wundertuete.eltern.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:05:85:4c:41:23:71:02:52:e4:75:cd:c7:50:e1:a1:14 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wundertuete.eltern.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:05:85:4c:41:23:71:02:52:e4:75:cd:c7:50:e1:a1:14
Serial Number (int): 293671020914854932716220725769055053652244
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:3b:44:d2:bf:ac:03:5e:12:d7:c9:40:a6:84:22:55:56:3e:09:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:ca:35:b3:b7:70:ed:cf:9f:42:b2:75:53:25:16:05:19:a1:f6:6a
Fingerprint (sha256): 08:bc:61:ba:bb:fd:0d:5c:53:0e:70:b1:4f:78:76:be:a4:d2:11:ec:7a:74:e4:70:8d:17:af:be:35:0e:02:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate wundertuete.eltern.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wundertuete.eltern.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wundertuete.eltern.de
www.wundertuete.eltern.de

Other certificates including the domain name eltern.de

(limited to 100 certificates)
www.guj.digital
*.das-001-prod-eks2.guj.digital
stage.eltern.de
serviceportal.dpv.de
klinikfuehrer-app.eltern.de
www.stage.stern.de
spiele.eltern.de
wundertuete.eltern.de
geo-kompakt.de
babynahrung.eltern.de
www.eltern.de
meinung.eltern.de
spiele.eltern.de
www.guj.digital
www.stage.stern.de
meinung.eltern.de
serviceportal.dpv.de
aktion.art-magazin.de
newsletter.eltern.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
a1.mobileapps.eltern.de
wundertuete.eltern.de
vorteilswelt.eltern.de
kinderwunsch.eltern.de
www.guj.digital
alleinerziehend.eltern.de
eltern.de
kindergarten.eltern.de
eltern.de
www.guj.digital
www.guj.digital
geburt.eltern.de
*.das-001-prod-eks2.guj.digital
vorteilswelt.eltern.de
www.guj.digital
eltern.de
*.shop.eltern.de
s1.mobileapps.eltern.de
www.famula-app.eltern.de
eltern.de
eltern.de
*.coremedia.guj.digital
stage.serviceportal.dpv.de
dev.serviceportal.dpv.de
babyshop.eltern.de
shop.eltern.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
commsvc.eltern.de
serviceportal.dpv.de
mobil.eltern.de
vorteilswelt.eltern.de
spiele.eltern.de
sfbws.guj.de
ausflugstipps.eltern.de
commsvc.eltern.de
www.eltern.de
www.stage.stern.de
www.guj.digital
eltern.de

www.guj.digital
facebook.eltern.de
shop.stern.de
serviceportal.dpv.de
a1.mobileapps.eltern.de
shop.stern.de
www.stage.stern.de
newsletter.eltern.de
meinung.eltern.de
vorteilswelt.eltern.de
serviceportal.dpv.de
www.stage.stern.de
serviceportal.dpv.de
stage.eltern.de
www.eltern.de
eltern.de
int.serviceportal.dpv.de
parenting-cms.eltern.de
mobil.eltern.de
mobil.eltern.de
vater.eltern.de
parenting-cms.eltern.de
wap.eltern.de
c2.mobileapps.eltern.de
www.guj.digital
www.stage.stern.de
link.eltern.de
alleinerziehend.eltern.de
jugendliche.eltern.de
serviceportal.dpv.de
serviceportal.dpv.de
babyshop.eltern.de
mobileapps.eltern.de
vorteilswelt.eltern.de
ausflugstipps.eltern.de
www.guj.digital
www.guj.digital

Certificate

The complete raw certificate details for wundertuete.eltern.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293671020914854932716220725769055053652244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-08 14:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-06 14:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wundertuete.eltern.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799278142166216263221673386947534748169783028878951867351386806757179193117433015316900063005075031422530274082137575952604368841725710793540862519723625049028213331375131671181378670554794416689075768038207314209417519817799023630249145760920371124696176320527700501132626503236684666730444289274280597746875239459674214389344178413573828743921392853846500790619678765727481954956776637856490118271614182134349349178993024390100316627135308413334240164569907709860822371137727086340554107326526020169911297127231826812284936563919641679519947972187773481463390721796838221223755630445180714782486192147345649051708171431914976338701764589382517666461568040151564134414259292428922293307916736639992360511906229335469335865248811193052544026341889417808341583388969754157425548673970913253431695332202244135983784678873931751036770498805384994471301758632203495740409769154564935439463029413156273904341980800324368878966039487352225021122552753048200755764571521496806871217052531042165740107334814399493475082840206663222372330822153766909952700607070652656643062818116727177485551393503823439280404182275961640117618921733924596203733164463988989627964022585704298444924475135812292356264187602393797056137719589031028424230109577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							393b44d2bfac035e12d7c940a6842255563e094f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wundertuete.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wundertuete.eltern.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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