css.czastka.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:01:ce:31:d5:b1:d8:3c:a2:18:db:79:b2:52:58:fb:fd was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=css.czastka.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:01:ce:31:d5:b1:d8:3c:a2:18:db:79:b2:52:58:fb:fd
Serial Number (int): 299791165109264138857115132425801353985021
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:44:cc:1c:a0:79:a0:49:6d:2a:42:bc:61:f9:6f:3e:03:bb:17:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:5e:4d:9a:37:12:ba:04:3b:43:02:61:a4:e5:51:92:96:f6:eb:c1
Fingerprint (sha256): 06:4a:37:ce:09:de:2e:a9:25:23:24:b8:1f:62:da:3d:36:cc:39:9d:d8:22:d5:a8:0a:74:39:0a:07:d6:4f:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate css.czastka.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for css.czastka.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

css.czastka.de
icon.czastka.de
images.czastka.de
js.czastka.de

Other certificates including the domain name czastka.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for css.czastka.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299791165109264138857115132425801353985021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 20:08:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 20:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'css.czastka.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791856660730524606883078514714256988167422021023619911070023751344034721625214051421426296657294158099636331686201549796681012150962261917200283062074245543422044770068944503201073602005012343134377105054699134508692842066182675814378279104381991432689201338933714856571780436670320618222723454367349753193845689224037988936049942766538076434543138318354636682408816130211503169706630651443490943534962712168676191327088865854931365230122898949818689578252661020465501392223547604221940407310451284961714353160523206279933654079359208946920130120322703496179208244302077747219977805487872518261415804558120637958894290595105808156643201561380508605862572197136322159456232761758833380215504338306345245269249199944218533991156214790354984149789344302038065660660246664397177100769811844090083247096585825487950145005599043981976214191027186902339943521975922809744444014217712783658144885556635399390367741313089542187152698050447823428531361161370426754438167957809802568240772934806889887092267513687183394844919605830130969266443734342573617228164069920569097406644734094983984702111937672634693136945222278114017942986469759075185775520913031445578027898301852378963506963982327258735923737076712591786868421148201467545439960581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7544cc1ca079a0496d2a42bc61f96f3e03bb17d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.czastka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icon.czastka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.czastka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.czastka.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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