kanzlei-kratz.isp-vhost04.domservice.de

Issued by R3

About this certificate

This digital certificate with serial number 03:2d:8d:5f:c2:bf:ee:62:3e:16:15:ab:ca:2d:ca:8e:44:63 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kanzlei-kratz.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:8d:5f:c2:bf:ee:62:3e:16:15:ab:ca:2d:ca:8e:44:63
Serial Number (int): 276837482672324023091338167992361071559779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:94:49:91:8c:d0:4c:87:70:19:32:54:64:4a:50:7e:fb:21:a6:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:54:2a:fb:83:9d:ff:7e:d3:db:8c:05:fc:b6:a2:c2:f5:8b:36:77
Fingerprint (sha256): 06:02:03:ab:cc:2a:30:97:0a:fa:3d:e6:eb:7e:ff:16:17:31:36:f7:1a:a4:3d:f1:ba:c3:37:00:49:8d:40:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kanzlei-kratz.isp-vhost04.domservice.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kanzlei-kratz.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kanzlei-kratz.com
kanzlei-kratz.isp-vhost04.domservice.de
www.kanzlei-kratz.com
www.kanzlei-kratz.isp-vhost04.domservice.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for kanzlei-kratz.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsggYT+owqOuw0J1wtyE7
//jhDPBWCPdyP8UipRfJVFw0DR0obmviKzn6CPjivAR3o7btFcIvjopZsScQi0fa
rdslX+QImfMZfd4Sv9i6ZV8hcjQygQnf2F/Cm0k0Zs7GoTMuHeRQR557qhBquKUv
jD8ogp3SOmxsf1fhfxFBffsCm+lx6S16+WH8qutVcA/3S5zvjfK8xfDt2z6Y7igl
4CNwr9Bo/odsW/pFvkZMP+feQkZoOraIgHMnJ8zaUfpSynlalWktJj+iU5vA9AsQ
F5hQlNDLdYcfUdLkRcyGb4w1r+QlxdNXd8j5sBwzxr/OA8pC0cvZ2MPhsO5MlfK2
sy/wyMnJ8tgloyAu209Tbx5ypNSq0EOr5ZJH4W9ZBoAEK55Rnk5GCfnYmRiXth13
AQ3WcBI1qntOig0chC9yHXDCA3gt9jyiITDAYsooi6khYjz/cDdkZ54mlResAPq6
VcqiOgw2rwoe75FXnWugvSZYojRqUv+u4v5rDe8RzkfbCORAuyR5rw85ttkqveuc
R5aF/0zMyqxPbAz0Dh0e4LB5/sC4/Qk3ObB3Rd8PZH3ngGaBSXealwegFAuVx5+b
dHyrp+MB5tuWxlV9hyu8xLB/U5h0gnMfx6RkV+ZFEvSx7ghQw/PgNgQBul2rjmsq
294BR0UA2pJkjZnSg4k+Uo8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276837482672324023091338167992361071559779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-11 01:09:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 01:09:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanzlei-kratz.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726305646427529378805539950798163141645530253640359008878018774464118318839911675614153008674761475799662010253066578982115410891525009585377882609810933554269718725081182969500875418313536325356585557985571826005394338293291901100694169799855116536039464717018452393696032016749763819004973484758723515507814000737619680622870670762596026146228887139537132050003044132557183667526449613952074575900760075084254369751088637260230221424877599136112935304903805553040399473379129148888302312698147606547704050057219796077142625825547120283291810463589769520041458373108062917836610209549248952288943549442434904016319915170172744529971645999266052442670033692172105764468889515261253329681672540057630520637171426380756848581223369186275723531009260691536068468204290796814776918275108805322848952388590966604253052937412087178440328428830081524837637916124445110334865117756885206065574457549037700919101043757048156108072272448934807651089393239942927846950191316092832890620240227228134325418251751985528883286223133748915223695327827330634469154340289832993052743454319438873540314887376015441261540306433019204025111465322928433547507132766040367418300332202877883866316463836202111134675091596155283422279037736794207233882608271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad9449918cd04c8770193254644a507efb21a698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzlei-kratz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzlei-kratz.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei-kratz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei-kratz.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bbc241e920000040300483046022100b6deafa3d00e030d81f0d7e738aecc52390a5799f350f13f7e04aed6eb331acb022100a215630a1e6bf69b5e0d5c375789e3bb0f06fcc6a94504d2da82319a6451cc0200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bbc241f1b000004030048304602210089c82a0e45ef364308a325ca5265be69bb3d3138b71364482f3653981001a209022100c5bcf6733eb65912df60e89ddf03dad964fa4ba7b04029c4769295816e42abc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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