gt-carservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:76:d2:d3:e6:b3:39:3a:40:9d:16:ba:38:bc:9d:54:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

gt-carservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:76:d2:d3:e6:b3:39:3a:40:9d:16:ba:38:bc:9d:54:75
Serial Number (int): 291439649668032607860855467566108751254645
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:79:69:96:3e:ad:48:bf:b1:bc:d5:f4:62:ae:97:5f:4a:64:a8:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:32:78:b9:1f:34:ac:1c:b5:3d:fd:5f:9d:80:f1:de:38:57:f4:a7
Fingerprint (sha256): 00:0c:18:98:4b:c3:db:51:e2:7d:f1:3e:d5:9e:ac:1b:a7:6b:0b:34:e7:55:d9:45:58:fc:9a:0b:6c:a1:2a:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate gt-carservice.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gt-carservice.de


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gt-carservice.de
www.gt-carservice.de

Certificate

The complete raw certificate details for gt-carservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291439649668032607860855467566108751254645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-24 13:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-25 13:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gt-carservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845122904352667958746594972842664893247453180821645202901364247513503347250710138799119649559932054238159194554832434138183040428812898474300829340391301882719721646964873182311309464421659378808963443513973069579795044147441303834953337734110867805164959076889413412489476477496717405171813176360637442332182819115206878287571936207626737515774761764441231049366856501742303179658936308151175953483216287855604274466856987137514485164809008776288034817871009446093956179454514462762369139871430939308283466190824244245743905478068747250988244735204332622206921213274407844007974901641362006125500693795463883795985214369034546762053401290559537864483559763465159968303403079957421989710411942103788635487972110839135458587799461422655652202484226208904828737256199717185629741940959510724618995922199836302074860371903725944201856610314597323257389340789932995607634707917109852943815825011678186767202405165370065564378583202018035454680411248348157753749342721048248208236183654880295298441558897792493409773475257090200489484594293794547555175294509035217117040394128147896689584411920344267601461811554176307898547047616752327967329223664716310033287633294210884392123475823244315318768279946596731156555850060975321024588836549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							757969963ead48bfb1bcd5f462ae975f4a64a86b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt-carservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt-carservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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