gfn.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:96:ac:81:6b:75:57:1a:50:0a:2f:93:de:94:4c:63:14 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gfn.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:96:ac:81:6b:75:57:1a:50:0a:2f:93:de:94:4c:63:14
Serial Number (int): 272766455803043681912495913563096636744468
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:a3:7f:d2:0c:4e:68:c5:9b:59:b3:bd:91:6e:42:29:0c:26:d4:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:78:c9:f0:19:c6:60:50:65:6b:2a:92:7c:21:95:0d:b4:7a:21:31
Fingerprint (sha256): 02:4d:7b:d0:33:cc:d2:e9:bf:67:94:c5:5a:ac:20:ee:78:b3:01:64:54:7f:ce:7b:f8:0b:df:e9:fc:e5:cb:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gfn.isp-vhost04.domservice.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gfn.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gfn-leipzig.de
gfn.isp-vhost04.domservice.de
www.gfn-leipzig.de
www.gfn.isp-vhost04.domservice.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for gfn.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272766455803043681912495913563096636744468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 01:09:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 01:09:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gfn.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830702923148226949179970746205125207063632123992535664611711064625592065683473961740532942620244597357873866944671724876815272282224733292522243483367129728023301926771977156539255894433986321329027821229065388132700344380489225654012766043260911336824397914410122461227378247908896055736654527926485036290797374533800657222617698849505900113945573693434820475801626345767067486545088656018882351643720171738310482482761433168848461022600221423939943648144653036668545763366272573117277049675721267761561315197383216200513980798998938443425186484599874356788871254877232975329944134589987773878850438649025800509421439570389559555738190426197087558852700065858360322573895333111829674771624988060083087051084937371601005040706420356698153782613264023851706738245906717918873084479012633394577077828617418040744883369435169098706983701545066733410349406384346082592561938948250227481864134135770056992334542755214704520344078472692883214813977687602282068898413897636572668097519895310077706233803844289535554710325303374274793167459164371942651927957611601198575100529512610381590168306580578880701646067186639139731267563123280126029645643558140918181307732875239458919221183589160830201124730182042496518372647154726672110272967359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ea37fd20c4e68c59b59b3bd916e42290c26d425
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfn-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfn.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfn-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfn.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170dbf4763b000004030047304502204b81e845ffaf4ca51fa46f7dc853f1c700ef6e3bc04f9ecf1501f8c883d9f942022100a243682e6e421dbdc424e92523b5d29f7c2f6ec497b7894d9d2f0f0c2c06e099007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170dbf47805000004030047304502200c7e6dc8b22f375673c5f2eda11e6b7488fe07f46d16d7ef0980a6b672ee2d30022100eedff0fcd98ee69e0e5c0da62e809d23611a5fdfac1616d2e1a569ab9645ac09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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