www.baumarkteu.de

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:2b:99:88:8b:a0:6b:b6:e9:06:4b:d4:4e:96:96:4c was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.baumarkteu.de

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:2b:99:88:8b:a0:6b:b6:e9:06:4b:d4:4e:96:96:4c
Serial Number (int): 13518662749677970126207243920178845260
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9e:4a:ef:f9:de:9b:48:04:34:2c:c7:0c:b5:c5:00:b5:96:5a:e7:f5
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 16:b8:2e:65:3f:b6:c9:50:be:c7:39:90:1a:7c:67:d1:45:5e:19:aa
Fingerprint (sha256): f1:8e:37:cb:61:e1:fa:b6:05:88:17:38:84:92:83:2c:eb:65:64:e9:16:28:79:a6:30:1c:b4:e9:60:b2:1b:e8

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.baumarkteu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baumarkteu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.baumarkteu.de
baumarkteu.de

Other certificates including the domain name baumarkteu.de

(limited to 100 certificates)
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de
www.baumarkteu.de

Certificate

The complete raw certificate details for www.baumarkteu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iGjKNhMb1exbNYu3m1j
x+Lq+H2Lq3zVnwKzo2d/8Ss9e0HopX/RFP+xIXek7B7R0/g5L+dcuxeI4w/NRWnM
bNmVx6DJE1TiPjak0sy3avQMXSFTEZ0iBDYYneNglvk+qnEhT5REjqaMbRUamBUi
090UMXvJeKLJ4kUiRjneEaIeFg4SiqODSxwM8ws1Fu97JqBQJoAkSEKkcMaNzzCo
WnV4Z6JtEB849uOBsZ5eIc+DnkH8sJ7NQNJkQz0CTunJNbESIyANMp0CQi/Ctaku
475jzJe1WmDX98Xpjw8Dq7G4g7LvCIQSRE1euBj8aE3XGMuUnFJ24kdNqq61vo9Z
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13518662749677970126207243920178845260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baumarkteu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26526631234422628669813317622650281974206895150918946447695967111766510129174665514071845394560654059455763396222595294667243382344486552386680661803961026904027483440310657633356361632552194209546728499306916281310941925208698963480171644409051496513852824120475987351070223034385492217143437052852926632247016417039851693404988002199622385627137624548587920688346236701586080896650525726608887307820421939590310986034943879887800482377363593748057733109895413429168767061613760242719052854508026142412222591428074638019986242517132884630084336613180473459312312533291738944312572471082281480465663999612676268317141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e4aeff9de9b4804342cc70cb5c500b5965ae7f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baumarkteu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baumarkteu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003deca905e1f43cc3f288a367699b91a81fd0748a6231d56f23cb10a1eb7c9ad0e3d3fbc335567b8808617b9c3045f7a6a5f421a1045bbec0c6c2466aae0353b49b6cb2797378c76638499cb4ad84d843ac225e1a3d025ad253be4aab1ee98e8337c842d72516706023f5a0313c6f91acfc31b475cdee86aba51b4b1120ce84a164ea0f81ea1bfe54a8da7d19168e05a30ccbbdf26bf1effdbfaba8ad5a75ace740c541e4d1129a08b00191d508bbc1ddda8c416fa13aa286f41fd0fb287c83b8a2312d12a2567e82ff4e4c5f74288b9cc3ab8d50bd4de09987b011986619adb52f2335a5d031289020da3ae8ce878e276d0d56cd8c3742f7d5e96115acc7ae0f122230af20958a97f6f130bc68abd5aa4f2f69efb854080c355581ab32bd831385e649b30db1d9e87e67d6ebddf24ba1f10c8beb8f511faf4cedc59540acfca8ba70c9ce9ee503efcaa930087e55283cb9b40a32a3d960a3d721e2f965e09e31442e4761ee43cbb50d6fbe1439ac6f5990e3ec08ca3f31df35eebe99c2fc8a21e8fc18e1b958a3961c3c9c8687c5d81c2b5e93ba0e1310e0b4cf810ea5fabce4950587af8af27c032d7fbd02921baf3c82663a1ce4aa88ce2db121ac9ca89e00bcd7c7a9800bc29595cfcce1891f29313e42096b50adf20e1762a345433eb699ce2d905f5f005c4a13e3d398505c23087522e544057d70eb94a2662c2e9d6efe