best4software.de

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number cd:44:b2:7b:0b:9a:6f:d6:0e:f4:7b:4f:89:22:6b:0a was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=best4software.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cd:44:b2:7b:0b:9a:6f:d6:0e:f4:7b:4f:89:22:6b:0a
Serial Number (int): 272848435339852599291485408470214273802
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a6:66:d9:ca:e8:38:8c:9b:4a:2f:60:cc:a8:6a:7d:c1:8d:1f:4f:79
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 1c:2c:4b:9b:8f:42:4d:68:0e:f0:bc:70:26:66:07:58:56:6e:32:cf
Fingerprint (sha256): ea:7a:4e:1f:2f:38:8b:d4:b9:ba:f2:b1:f4:f8:61:06:98:69:7a:e2:1a:fb:f1:74:47:e9:3c:78:8d:99:c3:38

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/0Gi3dEM4KIA
CRL Distribution Point: http://crls.pki.goog/gts1p5/eplfRroXWPA.crl

Check the revocation status for certificate best4software.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for best4software.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

best4software.de
*.best4software.de

Other certificates including the domain name best4software.de

(limited to 100 certificates)
best4software.de
trackforum.gogrammarschool.com
best4software.de
www.piwik.best4software.de
www.best4software.de
sni.cloudflaressl.com
www.best4software.de
*.best4software.de
order.best4software.de
www.best4software.de
sni.cloudflaressl.com
best4software.de
best4software.de
www.best4software.de
order.best4software.de
best4software.de
best4software.de
best4software.de
www.best4software.de
sni.cloudflaressl.com
best4software.de
support.best4software.de
trackforum.gogrammarschool.com
best4software.de
www.best4software.de
sni.cloudflaressl.com
sni.cloudflaressl.com
www.best4software.de
best4software.de
best4software.de
trackforum.gogrammarschool.com
sni.cloudflaressl.com
best4software.de
sni.cloudflaressl.com
order.best4software.de
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
order.best4software.de
trackforum.gogrammarschool.com
best4software.de
best4software.de
sni.cloudflaressl.com

Certificate

The complete raw certificate details for best4software.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3prTgdRomdOzEMNJ20d
4C4SELpYckQx6OQtfsHMMZy/iSyuYdk9EZCXuY7cTaSoONHxReZ92m1ZE9cEVpaz
mEfII8YZp5NJ7aPjIHk9SXs4vV3w8LKDF+z/tU8tgnAmXD7bkWxS3jwQaA1suwS9
b3zj7z1hKbjknOeMwpP8sko2byfy9XJt+EbYIkcIdk4htFtoMXIpR0ILdF1wKZ/d
C+q8NV7xr1hj1Pxtyoj5VXKx4kTq+QunM89PMJBic3HaGLK17oabxp7TNTSRjTnT
fNzk8AZaGCqWcH2/zGvjLxfFJC9GRSU0y+UegtB+Y4FtXUeRV5KQK8rrKJoiWZQd
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272848435339852599291485408470214273802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 22:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 22:54:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'best4software.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19122351187275102360828814395247879511262924417204232267603369440834118255055436466287248083487944893389919393385629173886997886477545972960166892854455910807402122774374888108657724476892745486840158701885987274778439284169662736477902121891471450011855476780805126504145080575956257204523939707824478056771295893496387481817192989820493159318030157065124728641205044693117382680630773997072692805046606289087736325850193028867174718007276462430372992816481789913152520202425965654251385539285424520157000316151932755203752808643476819457573218466187149270323041136128142320302589286998914818282399763303198297955801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a666d9cae8388c9b4a2f60cca86a7dc18d1f4f79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/0Gi3dEM4KIA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best4software.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.best4software.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/eplfRroXWPA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aafddc58b000004030046304402201754a8a89857b25b9824c721162d8784fffa4eddfd3fbc234bd088775c3d7f1602203c031d044f2b1d6ea3ab3ccf9df85a03d9effe1f580e63cdf98b863136cd0dd10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aafddc5c900000403004730450220211be0d680a7bf2b6207331d6ca589dd5680b73dfee9e62abaced403fa0ec58c022100e6666dc401e91b0614d020a9a6b2f726b4ea2ba7d3c5bb0cfc21847e8fe371ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006cd639bed049a5a1d2f9409b603ac6972713d8eb7fc5f2afa693bf04c72fa9fdebaceba55ff73a275779cebf8e48f27878daab7fc181883bf8c85a593c9368807bc2870c2916cb5ae0d165341ca62c133b2165aedd7b6b971a3f9d8f38e607649f8ea6668a74b6a30fff1b3ee64ca1a96b28632c91abcd57049017f9efbb9640f403d040b6bf49e72bbf955843ec93542ea5043dc43f3cbda5998503e634a9224795662140e13dd89557fd5c55c4bd02b7fbdc4afc55ec66beb74105f5196bae631a12fb1ab8450c32df77a6f5e6c461baf852ce925034b153400696b66651a1163d2ac407752a9644ab546a4f6d233779a7a8987f8b5d92b4c9f867161ad05d