cid735b974.hd43.hosting.punkt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:a0:c2:ba:39:a5:22:30:43:5c:b4:64:86:87:07:91:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cid735b974.hd43.hosting.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:a0:c2:ba:39:a5:22:30:43:5c:b4:64:86:87:07:91:6a
Serial Number (int): 320079112467693595852335033067904877171050
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:89:64:2a:4e:ee:58:7f:08:f7:3d:ff:95:68:d0:e5:cc:60:6a:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:e8:17:38:1b:31:7a:58:0c:eb:a3:fc:76:c7:b1:2d:1a:37:b4:9f
Fingerprint (sha256): 04:58:b1:e3:35:83:ef:45:cd:2c:39:ea:25:79:bd:b2:81:69:47:b5:8f:da:c8:e5:a7:5b:cf:ee:c5:33:09:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cid735b974.hd43.hosting.punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cid735b974.hd43.hosting.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cid735b974.hd43.hosting.punkt.de

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for cid735b974.hd43.hosting.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320079112467693595852335033067904877171050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:34:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 19:34:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cid735b974.hd43.hosting.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1011997869955930299831513226006226913852258163611265471053492201554278660011223601371976538816799339314272559297701372912276168440384046173140061445947586740452961990978294781329877347233332099654302781366377602366498261124842078567126400394111781090319544471662963082546739144810142483269132420050894389443358464573349606476194674040448483771119259730482563818156666534799917784653182670528008178928178482300437051337480999131029053694672492285737273286321042629004997549373089789455248970267751890916127760626230213305948872771929135059574906698914604108445127516999040275068781711941327452761713997998834268677396477255372578594292843187254463557476071677192098795026030710969647214653403527417331965849427413835910483725764414019518822266537119316609843992138967174532863291024025188652982546945417884264713321030699976255481422953742575425652974488903236134818396741513917164054405521705663202755782210545869599088336825535121736176414223170886881749088255863393531238480439162596644559510198770112480762400020884315347152573550586796214419945799389465227623652842693598317106044606954217827050358524403160395456508812696801782877598775490953755430008040331371765136660803231757532403569376177977443930980193446837098198435676941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a89642a4eee587f08f73dff9568d0e5cc606a97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cid735b974.hd43.hosting.punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed29ee51100000403004730450220266c296323bf5b90be6bf5c05f1a0736c4915690e126bbdae7c0955f7d7edb7c022100e0708ed5f9e5a8f21c7b5692486c54e3dc2fb47feefa623790793ce7a268450c00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed29ee53d0000040300483046022100f24b34fcd7c592f399d1554c47b750c365f5193742d2791deab668b43991f8b9022100a11c55edea46b2d4d9657f495f510ce5e097b3ffc72b8a0d5bbaba1602ec0bc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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