www.copyshopffm.de

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 26:25:ba:c9:67:46:37:15:a2:f8:f8:58 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.copyshopffm.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:25:ba:c9:67:46:37:15:a2:f8:f8:58
Serial Number (int): 11806042703939922460979820632
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 17:cc:21:6f:4d:06:63:85:3d:2c:ec:2e:16:95:82:e3:2a:70:bf:41
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 3c:97:d7:e3:ec:c7:60:52:16:63:fd:22:91:2d:27:ab:1b:06:a6:bf
Fingerprint (sha256): cf:0a:cf:a1:34:36:5d:3e:72:93:6a:f1:b7:43:86:f9:c2:c9:88:13:58:9c:22:76:c0:40:cc:0a:8f:91:80:54

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.copyshopffm.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.copyshopffm.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.copyshopffm.de
copyshopffm.de

Other certificates including the domain name copyshopffm.de

(limited to 100 certificates)
games.spinberry.com
www.shelf.bike
buscador.palomitacruda.com
ahmednafies.com
www.copyshopffm.de
danielle.ai
banabifirsat.com
tracking.vanchuyenhanganh.vn
grp.mediabracket.com
elektro-koncept.com
www.copyshopffm.de
gtools.mskian.com
titan.spacemaster.io
order.copyshopffm.de
jettmoy.com
www.theaiformula.com
www.icjlitoral.com.br
www.med91.in
tracking.vanchuyenhanganh.vn
copyshopffm.de
thuzio.com
order.copyshopffm.de
buscador.palomitacruda.com
www.copyshopffm.de
*.copyshopffm.de
www.copyshopffm.de
www.copyshopffm.de
bestellung.copyshopffm.de
www.link-dev.hicity.world
www.nursemypc.com
www.copyshopffm.de
staff.risekit.co
gostartdriving.com
*.copyshopffm.de

Certificate

The complete raw certificate details for www.copyshopffm.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna9HVy+PCzZYtKf6mOJw
N4eXKbpBEW2D3Hw5mllMUtbFEVIsF2Jpkdw9ppsowcSfqHfsKK9O122bEHCCEoWt
TpKTAtsodwX44CPj7xqMmrrBA9WoVSAimYPunqsYVJIt+fb1SO+MAu1pom+DesgZ
ORWVZfNCoB/qQIj/kj70bAmNUb7RTlgu5a1TKJGQfNBXz34u/qYwMiFVPyvwk8D0
EDL5l7LZ1iAyP4KtwQxSahjipntgl3uCFLTVz9auzUtag16pb78dg+h3xSrWv44x
p4XCJ6VlGjuoJV1q0evUmykHsjMy/wqO779tCDT98tmpKczfkt+LkSAGgdBlMdpM
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11806042703939922460979820632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 13:18:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 10:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.copyshopffm.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19905847015276683727398755131756752382442403488969123581502077267134365645621941544929052646712884385353964900457510138910769811667720438080569191136911615116881462198839535566741921586055828854402831955077483530526756124680727876856237976541493123878421506182177864317193506958244786640268214525775908218070620012730762591230158877149575767648667365594233605613170610810403227250989414344754535692383876205166431667791657355966517946030821110356537400816826615454534602525619906461684019609649569843580330830890546079311951981540377035204514782291048307449078051969750036581305096973640373788317070356226293242678477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyshopffm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyshopffm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17cc216f4d0663853d2cec2e169582e32a70bf41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a0f71a1deac256a0a732a248fbf448cb857bdf8458df0a1fdd9efd6dc130fdda90f7bfb5980853c91af5e89ca0862df503371a175825deeb1923d870e232f72968db95ef6c786c171a45a7d0672b85a7a35a9b921f34001eac16efa9f1594039c3b15a7f96731e1c4604960db0fea5d397fe307c6d9d2a2097327ebdfdd149bea449f32e6f07a769f1f464ac6b851edb67e90ee80e6148a8e1cf574f37df6dac4859937eec2989afb89511460f8e303faf32fede91262cf72c3c48c5166dd36a323bb9edd96c1d545c9b735d1c780bd9dc6f61cfc986503bab732992f29512de0a30062859c2610762f8226ea8bcba04cd52e9c6347f40b798d512c6374c431b