ekipa.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:2b:98:c1:e7:7a:a0:ab:ca:a6:a1:61:5b:a6:21:8e:8b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ekipa.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:2b:98:c1:e7:7a:a0:ab:ca:a6:a1:61:5b:a6:21:8e:8b
Serial Number (int): 278068643740192683782071168714495716593291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:e1:b7:7e:b4:21:14:70:83:c7:86:e7:1c:3b:2a:03:04:23:11:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:8e:03:cb:91:d8:be:1c:13:3f:f7:7d:99:fd:19:12:74:35:5f:c6
Fingerprint (sha256): 07:8c:cf:ee:5c:ac:4d:49:9c:5f:a8:64:e9:7c:f7:93:e1:fa:d6:cf:cb:18:6d:27:79:29:5c:41:c9:70:35:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ekipa.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekipa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekipa.de
www.ekipa.de

Other certificates including the domain name ekipa.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ekipa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISAzErmMHneqCryqahYVumIY6LMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MzAxNTU3MDBaFw0x
OTEyMjkxNTU3MDBaMBMxETAPBgNVBAMTCGVraXBhLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEArLQpfLt0j89GobDPPdgaJ/q1dHtqOmUl5/tYEsiI
vWtJBhCbCiQLGwNupQT4yMwoJ7k7vsv2oeRq1aiGCsAwEw7K+og88AZaw/2QHB7u
ajj8z1//easxB1TaJleZKeYPGfJtScU9YQkdC+52bUMgoFdvkwHNrr32wLs9anK4
HdTl3X2Vcu/gXa7kKZ5rHSkMtnwlRVwC678haP5rDUL+nzVHi4yeSftGHtISRcfP
Xie6dfOLersf7VRtMq2b5Ssms0yxJo3m1Bsvj8jWUVIGrlLBgGLi9vsF0x/IqA64
AN4+FkMSPAFFCUGUjaFMwr+6pjl1eZF6P+UfnTBnjKIY5wwT1ZQDi4imGcZhiEh7
/AIzOQ+atStDQDJAoZmolYiwZ+0QzN7SzdEA42e1WtbJhH8z7sVOKhWsGAmD+txO
vNDmXISjw8K29xdbb5KiJXFDVAJFSJ4lb3d4a3fryKBlG3wlDu+eBMjsrV5x3Ny7
Qp65Y1eNRh63p4aouv5tyRmOCiP3sV9RAFWv2k1gESLSNpbCOH+N3EE4P9qwvL7C
Z/MYSxiq3Vi3kI8jEja/SGRA4uKUyCCa3BM6tjOdYBmFea33RWBLgtJnl0fTF18j
VMc+mbriBRXQMF75uL+Pnl/E7OrLzVE/5Zv45R9lQNZocxCKtaq9u7r73PrmCCP+
HkUCAwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUceG3frQhFHCD
x4bnHDsqAwQjEQYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghla2lwYS5kZYIMd3d3LmVraXBhLmRl
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtgxqX
QwAABAMARjBEAiAkVPGZsCYKIi2r5JDi+Z1233KrTfur3JMAY3RXkOr14QIgAUnH
7MdEcUe8CMLeM+NiclnvS0NpMbMIrgbM9NpyaUUAdgApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAW2DGpU5AAAEAwBHMEUCIF7BHGyZ2IgjPfYIw0xu
5j9jJNgkVRIggffG5blbJAdBAiEA+oKCuJHoUBVaHn60WgbyKFFhUhlw8CBj1XxJ
TejYF9YwDQYJKoZIhvcNAQELBQADggEBADrdeXoXgeCueR54boZTF6xqP3qJ9S0X
/Aok3AmmHFBrN7CN215qklKKIFpJl4+j+IKYQeuZnDrPu8z9HqPfe+tiR+TYpKR6
eEMLH0XIuwtlpypGka5g0haEw0Bdtl1z+blhvV43sBEpNZk+j5wJLbfVDj+wtJnl
1ZRNL/hOhoIipPsDUMznLgAmsASPD314JM7D4Ni4aNxzlSCZ7E6JG/BLlApb+WKl
eo9vBOES3eiqAOVVacc5Fwf8ZZ8SJRICYuX/xyyPmwUUaXq3yRbphDIMkTSxnHz9
3LM/V6xOK1dGVup4J8opPF/gBNBWn8bg42fHChcLYVk0gf18CvHawSk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278068643740192683782071168714495716593291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 15:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 15:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekipa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704569862032956799509802986170212571503235531751900947022101520436993509619419877615089755689588884241837555796581752789720927266761517493260839218247270911525825529143876841752120687505807412858718584847765947488152323912133082568095406880603154805157215831682722883186662323858566346154403330725772390960988429824810529017205151104017138271809898645107339487324769059200554305956638189975608841383785256903306966907508035120429244925852031957298722997979869195911376153337418821845932911410357303228856753988557904502543769885331796828579138823759868721473902819061800034896354048922899527385083791019800208788311291057280208561853498533268875270052201327157487845076540971913334530237513341943969182003548390409990810730909589005627390721552055302424379537012597199621589491281092079346700756436353299404009459865487343372438739472046972832326819293271352777243987620708994787255346063138451660296200377923542526237415604752333025569189509523727814191110872425817230672572126733208010722411155170303574287129859926373047037399011171517927555306037909067705178474100665415642936314104717550260447353197871945613034444813405458303046574587448608613082937941222327998576455569193646315582118765376752250269869725579260489213604142661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e1b77eb421147083c786e71c3b2a0304231106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekipa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekipa.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d831a9743000004030046304402202454f199b0260a222dabe490e2f99d76df72ab4dfbabdc930063745790eaf5e102200149c7ecc7447147bc08c2de33e3627259ef4b436931b308ae06ccf4da726945007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d831a9539000004030047304502205ec11c6c99d888233df608c34c6ee63f6324d82455122081f7c6e5b95b240741022100fa8282b891e850155a1e7eb45a06f2285161521970f02063d57c494de8d817d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003add797a1781e0ae791e786e865317ac6a3f7a89f52d17fc0a24dc09a61c506b37b08ddb5e6a92528a205a49978fa3f8829841eb999c3acfbbccfd1ea3df7beb6247e4d8a4a47a78430b1f45c8bb0b65a72a4691ae60d21684c3405db65d73f9b961bd5e37b0112935993e8f9c092db7d50e3fb0b499e5d5944d2ff84e868222a4fb0350cce72e0026b0048f0f7d7824cec3e0d8b868dc73952099ec4e891bf04b940a5bf962a57a8f6f04e112dde8aa00e55569c7391707fc659f1225120262e5ffc72c8f9b0514697ab7c916e984320c9134b19c7cfddcb33f57ac4e2b574656ea7827ca293c5fe004d0569fc6e0e367c70a170b61593481fd7c0af1dac129