doerte-rupnik.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:bf:50:13:c0:7d:fa:77:68:4b:37:d9:e9:0f:d1:86:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=doerte-rupnik.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:bf:50:13:c0:7d:fa:77:68:4b:37:d9:e9:0f:d1:86:ae
Serial Number (int): 341897794720182397128851570998982808274606
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:55:68:a4:1b:0d:6c:5a:f6:83:fc:d1:09:0c:5b:4a:80:9b:d0:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:f3:60:5a:77:1c:00:e5:9a:00:81:8a:c8:49:89:87:44:2f:a3:76
Fingerprint (sha256): 04:c3:b8:ed:d3:a1:ff:41:17:c0:cf:ff:2f:31:b4:33:3a:13:dd:b7:fc:02:34:70:ff:1f:a3:94:e7:ad:76:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate doerte-rupnik.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for doerte-rupnik.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doerte-rupnik.de
www.doerte-rupnik.de

Other certificates including the domain name doerte-rupnik.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for doerte-rupnik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsGkresM5M0x+HEEIGOQV
vf9h3oLTfS68T09TI748pwsEPL0aR6c4SlNsF6ng97urmsFX1QCMz5FGzvC5cXDv
GNTQbNBMpbiuRSuXkAkOZKefs6lc8zlOUlJBxUma0wr8ApDvLoe+QgOU0rt+y+kH
TzzrWuN+NR62qVj/OErk1nr6toouKgVxTmOaGk2VDtBZb4s/r437KShTnb5vyZZG
C0CQhTGE+TagVcQBLxh5UjILc+r4h+YEiElc4rRYZ0WJJQu7mIdRd9yTd42PWCua
03a0n/tllyC/dUs9AxNHPFU0hWKr8bB9FJQnxjIgQIQBQ6KMDET+pMleJI1G8Qwu
HDnu7xdJJQLEF9Lcr3w1SjfJp+8PZQ/J0hTPtXq0eY+/uurp7ZQaJG9e+7ry7nQ2
qHV/y7x/dvw8E+OI1KtdrI1RG3wBfiKv3MfhA3WE3z4cM9eH2UmllpzIkSY5z2Za
dMWkPsg7cdLbk2p/ZaNBPboO6LUIqR7pLqIt25IPIHEdFDkZnNYEYLrKSUT05Clm
mEouJR7xo8B27yxF6FjaMFdYtC4x8Sv0sq+jvtQyfFsxMX4Loudbt4sgcpsW+M02
nH78HVv9ZubWTEzMa9mq7PAl+GDDt0m/3nyLoZqjKZaNSlJaAkO+hXeg5Wq8SkaL
920iV+xvtbg6rB7USMNOtZ8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341897794720182397128851570998982808274606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 21:00:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 21:00:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'doerte-rupnik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719693354103888306813104803379856038628534071196457890612111548127566789956986699878881508266878243310360275549466462249747523280326294164555010274673345992304128311456858630228453292483179609107746444703416178882358515584736070326128514801686020563706930829610068145447912008185766349177910110919931531561599065950820980309709088380277757129259028121377490614102976613836624358185492068230275713073313267503234687202487240086514596960743362211851948286498688414362503553757926670799708109067721510133411626612617128062551620535060929495636397449613720890873798157028157878005361740367555872530835854586229354162658853753193718888504489342357804945207856353368915814675676436279152701383434937555148881640029529369833852651790362616758947806328618352377163329575204300084927633339393052377877859329646270296954537855796690001977907159328037071973708297998930921376827936784957970326923402066284587458719620902976826833720181287921092759719846750267337217221679169311130490805648732744512409471139654498813391622266322799344827151906230845884231148114014292228740210218860560726802442890295572195402630377839202216981758293518121486527547563899672304146357765689135761779552302323868581128701431984045964751994640077308015401239491999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							535568a41b0d6c5af683fcd1090c5b4a809bd0e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doerte-rupnik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doerte-rupnik.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001644d8f89e70000040300473045022100f8a52bb0aa5a30ebf67a40254cfc98b54930df16ce9c7e8efaa0d4e861ffb08902203a8b5e7a818b067fd32b13bb107e51490c0db3a96816109dd5b2a6af2e09d5cf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001644d8f89f700000403004730450220717df0ab7fde3d518c0d42726b8b4bad436d7bd8e3f974da1cf50d752a26df2d02210087152ab459e86171ea797e0e474068f421981ba11884b51adf77a905bef28e9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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