cloud.datenschutz-berlin.de

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:a5:d8:48:4c:14:ac:91:39:3f:4e:72:82:97:2f:98:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cloud.datenschutz-berlin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:a5:d8:48:4c:14:ac:91:39:3f:4e:72:82:97:2f:98:d4
Serial Number (int): 346287612780381602119289793446843398461652
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:1b:13:0e:cf:91:74:83:2f:01:ae:97:12:8f:96:c0:0e:f8:26:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:e3:b8:3a:4f:4c:77:57:c9:76:5d:26:2c:9c:81:ff:27:d7:99:a5
Fingerprint (sha256): cf:ce:6e:08:69:b3:2e:20:6b:62:64:34:19:44:e2:94:39:2c:5f:57:f6:87:11:0f:df:b7:c3:47:ca:3d:57:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cloud.datenschutz-berlin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.datenschutz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.datenschutz-berlin.de

Other certificates including the domain name datenschutz-berlin.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for cloud.datenschutz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346287612780381602119289793446843398461652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 04:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 04:30:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.datenschutz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696379309667835462540984028018621582403029612876865359022173692245514386557925776636048737558915264795290968835996620328217451094710411386564739414189312848189083037287891106877538839878368383077188511508927334474114593163679520821758109631634499011161364622677570229222168329176761451094019717104212412816441528164986921448435532569783080584084376297763900875610397553986225688482867557249873420605445138404684673408640137702686747170107881875787382882574610144183801134971982017327932505715131052382258584939941129890358820021764321915593353003280017336425248328138966523409671280030034536372463885022538800291068970964814763020393391328723964800545842331056184836279030837359537673723116045731396395329638488813269509258155127174677516187903841406298032348371952431999274360603301129057188907481100270555027842433995435678051167264427533850886894862809385682917490660538134056181119827923432468658409522652238424725834119218916195337718055139772966982426919946107712074414295284129096315994598827114016164933508635646218457738719124826359519250408250418441702045152761570496988170284069364718033078348313503352556707576479318283259010203437040833593171150508709090377969817087201250876958894765740865214177947480961412387695737963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f71b130ecf9174832f01ae97128f96c00ef826fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018773f1838b000004030047304502210099993506e8cbf1714ada898fc8a16829c8030f97c29431dce64c49f6fab0ee8902202bed9f05e17bc0ead1caa8ad53f11c2fb41653543e9215e3e50f169a5f86f5ee0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018773f183aa00000403004730450221008d53d04cfa9fffe0e1300efe5f9f470325961d342e007dede55f85d19aaacf3e022029bad4e314ef283233b12e0cd42b03ee9c85aaf2871da871b7c0bb8ecc47648b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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