hs14.hosting.punkt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3e:72:ff:0d:43:cc:51:13:1c:b7:5c:40:cc:fe:c4:a5:63 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hs14.hosting.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3e:72:ff:0d:43:cc:51:13:1c:b7:5c:40:cc:fe:c4:a5:63
Serial Number (int): 369699506772400422802958186776644022478179
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:c8:49:5f:c2:95:55:cb:e5:6f:9f:9a:c0:94:a2:d5:51:ea:55:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:1e:32:85:1b:ad:b5:a7:db:99:e1:4b:5c:d8:cf:3e:ac:d1:16:96
Fingerprint (sha256): 04:46:e1:f7:97:cf:9c:0b:f4:42:b7:6a:09:3d:d1:b8:5a:3b:ff:93:69:72:ae:3f:13:32:53:e5:b3:9c:89:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hs14.hosting.punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hs14.hosting.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hs14.hosting.punkt.de

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for hs14.hosting.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvktgnYYqmuw321QdHFeU
5IyNwcwokce9cBPihqZNsAwEJVo4hEERrT/tCZsKB4LIv9Q2X9dhEYFaqZRlzqWZ
lwnM2bjplF8oDh2nZojPCRqbkc70jhU+2pUsPJ7A2ZIJLT5vPighPq2sDS4P95x5
4w2wlbbvYn4rELHNBU/k34wmTLUaNsypyNJyEfMSISG0Y/as4+RFE9j5nCm3lVhd
KCmadCUL8zV5oclc16XWCueZLNDd0gb/RJeMtzS1XpS5W56kOrKjSNaMDKZQ9jqk
8btAu1SSI/vxNvAqk2lpZPCtXqWNchpgGzYHa/Q7cFYQPnfocL/9+qVE+prU8IK7
kjZ9RVBwe4LUd7zskb2LwLaYFFITIb4y1vwf7+QyyoIJ83P4C9driR2UJ54QKvvQ
S5xwUrImoOlZ1obMu+vZhk4/BFvsozDYAAygrULMtaH0YasU553+XRHJ1G2SWvft
6DodXXrOFlW7pBOQ3m5w/tPYUEP18clL/ncpIE3f86qIMd8J1+Nt5WCK/nNUP8HW
T7TbyyTHKGnQqYagXaQf4V0lxOMNrxR5tq6K+xHWrcxJhOIUqvOZ8O7g6YjP+ua3
ZgXDoRuJl/hhmeD7b0dKyKmn35iJJymfiWYJAfLOS1kbya0Dzd5D9JlWtZzLDW3J
W16gwNRTu9BIqEx6v/0gr58CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369699506772400422802958186776644022478179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-29 22:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 22:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hs14.hosting.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776333595492452780043771012836624483333807578859257425147229608603587590640057202923921584772636638942600064558428365041335538619718537031004620685569897828930179870088256892008483760966013171250414405127371521853113485970102792114557021967575379580900897758244187448481152617961516105601270854750835830744593571291149101136810287152363150067293396584741509128035148727705639627922115515546139366220574801699991094708505606179073981826677013523707569935643669484053001551115559339897370174771063150628653510817553892079161087257510352358035391309344264865597879603852288236430861721577018867491612012372867245583986000260726868617980401557641822847787476160472297705389879017419068718518004373284716539137859541468607974765158982605777520767941000242847274824656774309181405002592409869263600548246076534360248140130223081356879255164201984814323152236751766279292393536097318229455553677338377359511146624512692606947353890376027951164138321548719630369527678958938853868315887965204208258112870017026121797687934892287883028618696545416358610395135665846623039724527585414567575079708011931227622091950766315939812701409863766776718430934143265246842921545706672975516595147660339784122313571672381658597949630303009109185988177823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bc8495fc29555cbe56f9f9ac094a2d551ea555a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs14.hosting.punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167fc3271520000040300483046022100e99198de703c2040ce1d396334a31a577288f16952de1079f0cbd5e789c78061022100e67b781f8ef3e8a771ff7d9b0fcab3ad7f8a5ac232debb5e34e58ae494b26bd300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167fc326f5800000403004730450221008e8f5a85f785edb48e48b2fe95b2c4f98a182559f2cd5574893b467caa067653022024e2c9d7ad2ccab95c2d6f38e1405032e1bad69de0629f829911d41397b0874b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d97a617e0f422b720d5c00273a1edfdf3e84e230bc66816e6d3418cdb86b2c6eb9efcb36fac2b1fd645f6c4136ff5a5600a011418c526ad96c8a925ce63d16b3ee408beffd3b4f4095c716d8a8e7e70577edf02036e6198d3ad4552f89d8ba78133cd752d36d60937c6e6aa088b61dcc2da9e69e24dd9cd35ec8d8317b741ca78ee8f33542ac410453a629c75ddf334546900656b88d7147dae1e76218a503d3ec25fd72b19dde5d3fb42837a5744105f317793766662cb04f13f84cfc8434896f5db2ff6da3f8e10dc9498f849f5d471a2ccf5f34f5b1ae56dd15289df33d72e1e118c7f5089d474f26b8cfbc1dcf9508d44838f8bf4b47edaf95f4ba359a3