*.bridge-app.de
Issued by R3
About this certificate
This digital certificate with serial number 04:be:ba:0c:12:96:09:25:55:8c:4d:31:46:00:ad:54:29:bb was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.bridge-app.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:be:ba:0c:12:96:09:25:55:8c:4d:31:46:00:ad:54:29:bbSerial Number (int): 413350092533768019157031117536537487878587
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 28:ca:a2:30:07:a5:8b:cd:85:a9:ab:ec:f6:4b:8b:1e:0c:6b:46:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ea:00:c5:8c:72:33:72:e6:1a:6f:2b:25:8c:d7:6e:bd:9d:b3:eb:7f
Fingerprint (sha256): b3:38:2d:7c:8c:0b:c0:19:40:47:3c:f2:8e:89:b9:db:90:c9:d4:83:f0:3a:04:45:c2:21:a6:08:e2:e4:3f:04
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.bridge-app.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bridge-app.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bridge-app.de
bridge-app.de
bridge-app.de
Other certificates including the domain name bridge-app.de
(limited to 100 certificates)
offr.be
myriad.at
resquash.com
firebase.beatscratch.io
inbox.rest
www.esthetys.nl
www.ujjaintourist.in
www.ujjaintourist.in
www.aitopcoder.com
*.bridge-app.de
rong.pedidomovil.es
www.dashboard.bridge-app.de
*.bridge-app.de
www.kick-off.app
online-password-generator.in
an2cabs.com
christianbackous.com
eval.mikk36.eu
www.greavestravel.com
resquash.com
northglennthorntonsentinel.column.us
jcpm.captive.vagalumewifi.com.br
www.personalinvest.by
shopq-staging.qsciences.com
proguru.net
messenger.stable.codes
www.apnax.net
games.over-x.tech
adm.sebasiland.com
bindalgallery.co.in
www.cottonready.com
www.sreenachimarchits.in
maridafit.com.br
www.gisua.com
www.swishy.tk
pathfinder.nextit.be
www.99active.net
downtheladder.net
www.99active.net
kinnectedhealth.ca
atalayahills.porcelanosapartners.com
emina.love
www.dreamswopper.com
*.bridge-app.de
herbitussin.pl
link.libry.jp
*.bridge-app.de
mirate.com.mx
bindalgallery.co.in
www.rockwellresearch.co
ufincs.com
www.ikidsart.co.kr
steinfeld.co
www.inntech.pe
lerchdrums.com
christianbackous.com
admin.auction.holmasto.fi
*.bridge-app.de
musicminer.co.in
www.apsorteio.com
www.pranjal-choudhary.com
vurvey.dev
admin.netmenu.com.br
dymockstutoring.snapmentor.no
mirate.com.mx
www.foht.co.ke
www.seeu.me
app.thepollnation.com
staging-admin.lckr.io
pearpartner.com
jawantechpk.com
app.mobilizenow.io
www.riingo.com
myriad.at
resquash.com
firebase.beatscratch.io
inbox.rest
www.esthetys.nl
www.ujjaintourist.in
www.ujjaintourist.in
www.aitopcoder.com
*.bridge-app.de
rong.pedidomovil.es
www.dashboard.bridge-app.de
*.bridge-app.de
www.kick-off.app
online-password-generator.in
an2cabs.com
christianbackous.com
eval.mikk36.eu
www.greavestravel.com
resquash.com
northglennthorntonsentinel.column.us
jcpm.captive.vagalumewifi.com.br
www.personalinvest.by
shopq-staging.qsciences.com
proguru.net
messenger.stable.codes
www.apnax.net
games.over-x.tech
adm.sebasiland.com
bindalgallery.co.in
www.cottonready.com
www.sreenachimarchits.in
maridafit.com.br
www.gisua.com
www.swishy.tk
pathfinder.nextit.be
www.99active.net
downtheladder.net
www.99active.net
kinnectedhealth.ca
atalayahills.porcelanosapartners.com
emina.love
www.dreamswopper.com
*.bridge-app.de
herbitussin.pl
link.libry.jp
*.bridge-app.de
mirate.com.mx
bindalgallery.co.in
www.rockwellresearch.co
ufincs.com
www.ikidsart.co.kr
steinfeld.co
www.inntech.pe
lerchdrums.com
christianbackous.com
admin.auction.holmasto.fi
*.bridge-app.de
musicminer.co.in
www.apsorteio.com
www.pranjal-choudhary.com
vurvey.dev
admin.netmenu.com.br
dymockstutoring.snapmentor.no
mirate.com.mx
www.foht.co.ke
www.seeu.me
app.thepollnation.com
staging-admin.lckr.io
pearpartner.com
jawantechpk.com
app.mobilizenow.io
www.riingo.com
Certificate
The complete raw certificate details for *.bridge-app.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgISBL66DBKWCSVVjE0xRgCtVCm7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjMxNTI4MDZaFw0yNDA2MjExNTI4MDVaMBoxGDAWBgNVBAMM DyouYnJpZGdlLWFwcC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOHv6fusghgk8n43Dm0giiAo+IG9OhEQrLX13m/yK0r03TydBVdqbc+kqZe3icdt 1GgtFbRXRgZF9qzbCQuBuvfQcpHtbib/+MscfBB1AycxouWSUmEe0iMTxhrLqWAS 3VUFrqRbUXD03S3WxGynSHQ8bAsF2u9z6YcY6JAJuPX+EwAAp47nld2k1MCHj55f wzFYvwNHDTL5MQ5z6nJiko1nYGevDbusr/Gux20Je/AgsAqiG05YVz5U1dHdnOdS jUGVouSrUFtIlCrSskR+Mp/WUIuSrf4wNeJM7ilhxncQNRmfyvIO7AjV6tBQAexj teKHpm/MrYIDV5IN/dphBqkCAwEAAaOCAiAwggIcMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUKMqiMAeli82Fqavs9kuLHgxrRgEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wKQYDVR0RBCIwIIIPKi5icmlkZ2UtYXBwLmRlgg1icmlkZ2UtYXBwLmRlMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3 dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGObCQSEQAABAMARzBFAiEA 38aQhunAO7K7Qc+l0O1LVz3vDRGdSWaSLnzwWj5KxeECIAKBARh4QaPMIy0j6CX/ anrM1nw8AQ/D8UnHnnWxgKCRAHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4 mm31F9gAAAGObCQSGQAABAMARzBFAiBxyD43yi96tKksds2RwaWg2gMoSodoIAnq ol6AjrCFPQIhAIsrTmvhLple2eGmBQ5DaAladf8B8y9k4xOEtKUTENtSMA0GCSqG SIb3DQEBCwUAA4IBAQAwgi2LKrpqaMYyTh8qr2Zgt1nAiXQfFmRca8Ejk53GgGLo rVU4Nf7q1tFx/U4A/PbcPST5ZxnUHMktXoctOsuuCBJNB3kWNaRUdXRgNar/vLRZ QnUU6D7ENh2NwgVroriZVd6wFAm+mmiMyJIBgipzEs+OES2Yr2N07UZLFBNDAgWB KkeRjhnE9gwVwmOojxcEp2UE9AkdukEzIaJYXUXNu13Fuwa9jm+qdQecotSC7427 tu3ogZWCzRfu9DYxocrtqkS6HRKaGWGvx7Tdvq3l+k6HMqM1hcaDTtkXn5iENo8y z7ol1wA3pcP3Njqm1zKvn71CUsyYfECpBb2GQs0n -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e/p+6yCGCTyfjcObSCK ICj4gb06ERCstfXeb/IrSvTdPJ0FV2ptz6Spl7eJx23UaC0VtFdGBkX2rNsJC4G6 99Byke1uJv/4yxx8EHUDJzGi5ZJSYR7SIxPGGsupYBLdVQWupFtRcPTdLdbEbKdI dDxsCwXa73PphxjokAm49f4TAACnjueV3aTUwIePnl/DMVi/A0cNMvkxDnPqcmKS jWdgZ68Nu6yv8a7HbQl78CCwCqIbTlhXPlTV0d2c51KNQZWi5KtQW0iUKtKyRH4y n9ZQi5Kt/jA14kzuKWHGdxA1GZ/K8g7sCNXq0FAB7GO14oemb8ytggNXkg392mEG qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 413350092533768019157031117536537487878587 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 15:28:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 15:28:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bridge-app.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28521924618356633088983149933443087839404642732437862564358557530267006366314302745766729700467455952043415235940437269865722605938556508100273269851921434068180183242732587085604546916974348704511383702872736929582486796586140354984285979905588857638343663387805852794678802625885058812360811543162545398217609730685867032049782027924233712490483176915673898293255583982147421800365223136391837543780868272309919873052963319454608210875500660600530611604765694118056340942961144633772777441525191495421412228127774077491372508640473568947363138850861812076695749820217283015897053528552793240535405192662226443503273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28caa23007a58bcd85a9abecf64b8b1e0c6b4601 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridge-app.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-app.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6c2412110000040300473045022100dfc69086e9c03bb2bb41cfa5d0ed4b573def0d119d4966922e7cf05a3e4ac5e10220028101187841a3cc232d23e825ff6a7accd67c3c010fc3f149c79e75b180a091007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6c2412190000040300473045022071c83e37ca2f7ab4a92c76cd91c1a5a0da03284a87682009eaa25e808eb0853d0221008b2b4e6be12e995ed9e1a6050e4368095a75ff01f32f64e31384b4a51310db52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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