHA6Ly9jcnQuc2VjdGlnby5jb20vRVVORVRJQ1JTQURvbWFp
blZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQTMuY3J0MCMGCCsGAQUFBzABhhdodHRw
Oi8vb2NzcC5zZWN0aWdvLmNvbTAhBgNVHREEGjAYgghrdXNlbC5kZYIMd3d3Lmt1
c2VsLmRlMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgDPEVbu1S58r/OHW9lp
LpvpGnFnSrAX7KwB0lt3zsw7CAAAAYx8fxm7AAAEAwBHMEUCIA71d1V2AuZZg40E
BhVM7QDBj0vnFVc3GqTC4hF/jwTvAiEAyOgIOSRzlH7sa0xOE/7qzQm3uNVys7BH
YdffSkk885AAdQCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAYx8
fxmkAAAEAwBGMEQCIAUw40UTKtsMMlGI+slz/6G4+IucfQbNQYJ3kq/z2c4GAiAg
y+cmZ5njOMGXgxyzohNzO3uyyqDjH6idS8FLcvBOwgB1AE51oydcmhDDOFts1N8/
Uusd8OCOG41pwLH6ZLFimjnfAAABjHx/GZcAAAQDAEYwRAIgHS7LUAyjm7JWLIz8
GGiuCR3UeQazAZiMsnwR2fiLl6YCIE59bftVqIlFWww8yVXhgxPKOsiqsbQ3v8P1
Fzm5M+d+MA0GCSqGSIb3DQEBDAUAA4IBgQB0UDIZUdCGbpULNkO1F7dNaeoQ0/YT
p9w4RU7j1d/egqOrdqNSTmfgy6B9fKUXD7YLfhlWXgf1PJ1TuJdxGZiUFnws3E1g
gYyIMLrXIDxnPoE8RzHTnvzT7lsgJv6otz1VOvV2hEwV1gFj4sdXjHjBZ67kyJIX
XvdC7y5K8Nx2KCwRFG4h5P1Jfi9OmHVTiOdXhwaUyrnSEg0p596t/r1R5skKnORO
ycMDwsyAEjnRjWGB88DnwDP/ZopX+nFYltn3uxi4MTMLTh5kcIMhpdoo2Ie9kwMT
XCL6ijIxNCma0//CKBF7GwS3fmt7T6u89fL+SG3taX6/e8Ox/XSh6JUkk1wf4YO5
8S3zZ/cFTcxGN3fZ+QxoIaxz6bt87YPx0bV8GToRGP02pl6MIq+2SnOguJt+8TPa
JWWp+Pa4qmJgTNgSR2mQPc50WFePZCy1hi10XissGELC/fhlYIRcn1wLkgt57pg9
f+HQ+5+dPuyvnBW74kEE5J+MyKsY1Om5ilg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeSwkA01xRkN1TsMCJkm
S1DqY3+p/WPgP3XYzvKKwsWoyN1Rv7GhPWWbQOSZHdfNk6xfiQDnY9zfEFJS8TFE
oXz+fJ+1x7ZY+0bj5YOgJ92dKXyAXgkac52zadSSeInSFrSJFIe3sw7Fkj3Uj8EZ
Qq/+zt/ny9L+y8q0CZpDgbW9sWKghnSiziGex2mgG+pU5vTnMWMINkLogGceflCN
CKrc8mX5MUO8qkQ7iO4eE12dfxPQC+Pf+oTV8MoEOfLY8kCfrYU/hGiurksPAvOy
I6bufDtsqh2QwwrnioSzqrpGPn4BhCvZIVVpIg+Rn+h+JYPbnVJWvkDSBVIVLWnA
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270578876700702740301721459978153045754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kusel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19427231752953106182556335051741637476541757234317787124189534140330995441348120634862163358104797010776589248926690867736975644262499564282593662560088733125697174795844154403525025625261632751869256676789912621763121537291393204105452720392383808692401846717309021133590343182411540873123269065734340619908547817687919877132923114994534423683988801542543173610304495470031726785887409581786396816431805986376370334594649335370360836100582336776046626523324708783365455450848115661616633847138656509879829983924350327425923278334782578477975317405663282407048098351120708240967746948293601074507720232803986594971651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 379cda216a3c6e90879debe4244b24cb5365a481
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a0b1845825a65c9bed304df50f87e4e706764b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.107
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/EUNETICRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kusel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kusel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c7c7f19bb000004030047304502200ef577557602e659838d0406154ced00c18f4be71557371aa4c2e2117f8f04ef022100c8e808392473947eec6b4c4e13feeacd09b7b8d572b3b04761d7df4a493cf390007500a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018c7c7f19a4000004030046304402200530e345132adb0c325188fac973ffa1b8f88b9c7d06cd41827792aff3d9ce06022020cbe7266799e338c197831cb3a213733b7bb2caa0e31fa89d4bc14b72f04ec20075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c7c7f1997000004030046304402201d2ecb500ca39bb2562c8cfc1868ae091dd47906b301988cb27c11d9f88b97a602204e7d6dfb55a889455b0c3cc955e18313ca3ac8aab1b437bfc3f51739b933e77e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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