iq-manfred-zietz.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:cc:47:6c:e8:4f:55:8f:de:7d:33:4c:a1:25:ad:57:aa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iq-manfred-zietz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:cc:47:6c:e8:4f:55:8f:de:7d:33:4c:a1:25:ad:57:aa
Serial Number (int): 290872674723604250260118808537637405415338
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:dc:e2:bd:eb:2c:a9:5a:32:78:16:f1:f6:f9:36:cf:1b:92:c9:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:62:79:6d:0d:3e:b7:83:10:31:26:fb:a8:a4:73:21:3b:35:cf:9d
Fingerprint (sha256): 04:9e:91:b3:02:25:51:0c:4d:ed:44:56:6f:87:e7:ff:fa:48:39:d8:46:63:05:0e:69:17:c4:00:cf:39:22:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate iq-manfred-zietz.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iq-manfred-zietz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iq-manfred-zietz.de
www.iq-manfred-zietz.de

Other certificates including the domain name iq-manfred-zietz.de

(limited to 100 certificates)
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de
iq-manfred-zietz.de

Certificate

The complete raw certificate details for iq-manfred-zietz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290872674723604250260118808537637405415338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 07:51:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 07:51:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iq-manfred-zietz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724673395140058158939240415755348350256056232315764768736786992402598452029801273799922033973798640016969411252204733454809674443848762035274279459981348798488259837697830362354836267952776614594244506046345768926915690302199617000931917275632341567448183246104254135002264168812566330314713946142987739569471436103421392113408075404152244167963749340451008261076938963969989051352349617960351878473232647755365407038973195222099590034132028253152501160617792904100145958829527031390459734394667199024074706989911573657235963689594181973464022782519373459797973007413117426488098514873820912206478988680530484879964219116486575876812882327917561494643064745805283638344790510267617754405116904078585402864675794974954275257000048763199346793129820430491667777058840952060855872128616592018990402476831076175297914917439643132704547511409859417069680605366829172183769601133265315587217270347554700375569638469906600209670279632273611925423196487666365059524325682448098151021279840696016176024565458604699954679766157251624399117140918000622713950831160834482246002632279592483296571136716228883169525321212724799689587493687812072242950641734227710814980987530774207778628058939728890777604906979592771944625220014031322992818977001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffdce2bdeb2ca95a327816f1f6f936cf1b92c98e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iq-manfred-zietz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iq-manfred-zietz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4c60c2f6000004030047304502201eae844341e84cbf638918dfe7319d56881166aaec5bdbd94f7d1a057fc61fbf022100a785d278444d9e75b0560b7a39d991705f1afaaa8734caffa6958df5d781cc3b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c4c60c314000004030046304402201baeeeb48d9f3e2f3fae9b1d848151523092695356fe8a23c1ef6e86c382fe950220643ab6da4248e98c180f9ec97e3c093c915ac083df85664c87def3b788e98d76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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