www.gesundheitnordost.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:2d:52:d5:ea:b6:14:03:db:cc:16:43:8d:67:f2:8e:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gesundheitnordost.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:2d:52:d5:ea:b6:14:03:db:cc:16:43:8d:67:f2:8e:32
Serial Number (int): 317203411337216355092680519754223962983986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:38:de:5a:d2:2f:57:3d:ea:df:b1:96:dc:ef:f2:e4:87:61:1d:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:62:18:39:94:33:ae:95:55:95:76:18:e7:04:0f:b2:36:1a:f0:c8
Fingerprint (sha256): 07:7a:dd:a4:2b:29:c6:f8:bb:4a:54:c6:db:26:ff:60:5e:b9:51:ba:f5:fd:9e:51:47:aa:02:46:96:59:c3:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.gesundheitnordost.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gesundheitnordost.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gesundheitnordost.de

Other certificates including the domain name gesundheitnordost.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gesundheitnordost.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAovRF6r7t2tNJleCWMi7f
F8HXBNXUWM07ikJRvIZpy/V9cI7BgJbhocHTEBVBybJgBPxQPPxAN0Y3DnPXAyXd
6NgQ8J313kGkP8tOR6qMaRFMcEOB80WoDoNBZobPcWDUm813IFxtXL4K+KIgJZuD
jOKvqpEAy/c58iroaL6BOXwyADA7l0JncwOaSzG5utx9E23UB7ceXlfOb5dGGgmF
WwIksBtzZK64O6rKFBPd7Nb9FTyh6Db/PXlkDKnADtn7i7XNd8j2dHquejgzZ7UX
Y6b67B0zK0JNlOZcJsO8u85ck9ydCZAzs3bF8l4BQ/FZ7K72Wxf1+0ir87lZ+cTH
UNrwmOCdh/G3WWCgT/l5hnaKuWxgFN8YWicC/CeoEwwvoaajg5Ox5WIqhBjQncYj
ikeV60ZZOGU4zyL4fHUHdNTi8+MdGqttiy5wCDZzE6MDMeHen3sMhpfmwpRza19D
VfEpgmE9WGLvS+Ib1Q3b/5VOs3XSiry7JxnyPyAGRSWh6ZA3BJ7DH5nx8e4wgAhy
Zc1DZAaOzFPewp2xpMwfMKx9uiVxoj1ohMkoCma2/6enq5ry+EADHhViEX1UXr5Y
436SYIpQbjSCrJ0g+iXl7+1n8qN3LNU9hHYj3Yjxk/GQtr5eXPsQKCo7PP+XNjZA
aPSjOAGx00xcGSeIechBhJ8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317203411337216355092680519754223962983986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-07 21:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-08 21:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gesundheitnordost.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664795102133283062600970576784052500684492287870368886865765927424529974228172464238282028246604987170980380462311361018778637971000537415902078022617764426655345664955287609547353057451738559911916561226625760692409356859195437847010964881573922155742814888036048150242303800006556000935827940675099759399389172333222805373855298531836681592989279318286553364595287797748094335098813178809691273447663383768081723189722787302197016317436921180221308466431983184957444015736659856642403988087679634737149472101472473083428132137700322860742683697187817506874537341227125372147314646448281390462042459823618222315234541761349191040912050332492615514976968951730530726255595686321542809595958069395567851496823134538791588998806187044694881570636202803894367968771715801143394293512973218075541170919170281587699161208892811864851246720536517256961539950358626262737567576676776533650063475127237836836526295141394341252524343938539371555472493639569226043927843086173071563786057295136655617727496830567921155796187444384440741002919769109003306467970713508518565379683538732955665418386494824281704361611162038585769596855810342858903026738148761325212585492045815523626074768935829600669282885074270581431438343838441311923721045151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf38de5ad22f573deadfb196dceff2e487611d7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesundheitnordost.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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