vpro0163.proserver.punkt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:1e:3e:17:cf:bf:66:90:a8:5a:7b:29:48:34:6d:7c:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpro0163.proserver.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:1e:3e:17:cf:bf:66:90:a8:5a:7b:29:48:34:6d:7c:1f
Serial Number (int): 298467835034896695247756575441081932282911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:7b:53:2d:6b:ba:69:54:72:28:e5:85:d0:ec:dd:2a:df:1b:1c:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:d2:83:27:84:8e:6d:2f:13:82:6d:a3:7c:62:40:f4:82:ca:30:63
Fingerprint (sha256): 05:10:9f:ac:54:fd:08:bf:4c:7b:63:b9:53:88:50:d2:05:84:f9:ed:7b:55:a2:64:38:10:fb:0d:c0:ce:b8:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vpro0163.proserver.punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpro0163.proserver.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpro0163.proserver.punkt.de

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for vpro0163.proserver.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298467835034896695247756575441081932282911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 22:31:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 22:31:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpro0163.proserver.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927579673119783782658632725200234969190086176423242819837777540908072093804371851743579707835285594200702374660755403294372869022027194757004018509995715010354945394738157609800856586369087158349467031382884065875425969974553101151418063763423427505587767101309860438655903830956000999792914157289118910654065997173143557160438226574866487997837344347407074380862526299830744671417143982688061231436206053110105272619141525091361413466229991827700882570320828052609206950025986410450957891368320293637259084600161684483794121758234649100716672872411524756125218611882521571083138407279428079734744930809764694735768413838702269181463299167028373571531287173165158992606275831400773701566333289606426245784718372077109858477241390627394895536358977064918658955269899515253285324306072873811647880172345617491263913648675950239033058461563437054597146824935853689267675958198781949904019063955337877361811003527577824346923544210062762381130470559863939636074650957109163930789614732990217053625168295033426318197938811705771260376841716460705905808210334984148251631428484562357129062172496703866177263458189983021411176139306078659533791468219620133261156101108093431064353773042525222276538523942867721245105805325876895423323275917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff7b532d6bba69547228e585d0ecdd2adf1b1c96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpro0163.proserver.punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170c6c9a71d0000040300473045022100a8e49f5336100bd88920346d5c62c15a623ef3a34bcf113e1238cdc285d2008602205dc40482e19cb9d9094e01b060d4b53fe52bc0a94d2e07759534ca382e33405000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c6c9a74000000403004730450221009734dfa27e28f8a6d8898f6b4d5fd641e493e4f6720ca8382b5678139fdba892022004418a6f234b52f2a4766165ea9114e19f05027849c28c1eceb00c1eceb69594
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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