vpro0036.proserver.punkt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:49:f6:0f:52:b6:43:fc:fc:b7:13:e3:7b:c4:2c:97:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpro0036.proserver.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:49:f6:0f:52:b6:43:fc:fc:b7:13:e3:7b:c4:2c:97:29
Serial Number (int): 345144631317340362223640704705432019310377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:3d:20:5e:2c:52:62:a0:9f:eb:ec:b1:a7:4a:28:30:f6:69:bc:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:01:cc:bb:4e:29:e1:25:13:0d:13:33:b8:b8:06:b8:09:fd:e1:c5
Fingerprint (sha256): 05:28:f8:b0:2d:93:c6:c2:81:3e:51:9f:7a:4c:83:d5:4d:3c:b8:19:81:13:04:8c:64:cf:50:89:c8:f1:7d:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vpro0036.proserver.punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpro0036.proserver.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpro0036.proserver.punkt.de

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for vpro0036.proserver.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345144631317340362223640704705432019310377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 22:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 22:00:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpro0036.proserver.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876916875203526875401478663345364750269304305301452831247748742308601045806271996020445670522440290028065054192722565954849317772747205371744045968203411593590951052168867822588986294260398761150833801202170284545409688214692887390547427135081175374164054192871258650716368777882157999056129507178622807780951455619333450604696316352260347257984413839935729189619817133000624730465064006844256377150064048548503172792649967901390266738288707035382570352275272510710227230786207922507643434540901048858910108120193419139437920068767869921997262456169198258040285774953085624100619859218218705280150455309051063467690632149245141207714642485136444670270371030495800676150540339413363314662288639613870684795771901825682067082026766329413057039567434735120471048732204208817008227621849716932699893532570972612356048131617200850829170841107073917470444675092514619652001084373964697619295529780407323986502930467033619496922096440966626394670168130114208480015316865890473025283649314643287268464396016063116296556285225869054811895526317925001874221782708742479630190946790561089843245798694991703727213611358163985603132106873345932482895281056188292358892920812228930822015973737422507757641111795614043638366745483181564725843310631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f53d205e2c5262a09febecb1a74a2830f669bc99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpro0036.proserver.punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ebe8b8ea60000040300463044022064fac3257d10782f043c97a18175c7b1d23f7dc64c19e337c5d354a0ab73c22502203592deea8a876adb538a16c0e08e1d34e95d0a05239a1d8288e08eab80288ed6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebe8b8eb50000040300473045022100d503f192cdb075f7edc95d078e8bb350badf367e68777b4d5c2e939f86d49d2902204fe44b9e5420d4f24c120b8d0e276390c150e2d86fc5e086dde8eaf82ea56745
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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