engo.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:bc:a0:f6:56:ee:32:87:30:fe:6e:02:c4:85:c1:cb:74 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engo.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:bc:a0:f6:56:ee:32:87:30:fe:6e:02:c4:85:c1:cb:74
Serial Number (int): 274858600732262372763059159483182471039860
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:01:49:50:f9:46:d4:4f:41:5c:45:67:92:ee:a2:8e:84:c6:5d:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:9b:49:9b:67:68:19:27:ae:dc:fb:7f:c9:10:a2:55:c5:94:92:03
Fingerprint (sha256): 04:78:f7:d0:70:cf:ad:47:1c:15:e7:40:81:52:19:a4:0c:71:8b:3e:b7:da:1a:e9:fc:28:d3:6e:f8:1c:94:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engo.isp-vhost04.domservice.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engo.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiegenossenschaft-ostthueringen.de
energiegenossenschaftostthueringen.de
eng-o.de
engo.isp-vhost04.domservice.de
www.energiegenossenschaft-ostthueringen.de
www.energiegenossenschaftostthueringen.de
www.eng-o.de
www.engo.isp-vhost04.domservice.de
www.xn--energiegenossenschaft-ostthringen-iqd.de
www.xn--energiegenossenschaftostthringen-xmd.de
xn--energiegenossenschaft-ostthringen-iqd.de
xn--energiegenossenschaftostthringen-xmd.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for engo.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274858600732262372763059159483182471039860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 00:44:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 00:44:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engo.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791227799948146392470026226227919487564290858788403259741284062715682291755811584789247043804524137315219454132995530204090128119773820683766779939262184820637797965028647506247681753462385939235282261864512666414266474340714606659722054580954161549060292014665936392234164303426637185593986721380758174902041197148503031277862175921319033797242505519184739194531557679283996200858430165315522099580763476282501209924994195217402121537210299028728088121451695603903956451510762173731958488232100959485991274912261085778150137285297046283578862181415601553885057334150575520575464158042215469433617078634937592994434579668296124232675321349700160406935574940327444070076105529873633000126152093908028349247055889779914831970874293224981239118552194113734739392452361369437232114771079799508115944268963904227336520988903302093250308201477467437782184124757093137828713722051821634236348362479343152794945705509711982274281071541617169826530541780562135030847937297252512414618354740296199087951700332320327597513346413265585788415095570441525295000170835418161288190864808715152212137009934278261582933006758916953614463227465683264916310933209341312327528158878394379943626512887007789858455329472969939721167565338865643468277631579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37014950f946d44f415c456792eea28e84c65dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017161c2ee640000040300483046022100b6f5c072675f72ae0348c33ba201deb1cd38e6e1f799731a0c06a3f5eb1315ad0221008e1da5d195f27041a9dc1877d8fa82a1df03ac8ff67accf05324066f6e63efdb00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017161c2ee600000040300483046022100e5c88d88a9c3db916758865f09f750b49336a499a9bc609fb405230a21191176022100e05c7cf8b99382bd109a27aa7e7c0706879d822262d397b38e740c1cefbdcb57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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