*.monoqi.de

- Things I Like GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:f0:97:29:da:b1:5b:fe:4c:91:13:aa:01:d1:db:60 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Things I Like GmbH

Organization: Things I Like GmbH
Organization unit: IT
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:97:29:da:b1:5b:fe:4c:91:13:aa:01:d1:db:60
Serial Number (int): 5236901193290067174095760515367295840
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 19:65:c2:26:7e:8a:9d:05:33:da:a5:14:dd:13:da:23:d8:e8:20:e9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 51:41:0b:56:3c:b1:69:2a:83:76:5a:76:3d:90:dd:44:fd:21:6f:fe
Fingerprint (sha256): de:8c:41:0c:01:6f:59:93:4e:b2:45:b4:ef:e5:e7:e9:4b:ac:07:6d:d6:20:5c:be:8a:f0:76:d2:ff:5f:98:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.monoqi.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.monoqi.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.monoqi.de
monoqi.de

Other certificates including the domain name monoqi.de

(limited to 100 certificates)
mei.monoqi.de
monoqi.de
mei.monoqi.de
www.monoqi.de
mei.monoqi.de
*.monoqi.de
monoqi.de
monoqi.de
www.monoqi.de
mei.monoqi.de
mei.monoqi.de
www.monoqi.de
www.monoqi.de
mei.monoqi.de
monoqi.ch
monoqi.de
mei.monoqi.de
www.monoqi.de
monoqi.de
monoqi.de
monoqi.de
*.monoqi.de
mei.monoqi.de
mei.monoqi.de
monoqi.de
www.monoqi.de
*.monoqi.de
monoqi.de
mei.monoqi.de
www.monoqi.de
mei.monoqi.de
*.monoqi.de

Certificate

The complete raw certificate details for *.monoqi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5236901193290067174095760515367295840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Things I Like GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.monoqi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 975699524223337227069845736633863674500955688268518984214471637028718696392829837935498695753182151356896158789273913598434502544005352265266042414038408924931072404637259690236667910917636396805656652075353646610927165139137703512664202297047923636498785952636354563511159654699754443469355530917220928777509668910501056916363485566923446728712827576427973539396776489896021928510773060137359835257462132853549293455764755628040488195542195674917329995436109686052920484860355397824279890813171050267406457066873814471465221469995253187844182573618848110889381026882795799856529079854424059130385088689098496334426887652757509989331862239335988627396053359788913440789300067448875462726606326714766939585250289436158481200035008902113932207682114645211022053551274087374232071856658211709596347167307359045637346482409471810315839156465651556976001300106886964013073546360336361710401995810214343913273450789307892116981053014692770827621712447363362532563087669207421277161754128864776671437447026225182525175797480064682665095083929061623170648523270421332938818604167266323939766044842037407864017591009910970748841493133476092857121005776015493998941326028907436464930157996578770766813214003484595984124027068402307153140616177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1965c2267e8a9d0533daa514dd13da23d8e820e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoqi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monoqi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165e800a456000004030046304402203c1966c9664fa44e958559057aa6f5f9ffcbf6c17988da897e54651bbd61709d02203a57eb00331f1917bb850ee6ab871187a4dd6bfe35215dfe31bc6bc896ed49940076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165e800a4c40000040300473045022100a8090580bc1ab53cc42c910c6280b36965693d608316b6d6303125e3145396340220153981fdd9be86316f78ba7c9ca48512610a0b3281d3b1c4b85dd4e5c4c3aa51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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