DV SSL/TLS Certificate for torge-heinsen.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the torge-heinsen.de DV SSL/TLS Certificate

This certificate with serial number 06:e0:9b:0b:cc:8b:dc:f2:c6:fe:15:da:86:c0:3d:09:3d:86 for torge-heinsen.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for torge-heinsen.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:e0:9b:0b:cc:8b:dc:f2:c6:fe:15:da:86:c0:3d:09:3d:86
Serial Number (int): 599103057384156455475291476397928642854278
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: eb:31:27:15:82:80:68:77:a7:1d:bf:fb:ed:f4:d9:4d:7c:b2:0b:e0
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 0e:6e:f1:15:b0:2f:e5:e2:14:fc:cb:9a:c6:cc:ab:35:a8:78:90:7d
Fingerprint (SHA-256): 1b:ee:54:7f:57:85:3d:d2:bf:e0:2a:63:fc:ef:6d:55:bd:f2:9d:ea:d4:07:b2:b7:31:1c:94:df:98:09:e6:aa

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/7.crl

Check the revocation status for certificate torge-heinsen.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for torge-heinsen.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for torge-heinsen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRwWR/ou9YdGy4LkrDki
OUgIsEVkcXfxTgvXu96j2YRuBUrbqTUZ7MWyh2EWq6rWDOq2ZplNWVlylUIbVgp7
emnPIhUsScYZnVSJcLsuk1zF9gddNk1ez2DzhY08iLod7SHcBpfANEVdFT2l/gIQ
sWOJ3M/efTSRgfV3pCnpWN9/1tFgFTjbg3u5p9JC4YyOc7nI8mbTDGr7Zk6DhHFG
RuMTAiwyI/pff4Pn7PbPyOpFTAWL2xeoT2GdpIGTe6ePhBasotR6ZoFOP2GgKrjN
VxSCrXTjDlaIDXshbMo6nWw9UmX4B0N5wJ1JH4ASgGuk80vVMh0JlqS/FaLysSGv
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 599103057384156455475291476397928642854278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-18 05:39:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-16 05:39:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'torge-heinsen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24377843092000722632224661288672269906361984190939345726946219927511184788925887367125819482713551583144594960540825250027769312895711095507848767285523643400161289601814061287396843867816798603262076617077615778315607073467324789450394662902009309023869048925426648880102378668050893550468316494976453720568625925171601425320326797374937169445612145696289137659155798074866811247718223755205165671098732686537837761395687387907372424046913855767150074456526230306541109568622034279341557055744166932618290144295572676973864782081194100378270901292954986938853146789944753640935405452925363896046194336160622550560583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb31271582806877a71dbffbedf4d94d7cb20be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torge-heinsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torge-heinsen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a84540000019781c203220000040300473045022100edec8a6f4c9becebaaa8a0787544891c17dc51291f532bc0c54bc1eddd3350dc02205d3e04a0303ffe7c3487c3d1a16ed625147e281b78a8f276a1aa6865fc3670ec0076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000019781c2031e0000040300473045022100fd88a477439b36e911276c2505f7b9f91b62b23c3c6669eb7bbbfd672436811802202164462cef4eb84c43e39262a6cd72ffeb5af11fafa290a082c4b3a1aa67bef9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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