ssliaa.emms.com

Issued by R3

About this certificate

This digital certificate with serial number 04:df:0d:d6:f7:82:e2:cb:13:ef:db:15:27:5a:2c:f8:dd:a3 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssliaa.emms.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:0d:d6:f7:82:e2:cb:13:ef:db:15:27:5a:2c:f8:dd:a3
Serial Number (int): 424350507686008216645415876418276018412963
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:a8:7d:8b:59:6c:12:e0:d2:97:28:92:c3:45:5c:2c:4f:05:8b:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:19:32:ca:82:13:88:13:4d:21:0d:c7:16:90:4f:45:00:9d:e3:52
Fingerprint (sha256): cd:02:28:f4:17:da:7d:e3:fa:d3:ff:91:c3:4a:34:fc:1a:9f:28:15:00:f7:ae:04:c0:9f:94:c2:72:a1:6f:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssliaa.emms.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssliaa.emms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i.alle-gewinner.net
i.alles-gewinner.com
i.avant-shop.de
i.belegexemplare.adrom.net
i.cleverwinners.com
i.einfach-gewinn.jetzt
i.elektro-mobil.net
i.flug-jetzt.com
i.guenstig-fliegen.net
i.hier-und-jetzt-gewinnen.de
i.hotel-deals.net
i.ihr-trip.de
i.kredit-vergleichen.online
i.mailtreffpunkt.com
i.meintierportal.de
i.niveauvoll.fit
i.platinumwin.net
i.preischecker.net
i.reiseberatung.net
i.reisen-deal.com
i.reisen-service.com
i.secret-offers.net
i.sendseven.de
i.sendsix.de
i.shopping-trend.net
i.treffpunkt-news.net
i.valid-address.com
i.vip-shoppingdeals.com
i.yumpu.news
ssliaa.emms.com

Other certificates including the domain name emms.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ssliaa.emms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3semTbHoIc0mxbEB5DyR
mjrOceVQXT+32xcP1CSteVN3oebcUv4vGs1maBJGnXMNGL/nq4kWcJJwGsCLLK1K
QKyhFaiPVwPkDn24K4EzGxKXwWyRhzdjCfY4qD0ow9Z+L2FuIpVocPJQX+nZUMUR
LUAyj1xEVAZdvv9pOl8Il6gNG6YzqDsGVypAPIkM/VCNMhTu7i0Njxio5s6FQtw/
8LA+uhWF1/8A7Ha6fIbN7JNhse4nIg7XX6ZI/ZTs1LBARHsbHpEUhbdQFzyYlSh/
IUhr+ZvhbZANdr2cOitF6X8dYNdOFzsagN+U5VvyBUNvcrEpXk4nTCERS+lyI/4K
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424350507686008216645415876418276018412963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 17:46:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 17:46:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssliaa.emms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28123354600896749413495513780003061532513733373457403826816810513309813666068403067272672295504253225755845012048965158169610594016988066686811562856073849693233124450004715934817859913539127886242137424032785071902855626166834001555686174527058462637931663269968220228150199257739000434915470521814188201152144102409640647591043331235194191414507811684711726785814747520594981184779921557941540085060184552390977357096506699804345013043728300673043453299669805794058856339058860982311557099265382063533041216221133418516532702577121392177504623392005747641096606372895124624629557175633504753096072656887253374470781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ada87d8b596c12e0d2972892c3455c2c4f058b60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (628 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.alle-gewinner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.alles-gewinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.avant-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.belegexemplare.adrom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cleverwinners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.einfach-gewinn.jetzt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.elektro-mobil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.flug-jetzt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.guenstig-fliegen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.hier-und-jetzt-gewinnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.hotel-deals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ihr-trip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.kredit-vergleichen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mailtreffpunkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.meintierportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.niveauvoll.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.platinumwin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.preischecker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.reiseberatung.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.reisen-deal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.reisen-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.secret-offers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.sendseven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.sendsix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.shopping-trend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.treffpunkt-news.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.valid-address.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.vip-shoppingdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.yumpu.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssliaa.emms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0cf46e600000040300483046022100af8dd0e3c97df6a899500b86faf4bbbb42a37d74076e4dfbfff2fce5352949e1022100c13b756b44184d0c467213c729bf1c7b9d7aa3ce9d4f24ebcec583c2165aafa10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0cf46e77000004030047304502201c81d1a848df64382468215853127bf534b23aac94f090289ad0c2645dfbee83022100a0a53bc23ce126eae55bc47d39e4822ee9846c1ec2ba9c3e916409a75b6d43d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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