reiterring-badische-pfalz.de
Issued by R3
About this certificate
This digital certificate with serial number 04:4e:d7:42:55:f4:04:90:3e:8a:4e:e6:46:c9:7a:c0:25:1c was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=reiterring-badische-pfalz.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:4e:d7:42:55:f4:04:90:3e:8a:4e:e6:46:c9:7a:c0:25:1cSerial Number (int): 375277296800898507232504471145244396627228
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1a:97:63:71:b9:4a:3e:f6:2b:a7:3c:96:62:12:c4:c1:51:c2:62:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8f:23:4a:1b:0b:10:85:94:34:8e:9d:0a:d6:59:43:ea:45:cd:65:e9
Fingerprint (sha256): 00:5e:30:93:0f:12:9a:86:27:fd:36:20:38:74:f7:14:b7:f7:c5:fd:82:9d:99:88:24:4a:48:51:67:2b:40:4b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate reiterring-badische-pfalz.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reiterring-badische-pfalz.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
k00053.srv05.17930.serviceprovider.de
reiterring-badische-pfalz.de
www.k00053.srv05.17930.serviceprovider.de
www.reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
www.k00053.srv05.17930.serviceprovider.de
www.reiterring-badische-pfalz.de
Other certificates including the domain name reiterring-badische-pfalz.de
(limited to 100 certificates)
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
reiterring-badische-pfalz.de
Certificate
The complete raw certificate details for reiterring-badische-pfalz.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISBE7XQlX0BJA+ik7mRsl6wCUcMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDcxMDExMzZaFw0yNDA2MDUxMDExMzVaMCcxJTAjBgNVBAMT HHJlaXRlcnJpbmctYmFkaXNjaGUtcGZhbHouZGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+nLneqb9/9foETHwz+BZkcVaUAk2Eu7nBFybsfKwlvC17 QFuXN65FfBa++BZYbCFZXXZFRn3aUpF4SataXkna2Q5rpbPhPBvyfWiQiqTO70Hp Y9uUCBkwXPX4wb31xFtKgAJo2Sv/cnBAoyNDPHwJ6UA5/l8PXbWhdDhe7hq5v0iW Lph4ST0g7gpMHksgTAV4+BssaTvtEQfhU5fbgRsi94U5GU9MlT6QgeTNXSOp0AXt +moynugX1HD9eS24N2JITpfsmMhhI00HisnNQfuNGSzXRC7sf/y+K8jJjAk0Ibi7 Kym0eb2Xk/NnzmygcXKL3E22Pquh2LLAiP1OcIKJAgMBAAGjggKVMIICkTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFBqXY3G5Sj72K6c8lmISxMFRwmI/MB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMIGdBgNVHREEgZUwgZKCJWswMDA1My5zcnYwNS4xNzkz MC5zZXJ2aWNlcHJvdmlkZXIuZGWCHHJlaXRlcnJpbmctYmFkaXNjaGUtcGZhbHou ZGWCKXd3dy5rMDAwNTMuc3J2MDUuMTc5MzAuc2VydmljZXByb3ZpZGVyLmRlgiB3 d3cucmVpdGVycmluZy1iYWRpc2NoZS1wZmFsei5kZTATBgNVHSAEDDAKMAgGBmeB DAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOsc UgHLVt0sgdm7v6s52IRzAAABjhicjzMAAAQDAEcwRQIgfmhd5xtUTY+7A1A351WS XbCON/2omY7euuTAtWJ8JYoCIQDHA+HQUSDDxAmU3bbunSBjdDGQE0r/Z/jNsGgH zujXUgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjhicj9cA AAQDAEcwRQIhAKCVQUzLk8xSyMIPjU09sJJQY8SIL3mu2AJiJdaMNe0gAiBZ7QLQ HenawY7zfRo72+UXBEQRC4U5KwatimfRdGD4djANBgkqhkiG9w0BAQsFAAOCAQEA cg4hHgFsl+7QML30rMGHNXcEr7aEbALetQuZdVRpD17oZBnMTs8JitCbOJcIbgen fkmqzufI7fRv1clNlglTlTuX8xJTipZ7kj74RExyTp8RKb2DkfKhHC5ARYopJ9TR nxo7tY8pnhdPVQ5nhKJOq6IwHmYaI/7+EWmeXue9Sd0bJDykHBX32SCtsbNhnDM0 0wkglX5WVCij7EnyqA7WU7R/veEKPrIS1zwygHaMpD0W7szEiOOulB5Ge/fyhXeU E+AJ8CVQNnI55bJHHx7FLOz5gcoT/fRjhHh3T1psthVYN8xTgPRsXworwVKQq8nw ryQ9/xIzIAF/aVNFzZ0GsQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpy53qm/f/X6BEx8M/gW ZHFWlAJNhLu5wRcm7HysJbwte0BblzeuRXwWvvgWWGwhWV12RUZ92lKReEmrWl5J 2tkOa6Wz4Twb8n1okIqkzu9B6WPblAgZMFz1+MG99cRbSoACaNkr/3JwQKMjQzx8 CelAOf5fD121oXQ4Xu4aub9Ili6YeEk9IO4KTB5LIEwFePgbLGk77REH4VOX24Eb IveFORlPTJU+kIHkzV0jqdAF7fpqMp7oF9Rw/XktuDdiSE6X7JjIYSNNB4rJzUH7 jRks10Qu7H/8vivIyYwJNCG4uysptHm9l5PzZ85soHFyi9xNtj6rodiywIj9TnCC iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 375277296800898507232504471145244396627228 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 10:11:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 10:11:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reiterring-badische-pfalz.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24062562441121930236616587147393545406839408782401743360258030749638783740645931968690806569669074311110002110114807951938445958826090832440845613940247098524646095611271407281589663003501558074672947054144818094318419871433738842409774279401783111541612292700532229149625632077844292567237951570993805454031875588461166861819836750904596014625014716199334959411620619974198568984809687485749991533656671904370046739268571422427009367789919972963923315416055315247493222966052456070332758477906881531787397530751229417103622466203274367660949927137649095608900455653199826263223183447526982878274293923333859552821897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a976371b94a3ef62ba73c966212c4c151c2623f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k00053.srv05.17930.serviceprovider.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiterring-badische-pfalz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k00053.srv05.17930.serviceprovider.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiterring-badische-pfalz.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e189c8f33000004030047304502207e685de71b544d8fbb035037e755925db08e37fda8998edebae4c0b5627c258a022100c703e1d05120c3c40994ddb6ee9d2063743190134aff67f8cdb06807cee8d752007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e189c8fd70000040300473045022100a095414ccb93cc52c8c20f8d4d3db0925063c4882f79aed8026225d68c35ed20022059ed02d01de9dac18ef37d1a3bdbe5170444110b85392b06ad8a67d17460f876 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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