vs-aph-schkeuditz.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2d:8d:4a:30:93:8c:c6:49:34:b7:35:bd:89:80:8c:78:b5 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vs-aph-schkeuditz.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:8d:4a:30:93:8c:c6:49:34:b7:35:bd:89:80:8c:78:b5
Serial Number (int): 363949656601102190636940898986303161137333
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4f:6a:26:8a:f2:8f:fb:13:51:bf:2f:66:97:fb:a0:b3:20:bf:5d:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:21:a8:c0:b8:4d:a8:fa:3a:6a:80:a3:58:e4:d0:b2:f8:08:80:1f
Fingerprint (sha256): 06:0c:fe:f4:0d:83:f0:95:a0:16:dc:0b:23:ee:d0:e6:e5:4f:c9:6a:81:3c:32:74:3a:54:8d:31:49:13:e4:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vs-aph-schkeuditz.isp-vhost04.domservice.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vs-aph-schkeuditz.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vs-aph-schkeuditz.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
www.vs-aph-schkeuditz.de
www.vs-aph-schkeuditz.isp-vhost04.domservice.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for vs-aph-schkeuditz.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA17kTEwwlpgozcvu7NiBG
Wz8Q/CrZU1Xx018o9NejZmbKv4nGstzaH3C1gQmucXs2N5uOFrJ4gJWyo+Ui23yv
HQkNarpy6TBatd34hnRuTyqBguwCJV2BqZm2PoYsgyf5DUIMv/ApbKQGBlaKU7Ce
MvgT+NjyO4KVRkUEPETksQhinCMpdSkOlM2hbXOuqmVViB5GVirK1zwL9lPt83Qx
FW2tOLA6VToZhMt6dTuTVrn77VhUPc8WHERZppX5xMhwP5MWZgec2uM7sV6X7Rxo
hLvLzx/1nviTAf4XnSkRZJXofDV6lP1ZoU5GoeqvvtvohPrHZ4y8tRQ/+eHjpd/a
NEwoy60vGuctrOhgAnbM9/KtDX6OuXP0g/94/JGasyTpO20XiNIkS9a2hBTNFYpo
2m7/xZD3vXFtuyKkGPqLGOgPdGhZz/EFOXZYZ4LhjLcBwwfnkhL8alAbMrhddju8
UFkj74gTwRm++TCM+YY0ICSQt1Z+C18mapehOqyRTYfVZogXmvVu7GFNSt+oVXiQ
1AdAvfU1nTSzRP8O/eGkU1rUSBEHWBPLF6qwKgDmKV3fIPhcdNcnV7akaqJe09rC
T4JoJIC3Gy5VBfi1ntDl9ess018UrjsK2l79Zj4XKlMw9uAoP1TkVnnatdjmMUpa
3VOLebK0OjzG0fMmzUMwDrkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363949656601102190636940898986303161137333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 00:54:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-12 00:54:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vs-aph-schkeuditz.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880072842297681926347134346452724467714042134856208324295312152943780651921611629776778154907306407891534168550339306922019713345331683471585169157359304067733961808341529449811068268369294699547461344804039227975658817942943890713299840215870938908698013250549943348976409928171528179048099987700268709037969840864443734735100178842452797609487415383192058686655309760316868957756325382586615015327040946024774964926593103067915215266858528598875254749231536687868008025106949876706076995259141047238346527439760155584944983840335526085973232943756616335041676694349923545695184971302310924015012471053191286692811657049714012028291293725319864415912341188429449884781629070298150580102612506114156858180837460934838875547992897653835018164436643960333134117951313213946545031726859065015994405227913270476829765182675058875284884593468520995272378908369056333893606752330781642156087624808070705162651478854437774976666218508401175153171809167757304796051395504652675324151781445267008595911700364914552277299979536249320561021953215834204363129489054713277486320959662402846102791953966033614132564159434705809977850405301528085002395819801904492753403360218011551073372812772859608116205782375455009593082376421133782075621510841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f6a268af28ffb1351bf2f6697fba0b320bf5d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs-aph-schkeuditz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs-aph-schkeuditz.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vs-aph-schkeuditz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vs-aph-schkeuditz.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171713f12cc0000040300473045022079c7a555284d17e68f0c9afc3a3fafe5ad79da210b4d1b04d7e2bb46c5c086270221008b3f4c28595b00b8d0350071181271917d6bc242fcf8be42b43c90bcf2c341af007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171713f12fe0000040300463044022020d625abb2cf92ac2d7e2a6a75a25c02eb4578b924453f921841e810c655838102201d91afdbb3a585936a02cb3df57b3d6bbd2c785cbf921a1da41ffd6647b586bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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