*.mindrunner.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:34:bc:11:55:74:05:e9:f7:ac:5d:96:da:25:37:df:72 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.mindrunner.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:34:bc:11:55:74:05:e9:f7:ac:5d:96:da:25:37:df:72
Serial Number (int): 298157449781903578653340714358390503497586
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:fa:d4:be:8d:63:56:2a:4f:f2:5b:1d:79:6d:52:04:b4:ed:e8:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:a2:a1:10:a7:0b:02:aa:49:8a:fc:2f:d6:cc:57:e0:ea:93:0a:cf
Fingerprint (sha256): 02:28:7c:59:9c:68:6e:4d:e4:eb:8a:8e:f1:88:6f:15:e2:03:13:25:c2:69:80:17:20:8c:8d:a4:55:98:c4:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.mindrunner.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mindrunner.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fontinform.com
*.fontinform.de
*.fontinform.eu
*.lukaselsner.de
*.mindrunner.de

Other certificates including the domain name mindrunner.de

(limited to 100 certificates)
*.mindrunner.de
lukaselsner.de
lukaselsner.de
lukaselsner.de
lukaselsner.de
lukaselsner.de
dl.mindrunner.de
lukaselsner.de
lukaselsner.de
www.mindrunner.de
lukaselsner.de
lukaselsner.de
lukaselsner.de
dl.mindrunner.de

Certificate

The complete raw certificate details for *.mindrunner.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298157449781903578653340714358390503497586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 09:25:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 09:25:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mindrunner.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636851413505388495427843581052096425483513844294831790970037605466996678235733811514039854323428828591442700259492138369436371787563458644129111583360959764175038667040923033326947905313368521113932948612029247988474427555046318245593722573541136416674533327568250238008908600827356150152796747789182434586108169413884845707718927455342823704664399138651588470698538935408244420596536615288295841206105887876031082370999262572884467514716327673473643589427825449187249832775309665857962999328024145128379422024909911189572997661606302908986133272718943374275847840270836168123084970555461454420154967031582698553236779222827122993102389628031389700684530126800794551886847552275651801456534570805751035344362661778626604890432516667637953884509057132234478033065905592618380294283001759075498503047160385096250276675091464922508360753677416927837278023259508335848130473705882182753476907287023011619045098960917289600622537315009899049675691796589496140194629660225069717949650411115307049059405191088579367184501037163690328624150800201027344515110365182814883242794952569031240386086572391546402195194716067764754670044613933860975589749839995654961279011126123466167742061568570041914648331398102343413009993181446100743898790023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6fad4be8d63562a4ff25b1d796d5204b4ede867
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontinform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontinform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontinform.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lukaselsner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindrunner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016391aedb2900000403004630440220232348ac6ddb735eebf70b42e12e63da9a005dcc3d3405fe84040b279c5a7b1c02202b9ecbd10fbc5d92d8bbd630df0e097f761adf02a4d014763d1a90324ec3ccbb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016391aedb2f0000040300473045022100d0ff87c891fbcf747fa15413ac6cf5b6fc159234a887bf8720aec8e2bfd3ec0d02202e8ac3352ea59ee9b3cded41eeed950047adceadcea997a01385a0a716949441
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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