shop.freihai.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4a:ca:98:10:86:9f:a9:73:5d:a0:f8:22:f2:07:28:e8:53 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shop.freihai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4a:ca:98:10:86:9f:a9:73:5d:a0:f8:22:f2:07:28:e8:53
Serial Number (int): 286787046566885776941450073666243558697043
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:3e:82:7d:00:2b:7b:e9:5d:a4:14:d6:01:50:fe:36:af:42:b6:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:e0:72:ec:bd:d3:6e:54:c9:53:58:4f:3c:75:c8:69:74:84:ce:8e
Fingerprint (sha256): c0:6f:a2:e7:a4:d4:6b:8f:7c:cc:b7:12:26:8a:0d:64:a0:24:c6:97:bb:c5:f6:70:84:1d:c7:5f:8d:c1:1b:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.freihai.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.freihai.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1min.media
*.1min.productions
*.aeinou.com
*.blaumannmusik.de
*.csd-westsachsen.de
*.dog-model.de
*.durchblick-freiraum-mehrwert.de
*.frankenbaum.de
*.heileanum.de
*.kratzdesigns.de
*.loggernaut.com
*.orte-des-dialogs.de
*.pizza-haag.de
*.pizza-siciliana.de
*.psychotherapie-proell.at
*.quarterquantum.com
*.reality-twist.de
*.xn--rs-gerste-v9a.ch
1min.media
1min.productions
aeinou.com
airflow-beta.moinalex.de
app.icekey.de
apps.hutch79.ch
blaumannmusik.de
crm.derbrocode.de
csd-westsachsen.de
dog-model.de
durchblick-freiraum-mehrwert.de
frankenbaum.de
heileanum.de
kratzdesigns.de
loggernaut.com
mazza.pma.mazza.cloud
orte-des-dialogs.de
partner.enjoi-sailing.com
pizza-haag.de
pizza-siciliana.de
psychotherapie-proell.at
quarterquantum.com
reality-twist.de
shop.freihai.com
shop.herzvonhamburg.de
steam.alicepeters.de
www.cbg90.de
www.taftea.net
www.tenor.j-kraus.de
xn--rs-gerste-v9a.ch

Other certificates including the domain name freihai.com

(limited to 100 certificates)
clickparty.one
www.karten.fraenkische-reblaeuse.de
shop.freihai.com

Certificate

The complete raw certificate details for shop.freihai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtgdM+kxNw69IbjQV8DUaSparq2oN
AuYez/JAX476spskrQeJ1Im4s4i99OHHMztYgGp+qbtSRXAZSj2KwN2o4Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286787046566885776941450073666243558697043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 18:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 18:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.freihai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b6074cfa4c4dc3af486e3415f0351a4a96abab6a0d02e61ecff2405f8efab29b24ad0789d489b8b388bdf4e1c7333b58806a7ea9bb524570194a3d8ac0dda8e1
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							093e827d002b7be95da414d60150fe36af42b6b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (947 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1min.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1min.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeinou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaumannmusik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csd-westsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dog-model.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durchblick-freiraum-mehrwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankenbaum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heileanum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kratzdesigns.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loggernaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orte-des-dialogs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizza-haag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizza-siciliana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychotherapie-proell.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quarterquantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reality-twist.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rs-gerste-v9a.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1min.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1min.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeinou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airflow-beta.moinalex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.hutch79.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaumannmusik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.derbrocode.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd-westsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dog-model.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durchblick-freiraum-mehrwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankenbaum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heileanum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kratzdesigns.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loggernaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazza.pma.mazza.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orte-des-dialogs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizza-haag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizza-siciliana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychotherapie-proell.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarterquantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reality-twist.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.freihai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.herzvonhamburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steam.alicepeters.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbg90.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taftea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenor.j-kraus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rs-gerste-v9a.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f787bdb25000004030048304602210081ef2406c1658d0efdc31e66a11348af6b9e3daa04b575267f5705af5d599dc6022100f36d3d64a2a3377d3561018f93471adf3ce8cd663fbaaf907911ce8f4799536100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f787bdb6c000004030046304402206d4be35d0de8f9b4c964b6fec08fec59f2fbdb456bb5a7a87325524d5d752baf022058b64fee79a2c7cabbdc699fd85a353c6647360193b081b1e7f3a502bca100cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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