www.mtv-gifhorn-ski.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:2f:62:60:6e:14:0e:1e:bf:49:ef:ff:66:eb:23:19:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mtv-gifhorn-ski.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:2f:62:60:6e:14:0e:1e:bf:49:ef:ff:66:eb:23:19:b9
Serial Number (int): 308358808947096901954438458955933918894521
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:63:38:9b:91:61:50:f4:fb:1e:a3:e5:88:64:bb:02:49:11:43:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:c4:fd:9f:41:f6:69:f1:ca:0e:90:f2:34:f5:da:af:3e:01:84:fa
Fingerprint (sha256): 00:4c:f1:44:1d:c5:ec:3f:5a:6e:6d:5c:c0:b5:d6:43:26:aa:98:24:5a:6a:e0:ec:fd:04:e4:b7:68:2a:a7:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mtv-gifhorn-ski.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mtv-gifhorn-ski.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mtv-gifhorn-ski.de

Other certificates including the domain name mtv-gifhorn-ski.de

(limited to 100 certificates)
www.mtv-gifhorn-ski.de
federiquitos.com
payfootball.uk
mtv-gifhorn-ski.de
mtv-gifhorn-ski.de
cotizador.dev.opcionseguro.cl
anthonyfermin.com
mtv-gifhorn-ski.de
www.quizolympics.com
www.mtv-gifhorn-ski.de
docs.review.trustdock-ekyc.com
www.mtv-gifhorn-ski.de
www.mtv-gifhorn-ski.de
ziektewetloket.felixxgroep.nl
www.kissmet.games
winsideline.com
1on1tracker.com
mtv-gifhorn-ski.de
www.mtv-gifhorn-ski.de
www.mtv-gifhorn-ski.de
dev.datacamp.dataauchan.fr
mtv-gifhorn-ski.de
accounts.rcloud.dev
www.mtv-gifhorn-ski.de
0pht.com
accounts.rcloud.dev
www.mtv-gifhorn-ski.de
raphix.design
mtv-gifhorn-ski.de
www.nielsstroober.me
www.propaintball.co.uk
www.mtv-gifhorn-ski.de
superseller.sky.garden
www.mtv-gifhorn-ski.de
mtv-gifhorn-ski.de
docs.medcury.health
www.kubruk.com
ziektewetloket.felixxgroep.nl
www.mtv-gifhorn-ski.de
app.vhgsolucoes.com.br
www.elpatiodesalcedo.com.ar
www.mtv-gifhorn-ski.de
www.mtv-gifhorn-ski.de
www.mtv-gifhorn-ski.de
www.falconit.com.pk
webmuds.net
www.mtv-gifhorn-ski.de
ar-car.echt.me
mtv-gifhorn-ski.de
mtv-gifhorn-ski.de
winsideline.com
www.mtv-gifhorn-ski.de
www.hanabi2019.com
ar-car.echt.me
yudo.xenon.co.jp
kalegod.com
app.tablecompare.com
giftzbag.vyannjan.com
mtv-gifhorn-ski.de
www.daposcard.com
kalegod.com
events-mgt.kiswe.com
zauth.hizensys.com

Certificate

The complete raw certificate details for www.mtv-gifhorn-ski.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308358808947096901954438458955933918894521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 21:32:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 21:32:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mtv-gifhorn-ski.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777313328129676096217219356612358554536710127647633332276920218877576071886073291603127463809365586848060741232128726115337886957843284072023243972313576492139722290702137457722678692494189822300174243697276967469489621523331555475294002606452160424929381982233164810193103744697316438057235152059440196245500441487572393258732995661804368261931073382470403553987605572216563326945835879753937140438834365585808976207323745262978602479816091022129242223448367540992698264671806012790688027336335818268436441689835350406069463007549841885612228830731865797289742528260312773257902373536272006607878584315314633826908599688567448950097363935713178850891835469084677641737366190165324253763429329242716993799860765178538378941858092471626206024409063104739432352227912720349056099999731523675525229649036507464356069578905351556133233026023296607012762535424021761360851292958204640453349312249690711678229922209269894733904612600491641552062717483249353927173477608297813724807131572414180003381549771105172706254430033082709897682066982605819837724210382545926164210422570686159402126740397529252254328002376750957320969037743477692432567694849399968776286851910820641950049093748316269946994793565467675673367941895256102130122086799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb63389b916150f4fb1ea3e58864bb024911432b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtv-gifhorn-ski.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7a00df7f00000403004630440220477356f2cfb98e89095b0b7bc853f142b338bea206ba687898b3ac0182f9bd330220743678369df7698cbcafe72978a7edb6591c4569fdd4d39c2659e1d02f85546e007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7a00e173000004030047304502203f8723d771cbf245f38639fcc5843e289e988ec89fec5100a7377b76e0bd9b75022100bb7d569d7faac0359dc4ec43ca030fcf2ac815888b5854ccc2eaa2ecf3414df9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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