12bis3.de

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 24:9b:29:24:34:c6:24:8c:ca:b7:ec:d9:4d:3c:52:67 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=12bis3.de

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 24:9b:29:24:34:c6:24:8c:ca:b7:ec:d9:4d:3c:52:67
Serial Number (int): 48657848308670230364301414417299165799
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: df:45:96:e6:c7:eb:e5:9f:df:3c:ab:67:92:d6:3b:36:1b:66:74:76
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 22:51:e2:19:af:1c:8f:0b:47:54:fd:d4:fb:71:a1:a4:d5:7c:b5:03
Fingerprint (sha256): f0:03:9b:e1:5f:4e:8b:ca:d0:ed:1f:3f:a7:33:8e:10:3c:50:ce:70:73:8d:e7:ba:ac:df:c9:24:51:79:78:bb

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate 12bis3.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 12bis3.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12bis3.de
www.12bis3.de

Other certificates including the domain name 12bis3.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for 12bis3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcDCCBVigAwIBAgIQJJspJDTGJIzKt+zZTTxSZzANBgkqhkiG9w0BAQwFADBL
MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT
TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMDIyNDAwMDAwMFoXDTIz
MDUyNTIzNTk1OVowFDESMBAGA1UEAxMJMTJiaXMzLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAvD5gxdHs7VKdjunhGXeO9JPoKlYRXrHH/DkQ2cEg
ngC2ZMMGgDdN/PQ9r6n36k13ZVk4ag0KUt3DSvLzA83A166EvT6X6c4mZjSSuw4O
5k+3iXVkEeCzPmpF4TnL36srQG8BLcVzrsJxbJ9JH33/ZLu4Q/eQ1aeqUSXqFTUx
gVYba2tAm29rveYn+43s4SrY1BLoVmug7Skq1U5ESaePpDucD8ymWesrGQrysfJw
axdYhflpf8VIvTJWPtesbv2ot+ibIfxP9sM2ZSLC1y39MNbhbrUpRykYfTCXhEmc
X9MRYxOdjTSs7cmcg9MR4RtOeobqGtwJrtD0x14q/sQ6ZxCKNq5zDCPm6CGHlK3V
9a92kik2U+Gf/PgBKubiVQUH9dR+Dkrs26450KAn1oVNiwGemc5iBXsXoZOyxegu
KduJDVfBxILO+0Dm5k1SHg7jKHAvj9poGrj55Zh2LbIkVUjVfSzW2GRf2DCQC1Ri
VMljynv51yM4IRQrafqJJlChmLjWYDVgyhVoe02V3dVoAE+QkchP21RyT9/eUfpG
rTGO9JdSvI1/jdW4JhHdbZSLzkvkyZj7BzFNee626Nlw09WP6vVrGblb/sVO1Xcz
GKp769siVKiAaryXBLN2UEJYfBRrF+Wr89fzbTrjGdmavHbiopaoWJbpHuE0/RPe
OxECAwEAAaOCAoUwggKBMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoam
MB0GA1UdDgQWBBTfRZbmx+vln988q2eS1js2G2Z0djAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYD
VR0gBEIwQDA0BgsrBgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3Nl
Y3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEF
BQcwAoY/aHR0cDovL3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FE
b21haW5TZWN1cmVTaXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3Nz
bC5vY3NwLnNlY3RpZ28uY29tMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYArfe+
+nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGGgXj0XAAABAMARzBFAiAm
ljA52FZe3wytxqywMLV74ItWs9mHkkoghyq44RUpaQIhAJiRyBaopW3jm581+dSa
a+oN0XU8v8jtMiJIwL3hFivoAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6
V6NS61IAAAGGgXj0OQAABAMASDBGAiEAvXl9qhR8szEp0j71XjjNuMhnDQ3H31Ow
NLFa9Kwp7dQCIQDufH2HA+U0d5DAlv2adArW3bS3pd3bhw/bjbED2VbIyTAjBgNV
HREEHDAaggkxMmJpczMuZGWCDXd3dy4xMmJpczMuZGUwDQYJKoZIhvcNAQEMBQAD
ggIBAEC4SVVvTeBhpjhJETYbNtQs4M0woQQkHSe1yXrhcDLv5eduuP7Cq+mMSh50
VtIydkd8GJnr8d4sLUpSJJ1eivKN/dFQ39yn8nk3g2albYIzGgI3MrV5Xan4IRbU
C8CjI8OU2IK37bT3Xf/DLyvJOMdTkV38hYvUtQ+0YHBQA9roQkghoJnzT7vo9s4r
I7MqmFmd+0B81h0PsmveMWp8MFu2RQ8jn2LFFQmnjQoSqhu8C2kEw/588mMJCwrh
5cRCc1jDAQt15sbSRagtbL8OlZ8NkAqWAWndHxDR8ETvAyRa790gnUgwhfd+lWtd
DjRRp6j3qRfbKsQBwKHMMwrbbiY3odsVzAUFja5Pkm1ZuUvn4U376MAmqdBAqDmD
sRP35d4SECdTATFZlcAHAnzso2WYhbqpgmIEnio10in3ifYXC15iat7f22kMCXrQ
O6Jeo5eC9rIC9WoTvMjXoIgAyLZazwvdQ2F+63ms2DGe6wiVoGRHUAIT9zwmd3WY
krzpDK4gLIXkCak4BOLt/B9vpdeI5vXKjfR9VP9lbokrj9/9QjYiDW1/F8UwQAHw
in/QeXDnSHaEcNS+tFMucKgfYiWuhCaCSo81HjuxLoFnmoXkN/D//MZEN2RMPYvC
RYL/Rk+oTyO2jrRmmqbr848tsrQwjTrY9fSaRkfjildnhwOK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48657848308670230364301414417299165799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12bis3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767967147729673774689103533870567563002421238135024174480658719052568754962189620559056162385792117856438037788464567938406516258154625994907041828124550957555852303529631143222646739269202071274295223362134683921760128789617373211777523448416534326991869351218866425427224324112138331875853909478214451798264529019448272373731238443230822610563681247055214565313649193238430410314301032802437767283889922469879465638166637171653743853141521409976811046473492875471163845208105758619819042582942620093542126608515928900995895820592179261806081540527707529771462520907727598909353575576964735462681972150056104245185624797207189576912080461527721923789950144451692812699671939685142139207740196370472553340469184263452346637391946296453659855200949053087690265337062324006428447014286135205041837545552273373266105530134187840244767403577422105119187983011761975118326651269031504634865841131199875504701063273522736778760245184574660257286466506624775882421872373108622965796442947541460654394795658102368224179672054229503937284633941299944514536094069719337086910577028811772506090404523119244170893509736336457555232622913166588758938937691753279678469037796802610231957893296216843816199114022128176527108769261595315607869209361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df4596e6c7ebe59fdf3cab6792d63b361b667476
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001868178f45c0000040300473045022026963039d8565edf0cadc6acb030b57be08b56b3d987924a20872ab8e11529690221009891c816a8a56de39b9f35f9d49a6bea0dd1753cbfc8ed322248c0bde1162be80077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001868178f4390000040300483046022100bd797daa147cb33129d23ef55e38cdb8c8670d0dc7df53b034b15af4ac29edd4022100ee7c7d8703e5347790c096fd9a740ad6ddb4b7a5dddb870fdb8db103d956c8c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis3.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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