DV SSL/TLS Certificate for webmailer.pfh.de

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the webmailer.pfh.de DV SSL/TLS Certificate

This certificate with serial number 05:75:ef:3b:1f:b3:b6:15:2a:4d:50:dd:32:6b:13:d9:c8:f5 for webmailer.pfh.de was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for webmailer.pfh.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:75:ef:3b:1f:b3:b6:15:2a:4d:50:dd:32:6b:13:d9:c8:f5
Serial Number (int): 475692459068051172569038834493329451370741
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b5:9c:38:1d:9b:ed:74:11:88:06:08:49:b5:7f:89:cf:9c:8e:f5:10
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): be:28:ea:4d:c7:82:77:02:84:33:d9:27:de:6f:a6:8e:b1:52:e4:c4
Fingerprint (SHA-256): f0:fe:52:6d:6c:07:02:76:0d:24:89:c4:6f:60:48:81:de:87:c1:22:3a:19:fb:3f:65:39:d9:a4:12:00:62:fd

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/118.crl

Check the revocation status for certificate webmailer.pfh.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for webmailer.pfh.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

webmailer.pfh.de

X.509 Certificate

The complete raw X.509 certificate details for webmailer.pfh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT9VjOLlbz4nP/VP1ZMm
reS1GBQnU6Qjf5smbbylNqScnYxNY8HFDpl18lGmT8AibXugDFcKId19RQ+thP/Y
sVO6WPfpIjK7Uc/tyJF4HAg9iVXUIAYk6wCAqtDMm5e4qiEDlrmkqYceao/kX8Yd
yGBYPBm5Wgm3DVTc8tWTvp8lw8QFYbzuyI2DAc3xmO1QGjG2u4nQ356VwsgvHPld
Pdcs5vkVmEn4GPvgkHiBQUGHlcU02u/golKnaybGQXmWTn1otPIPpx2sVCw6ybha
tyaXpKEhDRTqBTB2jvrM+U+NTzQptLfcRO7ouNz9bEs/mSbn+ALMvZbwSaJHpx5P
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 475692459068051172569038834493329451370741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-29 23:27:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-27 23:27:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmailer.pfh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20860551568057588328842005232160364273655108126782758465449265667689095274265333956905695297161641683942962504920066109890714111951317124212375221975676400313334208017285878945705226600383548564088772376588846745455185113270974622843448914314060511881808737715625645839311574081468647559723468001181758023665519310005208826778332798056869562221529844426317838087020385566209241762380069117738477944718370742596768651095324309251018285930348389674856716033146917046508824139407191105930799717852273453553421868444553470637389756427052245083220939055439711227159614807023553668593015553830143644550168348174587868892933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b59c381d9bed741188060849b57f89cf9c8ef510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailer.pfh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/118.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197be39f61a000004030046304402201c86ee5869ee6fbd17e51c9f451ea60924caab3a1dd1907aeffcad0e6ef61fc802206c5b58b94377fcaa224b189fdc67585a33bf477e23539bd56edbe5f4d0a2cbb3007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197be39f66b0000040300483046022100f55f2f8973b8bb56a4a6d0fc4eff228aa6625787b7db975e8d9b1b448e82da35022100afc59d43c03fc3686d302ba506c1b2972db03efbfc61d193ddf6b911191b248c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00942c5c06c1cd33c3827c6d9ee674cb1deaaf8999877b88d9c5f23f40a72a26e0af0d3f80df38823f9b0229b355808254f0a07266cd7e1ea221787e6f07d4e511092598cbeb390132f3318ed0f295a1977b0f0e4e81eb501694fa7d84c8f660d270bce5f330e06b51041f07c191d0295cc4e8a0ad3eef27b4f51ac96a658da71e79c7027d61c5b53720d0ed07f849109030c9d65e327396f434c365d92ede9b8600ca5038a136ee8d4de0b3083492233ababbbc52aec5a59b570446ebe07819ec97ce571aacef4f0bec0e82e5e8db390837833f48ef4aaf8ab4a7de158e715520afd3e170dfb9dca60bf67f4eff7632a056a04da9478a5b4955366b811785adff