cloud.datenschutz-berlin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:d2:66:0a:25:f7:a4:1f:be:7f:33:18:83:24:2e:d3:ff:90 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cloud.datenschutz-berlin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:66:0a:25:f7:a4:1f:be:7f:33:18:83:24:2e:d3:ff:90
Serial Number (int): 420044074729046016075158994991823300329360
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:36:d6:dc:0a:19:b7:81:d0:85:84:40:82:53:8e:57:31:f6:bf:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:07:2a:5a:73:84:72:ef:a9:d9:15:16:a0:c4:f0:f8:14:d0:57:74
Fingerprint (sha256): 37:11:96:08:5d:c0:88:68:c3:8c:91:e7:11:c9:93:ef:4b:25:8f:ed:ec:08:ca:bf:1b:35:fb:9b:5f:6b:d1:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cloud.datenschutz-berlin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.datenschutz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.datenschutz-berlin.de

Other certificates including the domain name datenschutz-berlin.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for cloud.datenschutz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISBNJmCiX3pB++fzMYgyQu0/+QMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTEwNTE1MThaFw0yMzA1MTIwNTE1MTdaMCYxJDAiBgNVBAMT
G2Nsb3VkLmRhdGVuc2NodXR6LWJlcmxpbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAN+D6Qpq6yNhmnEfd0mbP5JwO3lMH4JE1Gc7wP+V1r2Nh0/4
n/CnjNjb3BJG0FF38epo4sjHLbLTMWNv1rqLVjp1SlyOkpumK/ZpRjkJ4y3lIU0P
Fhk+wTKtGAR8E4z92gPC7OR6QyV+e8gbC52ceMgmWmBGSeeCHq99qEjhuBKWow61
V6N9xHjV6Av+MRRbQWwHBubkNtaDyQsMfX3S2H/RuxvVpcOpXp0GrsUpY0A2hKPm
MgZwUyGykAQuwuPVZZEoxM8shcnn6al9ktRnJ5cQjmo+VQNwMohX9uCuZW4ivLk4
6UxUy0btAb8xwMzBNzBgjC4rlYYGSZIFjs3Pkqiw5hr8hAWnEU97Jf5JACbBAAsn
+TmXhoV5Q5V0GhwUwGs3/hELo80k1ZaslHRLEylmsBBpEBUcPkJO+n2RoL7RDm+Z
k4yM0ElnxtkTrzD2feI2gly3bfXU+1fSCaRo0rx54cxqB52mFLVGakNjFkpQa9ke
VVbkGAhmtxHFG097U8GCOaYW3Osc1ZrbnBe2ML9pq+jzoOC7X0jJADLV5uI3SJjK
zqp0qPCel6DybBWtW8hMfVMtFaSyBEb4u6q3y3vWQ1fKk8T2k9XaKVCgiB4udvAH
Y1QiHk/FztSAYoMEmhbAkHZSK6ncZoQnb8+a/iafPohne2C45+3fFe/ki3PBAgMB
AAGjggJXMIICUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCo21twKGbeB0IWEQIJT
jlcx9r+OMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CG2Nsb3Vk
LmRhdGVuc2NodXR6LWJlcmxpbi5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22IOo44FIe6YQW
cDIThU070ivBOlejUutSAAABhj8dHzAAAAQDAEgwRgIhAOaUDO7krvDD299Cob96
HLslYplOkTi4MrG2/RQedfK5AiEAqX+XhDDji+RtraU9hBoeL/czA7J5h+Cs2ovs
LlveOLMAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYY/HR8k
AAAEAwBHMEUCIGk46aK5x1Ak2h2d0apQW6pLSZBRCKcx+kUKV5m+GBiuAiEAgXfq
5gC530MkiXSPIg8TOuIPxMs10fXuOvFEd+wkhYUwDQYJKoZIhvcNAQELBQADggEB
AB/2gOjssxW0yGeHQ3g9ECNdszbGN5W8Ane0JAgFhi9rSjSeT5mRkqXzDBavzZob
80XL+pKQ+aOnr20Kn9oCut1QOjqUE+U4mGS5z3l8YKu6MOAwszhx9j/82oJA7GKJ
gPDMxRAqg2WudeRWxqyQx4yq597u+jtf+h+veGUnszLcHigdmIfRLNSf/4lN8lMo
tjW7xkF3JU+mRMFmj5jwm1sbkGo5gs6cLL0rS6mrqYKVtBeixwVBTheAnhA48nfM
wSHQiJ17i0NvOQ+E+EG+5qHUR5O/1bM9hfu87Cpa6DGwnCdqmGIetukP6LNGVpc0
frfEDNbD7pNr67for/BB8dQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420044074729046016075158994991823300329360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 05:15:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 05:15:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.datenschutz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911862764414426289831917094180020229707390276206650789044072934359528501413979754437794664309386920693123080240309613053172447181470907835552278254582111191585698465736883624346421177095628446460007423867146450507174050841644032536875363234738197451301324240639784527742130672886761118345619250843199575527354583106478658484124882124488033415352202851175839513821342647290873881773867606097038380384608165171907167695225970182468591284815086702239258723301057732255678587871011899184630231713571256415648853366429619985669810053033454425548891398767534131424847486803419149279448329114245675764339888048197944837224014726067757090108801015977014954793704199366399097990555375409455637427856461126334744351465976293532126932245714849583814558917690013509840853719317299698269553802039807517528885375220534355264206747840750327815939663182854546162008060539206484422433406947801451895000457435285317475387215905734615087348121941996466071155212597365273870046682275808133200641094971074787383085086519675629807501988536442607188566661971687141525287551389920245753155599898096017136924036592147195799317943097089139194809631752161109317881749912129408756825329269221427414634081685080294564833928063673490968690492392189515320366166977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a36d6dc0a19b781d085844082538e5731f6bf8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001863f1d1f300000040300483046022100e6940ceee4aef0c3dbdf42a1bf7a1cbb2562994e9138b832b1b6fd141e75f2b9022100a97f978430e38be46dada53d841a1e2ff73303b27987e0acda8bec2e5bde38b3007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001863f1d1f24000004030047304502206938e9a2b9c75024da1d9dd1aa505baa4b49905108a731fa450a5799be1818ae0221008177eae600b9df432489748f220f133ae20fc4cb35d1f5ee3af14477ec248585
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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