www.holz-speckmann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:3d:25:13:94:5c:f3:7f:f2:53:7a:72:ad:bf:d1:5a:9c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holz-speckmann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:3d:25:13:94:5c:f3:7f:f2:53:7a:72:ad:bf:d1:5a:9c
Serial Number (int): 324370371095501318853046649498196333648540
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:c6:29:f6:54:86:d2:c5:a1:13:54:3f:7b:1a:53:d0:82:e2:59:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:05:4c:fb:ff:9f:26:b0:96:45:ad:39:84:75:17:73:82:db:ed:a2
Fingerprint (sha256): 00:6f:1f:2b:05:d3:68:ad:bf:fc:b0:f5:76:34:b1:e9:12:95:7b:95:bd:4b:a1:5f:66:f0:98:c1:f4:a5:a6:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holz-speckmann.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holz-speckmann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holz-speckmann.de
www.holz-speckmann.de

Other certificates including the domain name holz-speckmann.de

(limited to 100 certificates)
www.holz-speckmann.de
kiosk.greater.sydney
magazine.landroverusa.com
www.hochseescheinkurs.online
mx.holz-speckmann.de
lemagazine.landrover.com
epaper.treffpunkt-bau.eu
publikationen.kreis-goerlitz.de
magazin.zibibbo.de
online-katalog.baude.com
magazine.landrover.com.cn
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
kiosk.greater.sydney
shop.holz-speckmann.de
holz-speckmann.de
berliner-kurier.kiosk.plus
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
online-katalog.baude.com
epaper.treffpunkt-bau.eu
blaetterkatalog.rp-media.de
katalog.ud-shop.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
terrassen.holz-speckmann.de
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.holz-speckmann.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
kiosk.greater.sydney
medien.koinno-bmwi.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
www.holz-speckmann.de
bibliothek.bregenzerfestspiele.com
katalog.unzerbrechbar.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
kataloge.fuerholz.de
epaper.treffpunkt-bau.eu
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
online-katalog.baude.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
online.hansestyle.hamburg
webkiosk.sossenheimer-wochenblatt.de
medien.koinno-bmwi.de
holz-speckmann.de
berliner-kurier.kiosk.plus
magazin.em-chiemgau.de
www.magazine-kraftquelle-bgl.de
online-katalog.baude.com
www.hochseescheinkurs.online
online-katalog.baude.com
polsteraktuell.mediaflip.de
webkiosk.holz-speckmann.de
online-katalog.baude.com
kataloge.fuerholz.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kataloge.fuerholz.de
kiosk.greater.sydney
epaper.netzwoche.ch
medien.koinno-bmwi.de
epaper.transgourmet.ch
epaper.pt-magazin.de
epaper.transgourmet.ch
epaper.netzwoche.ch
cf.completesportsnigeria.com
magazin.tourismus.li
epaper.transgourmet.ch
www.holz-speckmann.de
kurier.leimbacherdruck.ch
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
revista.landrover.com
epapers.gleitz-online.de
magazin.fon-times.ch
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
holz-speckmann.de
kataloge.fuerholz.de
www.magazine-kraftquelle-bgl.de
berliner-kurier.kiosk.plus
magazin.jaguar.com
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
hochglanzmagazine.buendnermedienverlag.ch
online.hansestyle.hamburg
prospekte.lokale-rabatte.de
berliner-kurier.kiosk.plus
www.hochseescheinkurs.online

Certificate

The complete raw certificate details for www.holz-speckmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324370371095501318853046649498196333648540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-11 11:53:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-12 11:53:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holz-speckmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771294887511138080215813253612844729473544305739679275418999902580540211646039912513472598000487296558133756644993951981152193471891691833582502252160413008441955700002361975246687182863883020797850061669778586895458389820759408835773349442090852247122208444855200218802788248321781078528081611518295780712170249034209975165607245502857209085904418785327390098389818573265007633994497127786020123913537599128912510249820904744180232511334171363698944350126457125403391933628523107854182436230172875453863233177131681659359986202597646563143539422814538057157028900317966531087266970623831793997750073897935139290853016072118008340005298724751470726509448444541334207841148504872678446984563710750695026012648712276528614425603837133029779980752618465228082925664992883758874373337859266557235130419469527557166577186589165478173511575354606596540427310261043912226436251980750759877280997894620793794492655239830278179337352891663458826043215174900934686464789338860006563042278698326196704056756315150044044728842075462138197520530883397275872870847814540616098781387337623612549170452327720961869841694357917399810045460246567120732332303587443119718951406840890510857232019050673586453193310785452680977332386876733059054995883059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ec629f65486d2c5a113543f7b1a53d082e25992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holz-speckmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holz-speckmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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