lehmann.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:50:5d:a5:15:99:5b:a2:68:ba:77:5e:0e:3b:ed:a0:04 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lehmann.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:50:5d:a5:15:99:5b:a2:68:ba:77:5e:0e:3b:ed:a0:04
Serial Number (int): 342771167960964507717452677272279138017284
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:42:36:b9:59:5a:dd:45:88:3b:fa:1a:26:ab:f9:7c:89:4a:bc:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:51:7b:e4:b8:ec:ec:e6:00:31:94:52:0c:b6:8a:4b:ca:64:a9:98
Fingerprint (sha256): 07:80:37:16:3f:99:57:82:de:4c:10:54:6b:02:9c:4f:61:36:fa:4a:6a:83:c0:f0:2c:fd:ea:bc:67:c3:83:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lehmann.isp-vhost04.domservice.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lehmann.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anwaltskanzleilehmann.de
lehmann.isp-vhost04.domservice.de
rechtsanwalt-lehmann.de
rechtsanwaltlehmann.de
www.anwaltskanzleilehmann.de
www.rechtsanwalt-lehmann.de
www.rechtsanwaltlehmann.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for lehmann.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342771167960964507717452677272279138017284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 01:13:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 01:13:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lehmann.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816531631798016536848061500003586603571672956975642752266402694041876018951772051002360251708034254184314394211299078995991350314972756340270940692963486356991933473387044417630313866912266414054507560382976596292789548981726799171513453090320406959749375724939811077013214579847775192475990212643441817539812707877022614179085569540152886453902767977786011266939436210473923969136788449659543688389398163470011025277273426240025843963967871008544601750801467047883309758572335197985098861704488458927366022245333272248855466113467063359835831764110488163786459665265368306833494427895204447854268007853281295967349786649625625013826981725284703141800330308218099064374298378030660648245337429846978650880437618032637996359725651010762256416014408645576977744174096345336222483362617568637263380722973681141950655758027555847253343426765922685012564746189426314676566284903717059082369197756184873980995082851361579579277287168264793990263834040562342529922923236956082712499399518462007502086519936814919998551575906376471407337761816436335208426179962697753519790418386621113672383716161262508247845625592431646650415260497357786941405307695997193680104583950557607700981331931124601771391581855191983771437649716245818165108018023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							904236b9595add45883bfa1a26abf97c894abc75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anwaltskanzleilehmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehmann.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechtsanwalt-lehmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechtsanwaltlehmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anwaltskanzleilehmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rechtsanwalt-lehmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rechtsanwaltlehmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f0918b6c0000040300483046022100843cf416771c6673059a8025c43a025655a1c94843fb861a687716996fa1d8fd022100f196de30f360aa21715689c053fda33b031dfcce9127d5f72667b926fe39b796007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170f0918b750000040300483046022100f5d5376045bbae1392c51ecf38de1f8e4efeec79f9f037ce61f39af2743b0bc902210095e0bfbce84f0bfad27976dab884a31bc64fb3d28eeea9f13548196ed725071e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007fc036fdc2df433b483a091df13eb18dd0748b89ed574e219b61c95ff55f1d621e758c5e420af06e4ab8173b60d943ac7d9aa7bed2c99eef0a53374967cdc93570b24e60c47f487f4dc8a5611040d91d47cd3eb25848bbf7cab90ecb8fdcc0cd7261283deb463bb7491afd0ff8526da9d8cc7d0fce68bc1344e88f734f597bf245188754f60f90991cee08c929798e4150afedf502fbbe1d94f6a8c772f9bab69f169515c15576fb954cf63d404cedbb57304215e5c9be800b63a3717dc1063bad5e75aab19749a8b98bfb74991c3216a26fbf3953c67f2306b9dcb341849d546ae4278d3c63bd4482d90e6adfdfc924cdabaa8e4c7cf76ecfdf2854d7edc968