kgv-schreber-hauschild.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:d4:78:88:55:71:f7:84:2e:3b:bc:72:a2:7e:01:94:6a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kgv-schreber-hauschild.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:d4:78:88:55:71:f7:84:2e:3b:bc:72:a2:7e:01:94:6a
Serial Number (int): 285439045655653229672011085350180055258218
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:60:43:23:c1:e1:99:86:84:9d:ee:8b:d5:07:7e:b0:62:82:d1:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:ce:06:52:b3:9a:58:d7:f0:ae:e6:d1:39:da:72:9e:12:ac:3a:d4
Fingerprint (sha256): 04:a8:27:c7:d2:9b:2f:4d:67:28:36:56:64:ac:0c:a3:7e:4d:d6:69:4c:ca:58:4c:c3:23:50:6d:e2:ff:b7:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kgv-schreber-hauschild.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kgv-schreber-hauschild.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kgv-schreber-hauschild.de
test.server326.star-server.info
www.kgv-schreber-hauschild.de
www.test.server326.star-server.info

Other certificates including the domain name kgv-schreber-hauschild.de

(limited to 100 certificates)
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de
kgv-schreber-hauschild.de

Certificate

The complete raw certificate details for kgv-schreber-hauschild.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAupJFIoTiutL6jBnrdSJh
ALo8y/RjVixoVhppgi3ieG0PCOMdp+jfznmqZd05V/SSc5SuxKLStDg4Y8UVAaUK
WaFR0Y5RNMdpR/+T7MlCqorPytuaLclWMOCFQH1rHMoSDhotQfYQgdelJAzuML2J
rk8gBanACJnGEOSvGBFwMUTT/Z6jlnT4ROtFCGT6rdWoixKMoFlTNvAXsJynVAT0
fEo/HjzzF09BAgZzu5AnQ7fOLyV50+aQDmh76L+h+WWYKMbuA6jAe+WClnurrpMs
EtB6UN5Th3u1HoFbQ0qakljJ04eB3Oug3mIF5N+KgHFzZFvGHFnKF0kt1LyOBeDi
th3nvoAl9M1yrToNf8A/yqIrfDyiJLqoP3TkTroeNFoM14WeV0GyEoSwzZSZChoM
md3QhtY/6jEEMEWVQ3Z84CoXUPX0GYP4oZmmEh8ogVIyV5822H9fIY5IL5bPD1na
DvBjq+6Qa6QfEdGjQ8PDYqh1IU5Gq5WMf/MRK9d+ZOwIVQImVhRj7TEAOAybCPS5
VxhJiPTTmEahDddhwmoTFeo2cgW94Tufwq6io4lwikUOu+LzlyaunyC8BrxptZZs
YNdz1ik3Akg6UaKYj/D33w65NPifCDjUWwW5/HTDiS9wPl/+TjhsOIHTfCfmLNlT
ljILXaRhD2vyCXU2sz6qznsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285439045655653229672011085350180055258218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 00:30:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 00:30:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kgv-schreber-hauschild.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761144772332696543043923951036778512805821153464195922310980953356770489971784621977153925948411447069058836101629699015969271103120909527214187895329116395397726038617593386217235525862161250324361960974170847299048550961311593188818474635570492090954983112309513835952988914642508827757548634996910803212602748264162633889491594638430768005480296734138337854519219719092528602519869475204049548602668644075552177971974087944458653980806535689974620842868270147492707817347456905370048773687696593085050031640766097826780034201595042703396830875697012394347601896864124460350588302424155835904240586449949475498180118822972528928545901452227493559801974810313496845463631877412667513751285674442832835242028733957593991566056625253697451941225480932840156244761401537104264129324694789130710921698695870913533163021362490344020910669009831501558900640260474316336416480843401981398747324813693916576180768201840267274678612318414059867264442986990091511290896021563083216410606734420088369047861067193759575943704235540774813462973704871637354652792274575759774410730132326882639387074203157810597835782020185720360049853436716456508483328467529807078341135482024041278938506510500380389181757132470424602421902624406369067267182203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6604323c1e19986849dee8bd5077eb06282d1ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgv-schreber-hauschild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.server326.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kgv-schreber-hauschild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.server326.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167a009c0c4000004030047304502202ff33174fd0517a42450c0e212ddec8a3e4208bf96eb214ee84118237153c288022100f88eab1d450a4bab3420e15d9bf1d07c62c6437cd41c99e621944e0301dfca9900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167a009bf440000040300463044022031a55cea0e82fb85a3fc2d8bf68ac8e1e7e840cb884796d3e275ae7f7197d1ad0220245ca88bbb4251f8da74f301e165bfa02d6f68bc07c6b376f5f54dd0571b2f6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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