embed.contentverticals.de
Issued by R3
About this certificate
This digital certificate with serial number 04:25:c8:0b:1f:75:c1:f8:f9:ea:3e:18:3c:54:07:cd:1a:75 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=embed.contentverticals.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:25:c8:0b:1f:75:c1:f8:f9:ea:3e:18:3c:54:07:cd:1a:75Serial Number (int): 361305494655622561120384895140081496300149
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3c:3f:16:65:1e:6a:8d:ba:e9:59:1c:f7:d9:1d:40:a7:a2:66:08:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2d:7b:a9:16:b4:22:24:9f:b2:98:db:5a:cb:2a:56:bc:09:d3:7b:1e
Fingerprint (sha256): b9:f8:5e:24:69:71:81:0b:58:19:20:7c:71:43:60:b8:93:36:f0:86:0b:4f:2a:38:ba:75:98:c8:9e:eb:26:50
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate embed.contentverticals.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for embed.contentverticals.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
embed.contentverticals.de
embed.stylebook.de
embed.stylebook.de
Other certificates including the domain name contentverticals.de
(limited to 100 certificates)
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
embed.contentverticals.de
Certificate
The complete raw certificate details for embed.contentverticals.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEIDCCAwigAwIBAgISBCXICx91wfj56j4YPFQHzRp1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDUwNTMwNTJaFw0yNDA1MDUwNTMwNTFaMCQxIjAgBgNVBAMT GWVtYmVkLmNvbnRlbnR2ZXJ0aWNhbHMuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiEVM7cJTgaR+iGdQddmEiKLTRHPTdSQg/634RdnYnNRtUspFA /AJcDW4i1u/Zx5YUmBF/Yr/lFVNVRx7GQORSgcUaisKX50P4i/bH6yusWR3KozVb B0aBKvmJ4gjMR68asyNTDodkeSGTupXW7eijRc8i9hMWLStw8aFQtIeOb5Nj760h Si1s+GR0i5VMQEsux6SlURixQSnLJi7RqbZvRuUYDcrs2lp7bw6kGpszSAlpBtp0 cHSU7a1fa15/dpCCxUMr7Fzk4X0B6RZeL1AJWBvNJnxFBqG/D0Jl6y/zmI2KpqgH Xr2blZl9CUuNAAmdxqiSf0FrKvP6yy8YcsyJAgMBAAGjggE8MIIBODAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFDw/FmUeao266Vkc99kdQKeiZghGMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMDgGA1UdEQQxMC+CGWVtYmVkLmNvbnRlbnR2ZXJ0aWNhbHMu ZGWCEmVtYmVkLnN0eWxlYm9vay5kZTATBgNVHSAEDDAKMAgGBmeBDAECATATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGggRkOIQtziO/me 6fGQkN5sBL7qC2r7VzfnVodw07xLwINnELee4mI03k/katcKfcN3A7lxDjnKqtGt mjjNdUYIiOn6z21U8QJxFK903yLwiS0LznzQsYloAg5eioopFySDbqUK6wcsrMUr Ib7SkgAvq7CqXw0PH5eTZuGv+ASTQut/nSW+Yio638NijjV/WYy2xW5et71Qaj7K q/fv/Ox/H5Wp59Ig1csVlUY7UIAQqq9kmVMGUkryJXEjy9HacOr+YzdI0+7Hhg5p aDAgnUxbhiDUVOc9F5INtJze2vhFT2CK6kqhvB7m/lfbBBmYwfyVIWLtnw4oA0AP DFo3Xg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohFTO3CU4GkfohnUHXZh Iii00Rz03UkIP+t+EXZ2JzUbVLKRQPwCXA1uItbv2ceWFJgRf2K/5RVTVUcexkDk UoHFGorCl+dD+Iv2x+srrFkdyqM1WwdGgSr5ieIIzEevGrMjUw6HZHkhk7qV1u3o o0XPIvYTFi0rcPGhULSHjm+TY++tIUotbPhkdIuVTEBLLsekpVEYsUEpyyYu0am2 b0blGA3K7Npae28OpBqbM0gJaQbadHB0lO2tX2tef3aQgsVDK+xc5OF9AekWXi9Q CVgbzSZ8RQahvw9CZesv85iNiqaoB169m5WZfQlLjQAJncaokn9Bayrz+ssvGHLM iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 361305494655622561120384895140081496300149 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 05:30:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 05:30:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'embed.contentverticals.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20459148742413000620347010892969748036883535924037729073682709391244723836320319253922355867877461925847496724930153961676519561847304333240603524030778259279060742382038294347918765376048617846143269757694131700933271413431501019747771634174136483924856881865585437477817713297956339609678271650137288474744750769282271750699327653676829588400705265188206139532772466831418966033859339632600096915797598151214462379853658370555540036781738627524550166586391971365617923331054982039118117192931958938141310464524501171439150837237323646668456919535449243327677669546519921512333100779878977610233775626152042944449673 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c3f16651e6a8dbae9591cf7d91d40a7a2660846 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.contentverticals.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.stylebook.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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