Issued by Let's Encrypt Authority X3
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgISBI14EsyI/ODHOMA+bqtvuiKgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA1MjIxNDQ1MDBaFw0x NzA4MjAxNDQ1MDBaMCUxIzAhBgNVBAMTGmhvbWVwYWdlcy1mdWVyLWZyaXNldXJl LmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4ZyrH0+GHvWNFpAy KwdHZvugSdFEkgk7/C9Y1hw81UhwJ7gjgh8mAQOAV4GUfHVIAwbbCjy4x6H/yMpV W5a8VnTTsetQ4OsiMd512J3Ml9WT8hZlRZn6CtIPdYaJgLu5KwE+MZJvrJfHSRaj rsHBlh/ZAmWHaqyXyB11k8TXwnUm3eFWz8KlzrL252pIx71TNpJw4LjuNodaSbr6 4OLNtx7EGAz05iCWhZPIzPtccDiGluBpqbqUllZgCTWy4AW/wqdhp4ygrVMOy01l CQ5Rrq/gg/k3KiRWvrcrFODA19V9VFRfHiSzevHQLdOuDu+BNdduH4RiHA+1Fvwt peEwHoTN8Kzt3j8fU7pDhV+VvoTHWBbGA1jTZ9GxuuaBb5G/MQEYH+ndlZgF2pWR h6r2+XnUR7XCowE17zBrs2wA0ggSfIY5NizTCQmr2L5AL0hBkjPrmALBsukvNNPW VzTq7Cwuo8N2d8V/P+63ACrnipHXuOB1zYXyI2R9bG1kTklIrqjfqiiNU37WkSGS wskRvLcZ2vgTsHNYp/02/YUmFEOlDNb9I/raiZ4sQAFHyZp2a49upLldVXdm4rmq S4pipBmcxDofHctjrSNJJ921cWth6I47ntAbmrDa/735oEmI3yuQpkrbGXqmYtM3 5cNT6He4RFDFWPNAL9b7HROp+HcCAwEAAaOCAjswggI3MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUYPUr00sfQW+/Ma0a2uBxlK55h+8wHwYDVR0jBBgwFoAUqEpqYwR9 3brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRw Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wRQYDVR0RBD4wPIIaaG9t ZXBhZ2VzLWZ1ZXItZnJpc2V1cmUuZGWCHnd3dy5ob21lcGFnZXMtZnVlci1mcmlz ZXVyZS5kZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEw gdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggr BgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVk IHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ug d2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0 c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAb2THw kHhMiM8/CyZp4KrmfbHc3I59YOcaTr0/XRY+3KYa6+yF4zh24T2Cs/UcjNuKJ6RN RmkKodjhfjvF82w8s3R2C3LCzVATjw/5xuRQdrRpjnfEsIkXCe31it/d3MjzpyIP rsm8C8rzGDochUL3BxatZKClKtTC6sLBAplLAGPW2cQJmpk4VcZVnaXy8qERUcr3 UDVTVWegl8SPOO8E3n7pa+idldPAxqn05hd7s+ap8zvhuqCjiq4zZG0EYEeb+fKZ 1XU6gqgtEWyAF57aie8NeLMpQgLl0cTMszA+dOZ15MOFndTlT8xAx7oelgb2GDm5 9MJBiMGrm7s88S4W -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4ZyrH0+GHvWNFpAyKwdH ZvugSdFEkgk7/C9Y1hw81UhwJ7gjgh8mAQOAV4GUfHVIAwbbCjy4x6H/yMpVW5a8 VnTTsetQ4OsiMd512J3Ml9WT8hZlRZn6CtIPdYaJgLu5KwE+MZJvrJfHSRajrsHB lh/ZAmWHaqyXyB11k8TXwnUm3eFWz8KlzrL252pIx71TNpJw4LjuNodaSbr64OLN tx7EGAz05iCWhZPIzPtccDiGluBpqbqUllZgCTWy4AW/wqdhp4ygrVMOy01lCQ5R rq/gg/k3KiRWvrcrFODA19V9VFRfHiSzevHQLdOuDu+BNdduH4RiHA+1FvwtpeEw HoTN8Kzt3j8fU7pDhV+VvoTHWBbGA1jTZ9GxuuaBb5G/MQEYH+ndlZgF2pWRh6r2 +XnUR7XCowE17zBrs2wA0ggSfIY5NizTCQmr2L5AL0hBkjPrmALBsukvNNPWVzTq 7Cwuo8N2d8V/P+63ACrnipHXuOB1zYXyI2R9bG1kTklIrqjfqiiNU37WkSGSwskR vLcZ2vgTsHNYp/02/YUmFEOlDNb9I/raiZ4sQAFHyZp2a49upLldVXdm4rmqS4pi pBmcxDofHctjrSNJJ921cWth6I47ntAbmrDa/735oEmI3yuQpkrbGXqmYtM35cNT 6He4RFDFWPNAL9b7HROp+HcCAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396588562432195804676014277476766115832480 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-22 14:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-20 14:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'homepages-fuer-friseure.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920416600845389769441016967903607514098336950018689793788565045107587920600788828946425932867995819116344947945134427735410378385050980175580623101786580010515854307198149285647387955245117568810552692919719774276411433497636940622332077897588633708666514779616865456477607981487946308075380802448169196117684523579834881153058391450584223493396387195363678993364617927431052911394604640470153651483690677122078579569662800367503330682232886183126864764330447933643157107585576787274643420055248248994516617573448909188215900684451944988048324624165375432147558277650838554631707101921393459557925996066550153864572556878976762701651663950289601983970802516586176935407657556769410992646076666387450953314412691098797128734978551577959664231589435300128897368673663568267935805207685323968048773954566759525640151791232935045156722081181881768347480799789438732172227408454093541847079126987908581781043057888161533339328976507600028072555091716726033459951210363113197277344397968827753427025176645470715139485707368358376730028568110181827162205579325332852119962918555591191610577686196258104674249236323651476956731232131152157641963043892744923146775149886403321489016532271091358473570084003944575141853431991828124650036656247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60f52bd34b1f416fbf31ad1adae07194ae7987ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homepages-fuer-friseure.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homepages-fuer-friseure.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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