DV SSL/TLS Certificate for btgr.de

Certificate has expired

Issued by Let's Encrypt (R11)

About the btgr.de DV SSL/TLS Certificate

This certificate with serial number 03:77:ca:08:81:7e:8f:6f:99:43:9d:8e:c0:ef:89:2a:c3:ab for btgr.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for btgr.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 03:77:ca:08:81:7e:8f:6f:99:43:9d:8e:c0:ef:89:2a:c3:ab
Serial Number (int): 302099007678853816995763451812613592892331
Serial Number Length: 138 bits, 18 octets

Subject Key Identifier: 7a:83:e3:12:e1:ab:43:be:db:5c:a0:b9:f5:fd:64:cc:29:3f:fa:d9
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 51:b6:97:5d:f6:8d:ce:15:2a:b8:6f:96:73:83:ea:fc:9d:02:6f:31
Fingerprint (SHA-256): 43:eb:75:40:08:e1:48:99:e6:eb:fb:3d:b4:02:81:ad:c2:b5:3a:d3:ae:8f:6b:05:56:ef:93:fc:86:39:de:47

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate btgr.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for btgr.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for btgr.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxVABa/ukw4E/J8wnOytU
hncNfz/VbsA25xmNRYHQdlNzR5T1t7LST2zPWoC0GbP5eseH8atcoIfFior7HEtY
Rkm7Fx9Wy0bsxqjZuzyOJARa1YpwB7cgs6Onl9Wf4W9VDFIze2JVxYkJ/MRSlcsw
skeMELFLxazDhGoPuFk9JPj3W/rwrTl3OI9YCdSmDAhWwnGjlN6ltHloV1B6K+m9
TcwYkdZWVBddhh1J+/3NQCnw+e6j68spFlervWZgWHx3JGDL2OAlT4Ya4Ib8tsdK
Ob+OMA0h8bMjG63QA+J9l1nadywgeVxuHmncpkA214JCkxUrKGpMo6ilQwGSsm+D
M5UNXx645F/oVmP3eC4Kz0uIDjLMdG2paRI5R2BztGqMMaWfYwTflEMJCHLWtRee
cXFzZx9CkpNsfYaJh/vbIEgVXAgz7jUCiytx0gV/fpYkEWm95hrcu4Lnxj08ydy4
cX9RApP8rvH+6ahRn4IA/RtqP+ZLKU3mIfN4tAGTg30FClBkBXzAUVl/84aoqVwR
73J7Alsit4TAujurjnkdSTik+xo3Vo0UJWaBiDnRWYMwW31iWemT5svYp2i0FhFe
eISR9AB8tGpUyBNUqNgSjSzzYwR/I96jfqHrZbwA+1r+mjcLYlZhsHinQ5Va6plJ
Nxy90q2DLhLPhqEYbRgt/7MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302099007678853816995763451812613592892331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 20:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 20:41:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'btgr.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804964858679411031750339299570326059633946500182307370694150709199548803529838271344655798892169204424104574840232845350798033816589226434188983470185440934208733771196094187626870557109680523612277421067053964350882423974078219305058512865560616713793495090690091196766008697070765861672417159026991268987742015161508909925559674522908799674816669913540948233339061748501534728081782829253217821119545214113387018252460880879862649611393078247351672423854901070914481452890381122122612046579119068913873890723262471823499128889559086633444474222820143602371343062870414088834712166836125808453902418730495930043101978972013726098009870315466253850680684302819778189805852422151055514714198109631542562884082226899496738441795027359343774608775241880455552415504990373996731697673031241059322329662585408366259437346061630522910554340433314345795498410666252955423657989765973633875099530427069229642997700958490926122008121551105810137589879462576587776776903308721117207372434443622397233903320516828938647882847874900445389470662785665824903584081067522069635220396757737776252554203730832868352004550994351723666730951071758012511752094339606117017122803519838996977334220736909100997629502838178974361074737366791343561031679923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a83e312e1ab43bedb5ca0b9f5fd64cc293ffad9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btgr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btgr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000191af884a530000040300483046022100ec56881f5019deb4b7bc8fb1247eb858ebec9fe14c836441022398a399260eb102210084a6bbd6fb2606d26899d55003fbbb5f1f1a4e60747c0066535621e1865a9900007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c00000191af884ad3000004030046304402206715bd2bb04c1ad4ae408bd767c79a2ed936793bbf6290501a3918cbbc2e6eda02205883bddaa106ed4bde51a248a86b911791ce911bcfebe9f02ca26e8638377252
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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