filialemonitoring.intranet.ditsch.de

Issued by R3

About this certificate

This digital certificate with serial number 04:94:3c:64:10:a6:2f:c6:11:7c:7e:fd:22:9c:5e:14:30:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=filialemonitoring.intranet.ditsch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:3c:64:10:a6:2f:c6:11:7c:7e:fd:22:9c:5e:14:30:b9
Serial Number (int): 398891207278458041495357392103769887748281
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:c9:7d:14:a8:71:a8:03:df:ba:6c:97:ec:1c:87:b2:66:f8:4f:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:c8:3d:a3:fc:d6:8f:0f:96:9d:0a:3c:cc:f2:08:a9:64:2b:53:66
Fingerprint (sha256): 02:7f:49:ac:4b:b7:31:d6:4b:cd:4d:98:a8:ca:c3:73:2f:b0:d1:50:eb:39:e6:56:1e:89:a4:19:db:e2:55:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate filialemonitoring.intranet.ditsch.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for filialemonitoring.intranet.ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

filialemonitoring.intranet.ditsch.de

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for filialemonitoring.intranet.ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHPziguJ/sH7tA+jPNJ
eFvRrIWnvq8WmNpfwOc1ize3zZ5qNn0uFuIkLiVZ4zHcp1KweBlET7yV7DgvFus9
ZmXqp/Ln3yyrLGhRxOEcWHTwFhGXSDB3xEGjNFxYNpRROQo97zeLAIwzteMNWy1t
S+OOz+Pa3dY0HAlYI493zYPdyGqxrKNU2L68xr3O62L3xdyDiEXVnsKLmCCGXlp/
x4vP2P3A8yz8fjo4aJsQcTXlW7TWWt70TBjAhpWZBtdH4+zxkXacQcjUMyxh52tT
T2WVtegvbX3qatFo1d5hMuoQBmgAOfLAKKN+zFzH6Z87Q24GEcc5wpmRhdNSuA7x
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398891207278458041495357392103769887748281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-09 12:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-07 12:56:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'filialemonitoring.intranet.ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23599566536615629907349519271363441437694152907074874774211022289309999375312164150584494158527304618433378234574286368170632315680466802685302217178805132703814421167989056495821532205210874818368237273914671010641322318007559129819161066531097987538089896361384315931373223096500719538627660288432983845468116215754819584690164193437002587686754809675380260562958319340467324201647463116180924959741737674733884548260289598613838085969071065278455176733945843526022872776127303700368380570953276266616914150502481928435261825397356973767854049764104887234819887086418038539218012430838858482693313472249191447064981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ec97d14a871a803dfba6c97ec1c87b266f84f59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filialemonitoring.intranet.ditsch.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000180a91bd8b9000004030046304402203c170cef4ee2e874529f11d29928911a938aa1235f46b607989f8b089f5dc8e1022043d1bea5152eda05c352522301ae0dc2527f7b58fe50a6a3525613b73c71a52900760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000180a91bd8f9000004030047304502210096de9e4deaa179f392e48a5c0b9f28ef9e8452f8cc4227f026e3a7940c026df7022041178af5488c0423cac83cd3a9422dbd49a96995323785da9f7fbf2eab113110
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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