www.tunero.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ba:77:cd:d3:d3:15:92:3d:00:d4:04:cc:45:6e:61:7b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tunero.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ba:77:cd:d3:d3:15:92:3d:00:d4:04:cc:45:6e:61:7b
Serial Number (int): 247858465218598451055448665848137277819
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c6:75:4e:c4:dd:da:98:e2:4c:45:25:c7:c2:79:89:6d:f9:7e:4e:9f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): e9:86:a0:f9:15:15:3c:99:86:d1:40:cb:4c:56:71:32:a4:51:1b:eb
Fingerprint (sha256): c0:66:d1:69:11:8d:05:4f:20:a6:13:1f:f3:68:96:56:9f:65:e2:a6:e3:c1:b6:c5:af:f4:f8:78:05:90:48:b6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.tunero.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tunero.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tunero.de
tunero.de

Other certificates including the domain name tunero.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tunero.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247858465218598451055448665848137277819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tunero.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636505171289386673347741151223222809040881499008025445669339047566527713920024993288173773128782662999098542400707744517501898507028190500597712186644372736855475234608720655366335736857719569563662306285693645017916821264918628259170445512024398041638909627546224135757590021258475203441567722711277880998266443573547799551631013514342381900839031859260674815881634301586966693958937370592165558490377459130636262962056047285250311830132540924041662214957401127587671879956153889592542814284463791086671739955213450047201468638476323342655432770048375967082753673171601898191570283866485365438353848438334164932841090118007722002025020548731439900402055472917540780809878130013894451626206826432027184765590971034231610687014996609112958749846237275214931029507417892519091233650378580992459753774236646035268522477748249611443986170754472446383283204700332801408458593242174994959855762850644231832242889991696442637613442691899579735660669261069329858661689132916974944113463496216221510242675562257418894209698306092975040019205228918137886003909052651050291964542095970501831523548315081087369620073481675943516982276411223875239980689683523208938517343831168237783911432773611996253944877080143242219384098003290529737451971843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6754ec4ddda98e24c4525c7c279896df97e4e9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunero.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001718f4f63ed00000403004730450220086e5306fe65e8bc95ef793482ac2720558dc96d2a775b984632c0165e6a1b65022100dab5faa8f9efe605bf2cadf844791841f7092963ad34ba2cea03de377769376f0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001718f4f6414000004030047304502204a60776615dab3701a30ac882d97167e33adc332638db721be85e12522d9066f022100820b8d3e5c373a666f4b154909f4c5075a151383e6ad1102cb75637ebcd0db8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c339517a47904bc20ca52f99715f900dce92618e01d253cf551383e79192b4b1957ffbe5bab3106fa4e51e1added828545233895420aa416d3bb8e5f89f0283174ad12b2d6538ca80c07524f4ac25a87c870194acb6975b9b31b595865f6fb4f2b8f2562b109dbda7a9330a6d478ed6c71e0323358a9e2b3a0ef223246c8ab7aae743020bed858becc3c23ff2ed941f5424b03e76160e785c74afbf1d7894b4b13a1a5c961c3b72b3cd7fb5b7ced5d5f5eb317207e4aecf944c4e5c01bc1c9a7465deb0212795cb5ae39e70689369d9d4590f6023c06b1adff71441d7373cd9b84da853413a20534c1d3434b6b89374950019a7d94274efc74fbb0f31d0de3ff