geocirclefy.de

Issued by R3

About this certificate

This digital certificate with serial number 03:61:d0:f7:f8:1f:6e:f5:23:a7:29:9d:39:88:23:36:22:bb was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geocirclefy.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:61:d0:f7:f8:1f:6e:f5:23:a7:29:9d:39:88:23:36:22:bb
Serial Number (int): 294622014339587085949636319252567687570107
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:bd:7b:fd:5a:8a:a6:85:03:74:c4:82:ac:c6:fa:55:b2:65:be:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:af:cc:de:97:64:07:a8:fd:58:5e:c3:35:9c:82:40:b3:8f:62:91
Fingerprint (sha256): e2:a1:d7:e9:4b:c8:20:51:06:71:1a:72:de:dc:06:03:92:4c:cd:78:d7:29:91:28:64:f8:d8:ef:0f:48:e7:4e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geocirclefy.de

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geocirclefy.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitmanager-media.de
bitmanager.de
geocirclefy.de
gruner-jahr.de
gruner-und-jahr.de
grunerjahr.de
henri-nannen-preis.com
henri-nannen-preis.eu
henrinannenpreis.com
henrinannenpreis.eu
mechabuilders.de
nannen-preis.com
nannen-preis.de
nannenpreis.de
www.bitmanager-media.de
www.bitmanager.de
www.geocirclefy.de
www.gruner-jahr.de
www.gruner-und-jahr.de
www.grunerjahr.de
www.henri-nannen-preis.com
www.henri-nannen-preis.eu
www.henrinannenpreis.com
www.henrinannenpreis.eu
www.mechabuilders.de
www.nannen-preis.com
www.nannen-preis.de
www.nannenpreis.de

Other certificates including the domain name geocirclefy.de

(limited to 100 certificates)
geo-wissen.de
content-finder.de
grunerundjahr.net
guido-magazin.de
view-magazin.de
guj.com
ideat-germany.de
grunerundjahr.com
geoshop.de
kinakoni.com
impfen-gegen-corona.eu
maennlichevornamen.de
elterngrusskarten.de
geo-circlefy.com
geo-saison.de
brigitte-mom.de
circlefy.com
vornamen-forum.de
geocirclefy.de
geo-special.de
fuerjedentag.com
grunerundjahr.org

Certificate

The complete raw certificate details for geocirclefy.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Y5FlTu6YO4jkeyGZNJ
n6WD549etrRL8HtC5pGE87HGYeGcBN1prGH0w0EDbmefy5/kapPmYWMbRI86SVEI
oDI+yD7JhceeUEwQ4hAjAlklaoWLQyj/FyhY1gbVjGImE1IF00p4VyAgaOQHqHCo
Hz+d4FsxaTU6JU8w4LW0SK/8eIKJpaz1TCXXZDzPmTXd1i2Fw1CgrFlFdaV9iqju
I7n/mXhALI8aSLbRnN7BJxc7MmRc5z6WHkW0DIzbSWFDCn0zSdYRKE1Pxa/FGoRx
gyEmNNQ2V4dvtU79oRYeTmX869ju3/6tEoCN9TExi4P+Et4KipDYf10Up7EyBk/n
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294622014339587085949636319252567687570107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 02:40:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 02:40:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geocirclefy.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25716233416968667072784720917970616159527110267061008377345110773424954453735528151084278256150476859897080814613244090455562351144708000183119786451096279947313366347647841177099028264538523048176350903856757790461562576996975808777325442430802792010405413488076837747116501004229540302396014409192196081289712099171528659192913714575839138271729327510273826273067786449091816234853804687144835588796708246564096929435658474858506122400726297889809301684985443894974440833335625939299077534168516533900123841399638165351972146725146253619058806845909744337286989297996278264854483443998566498635765781638314919454629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81bd7bfd5a8aa6850374c482acc6fa55b265beee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocirclefy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henri-nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henri-nannen-preis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrinannenpreis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrinannenpreis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nannenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitmanager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocirclefy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruner-und-jahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grunerjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henri-nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henri-nannen-preis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henrinannenpreis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henrinannenpreis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechabuilders.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannen-preis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nannenpreis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d86cd63cd0000040300473045022100a2c4bda942bbd58af1fc4116aa26fcc8a62669cb5eed78469186c1ff64977013022032e3f5dbb714fd79719e40e9fbf85e8bbdcb0c8adc212a8282696bb5ce4579de00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d86cd658c00000403004730450220725475c3f81423535c3b9cf24d440c4139093d435d000281297eded828bd94b9022100c01f2b29465a73f6551e2997948ac61c537a5189592433c66879f2b9df542e18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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