analytics.vdivde-it.de

Issued by R3

About this certificate

This digital certificate with serial number 03:09:9f:e5:1a:ac:8a:a6:2c:97:14:9a:12:04:99:e8:21:c9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=analytics.vdivde-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:9f:e5:1a:ac:8a:a6:2c:97:14:9a:12:04:99:e8:21:c9
Serial Number (int): 264611935925892395681370075637605655388617
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:f8:ad:3e:07:da:c9:00:30:2e:b7:f0:48:43:42:53:f4:3a:e2:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:53:6b:f4:47:db:0d:56:a8:46:85:ca:d5:ca:ca:92:be:53:72:62
Fingerprint (sha256): 01:6e:41:ab:4a:d2:07:42:07:51:85:3f:86:90:ff:e2:f0:dd:57:c3:a8:1f:89:db:f1:01:24:8f:82:b1:1f:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate analytics.vdivde-it.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.vdivde-it.de
login.analytics.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for analytics.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264611935925892395681370075637605655388617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 06:12:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 06:12:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983753303356720655404833714025061550243956206407088482190555521578615445916954608729877697378204157793887198677760325303027453879150302904489116306749558923681115051562789037953917387774337082392649179941842573356225373492895984099446224138010764594610946948104551649953120974800459220644900952580981775229503094708145714986101360831785924871311030358571787477807690041132544506825514632071453199680350654147645443452577657281488082534698931887283758801305352263041641331361049440960727828379166929866144737190527619532420192587761345836614753800229573073604889097644132708478819620780589796069101506232897405348944207214498728896808459563465974677720391277033956721995526822370137982752058131095345111272700706647714948411276120589605921344747002494973871191776255858958123455582561268461793547883221352446873706129744435283466676516996021323545841651305493941569892793049675006349567929068508565372380251056546870487119855583511139688609525296829036217560223292705030596604922352179759438992188757235489772369161532018444519341633912395592430755406885426000086827888367640703508290154632344567759487720432455235001627982071288764553978412931034961371380204959045354419860119471687241171756053849238474943221633274176481383097640483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15f8ad3e07dac900302eb7f048434253f43ae2ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.vdivde-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.analytics.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5e5d272a000004030046304402203e192a8c14824b402cc8195ebcd68465b442387e4f24f0633c89bd5c8548ec2c02205957ae74bf1dac5775d59ab76f7a125dabc40d8d254b6bf1cd7e75d4db8036a6007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5e5d27bc00000403004730450220426d7253167a7ae5e431d65b95a3135a84b7d88f6750d0f952015fa1f25bd8fe022100af3504537a71875bb47e534b50d717d19a20bff65e18244dafe90c6e17a40720
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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