grandeconcorsodeluxe.it

- Lidl Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 71:8d:e9:91:91:6c:fb:7d:92:ea:2f:22:15:bf:34:8c:1f:bc:60:95 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRB 107937
Organization: Lidl Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 71:8d:e9:91:91:6c:fb:7d:92:ea:2f:22:15:bf:34:8c:1f:bc:60:95
Serial Number (int): 648280708872955916058180976488456541243214422165
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a1:2c:e6:68:de:3d:48:28:c5:96:19:20:c0:51:c3:4d:52:75:8e:a4
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 66:48:06:10:18:6e:97:8f:0d:34:0a:46:63:f6:8f:de:6e:0f:3b:05
Fingerprint (sha256): f7:b9:f9:bb:1f:39:4d:c8:bf:0c:68:25:23:d9:d2:df:85:32:22:50:7b:f8:0c:2b:d8:38:b6:dc:fc:6f:40:2b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate grandeconcorsodeluxe.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandeconcorsodeluxe.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it

Other certificates including the domain name grandeconcorsodeluxe.it

(limited to 100 certificates)
www.grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it
grandeconcorsodeluxe.it

Certificate

The complete raw certificate details for grandeconcorsodeluxe.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 648280708872955916058180976488456541243214422165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-17 17:42:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 17:42:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 107937'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandeconcorsodeluxe.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710653468160505348166885680747490725034646463518263549235635145655147986465753144725441224854804571353332458470500283126761944942008090162541799770557470107091275217865693954035642344718825828572142732984360894353493487682513216753351806759164607469862736711263907596193631010822257296927621228725532845878591412411789704101488138291290254034126327090817147222162545374556107267763918207712338483871476159859764538652154263334873310936765335780318935400882868384563198218188003750923684650975589887900694589733879903965452760757390949680370174134214245758148385763139534064629848308953089070803979837672701213419348796409453433173282002173108448615761802649406700528401813091236372314072902263846497995467474348928810931549955981838126308753067662025175881123939786603075300340810266467664666003094388966355855467298520744991004031962863698961655672181992773772820367187464026872787321193083181708598316204265932088358203600230392542484274978423931408125338278063370151320478094377919468589655130364829739139857497596234474379617701261237140957545653685899325165043669924695901204326864309247814214122131289612809205247636586785120555392240680655889772547179929476994586146320748850507874497944106227376242844718712874706627980754799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeconcorsodeluxe.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeconcorsodeluxe.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12ce668de3d4828c5961920c051c34d52758ea4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (723 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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