geo-kompakt.de
Issued by R3
About this certificate
This digital certificate with serial number 04:41:b6:0f:4e:b3:0b:cb:3e:cb:8a:79:f6:cf:86:b0:83:1b was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=geo-kompakt.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:41:b6:0f:4e:b3:0b:cb:3e:cb:8a:79:f6:cf:86:b0:83:1bSerial Number (int): 370809496552801159641372283660921585304347
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 97:15:11:36:ab:bf:de:1f:a2:2c:3b:6c:48:91:05:b5:7b:6a:35:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 51:f6:9c:1f:ca:f4:37:a4:8f:b9:98:20:6e:fc:8d:91:a0:18:78:b5
Fingerprint (sha256): 09:1a:22:f4:e7:b0:d6:3e:e8:dd:ef:c2:9e:82:4c:51:04:05:d1:81:f3:5a:28:dc:23:9e:e4:cd:8c:53:14:f7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate geo-kompakt.de
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for geo-kompakt.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
automation.guj.li
geo-kompakt.de
guj.de
i8n.guj.li
spiele.eltern.de
stage.haeuser.de
www.geo-kompakt.de
geo-kompakt.de
guj.de
i8n.guj.li
spiele.eltern.de
stage.haeuser.de
www.geo-kompakt.de
Other certificates including the domain name geo-kompakt.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for geo-kompakt.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISBEG2D06zC8s+y4p59s+GsIMbMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDkyMzIwMzZaFw0yNDA2MDcyMzIwMzVaMBkxFzAVBgNVBAMT Dmdlby1rb21wYWt0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 7eY/c/0dyi4LxEK3L5D2viFA7yWD+lLvpzma7mK2zi+vSJdV/U+jaCO7ay0AEVWp P3XLTCmKpqQheNgBX2GfKOObFF8lPbnKcnowYz3mZ01Es0MkllmmMxll03T9NEHW S3PQs1gDZ0mei0SqfAo+HRVOePdUsb+JdRCLzGL4FYIrzv+dh+qLW4pqQ8FAIx88 jO32u6aj/BoqcoJuMkvHpj1Z0C4ZSta27/vq8koS7czaAMHtkHF5exMTopjsOlUk RLlgosTo2H1DCKwjxrJri+ZRX4ZMaSh21C67lqRV2l57gzlk2MqbGc46pMmgIYAG Tloo8ev9qH2EYeODiHbNAQIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSXFRE2q7/eH6IsO2xIkQW1e2o1lTAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzB4BgNVHREEcTBvghFhdXRvbWF0aW9uLmd1ai5saYIOZ2VvLWtvbXBha3QuZGWC Bmd1ai5kZYIKaThuLmd1ai5saYIQc3BpZWxlLmVsdGVybi5kZYIQc3RhZ2UuaGFl dXNlci5kZYISd3d3Lmdlby1rb21wYWt0LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIB MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0 x70ADS1yb+H61BcAAAGOJbudOgAABAMARzBFAiEAn7KzGvfRXanfI2DtK1e2ZraB hxSmGESepF+OKbUU8Z0CIFEhW7KgCPriCZQG3RAcCJC8T4y+ieaDZBKIJBL87rh7 AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOJbuddgAABAMA RzBFAiEA+sQ7u2dDusw9eR7X89GplvpFbei/A8woYtSmaMrEcckCIDvUncX5Fuf7 iCMF2RI4DVzc248suNXabbR4Wkin5LK+MA0GCSqGSIb3DQEBCwUAA4IBAQClb3f1 L2zZPEZBHieW5pN0+M32x15eu1uxZTayYOJlnsPO3oYEUNjf3LfQ6mCa8l3IXLgd IOhlpYK0xLlZPM8nYcz6SUbA0tq7JnFVhJJBQGMexK/3CsTLlNyY6bvQEicCBwXT f2BFPsb9zRnUtavv88A0RHICMRHhHX37ADZ7T9rlW8TPY1L+U95aVzFxK2sETXAi 9ewqDP6lAQBQbGFCpZCtQ1cF/2Y1T27dc3y2hYkDtcAzXQO05bBcNlX0LpKdHpdz ly1C2+ro7+PcuXQjOTJRh6llQ0ZL8giANbe3mxW9AThq5RdjCOOmhTUD6Rgj+yoq UeJzzDIbjw4pnSqk -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eY/c/0dyi4LxEK3L5D2 viFA7yWD+lLvpzma7mK2zi+vSJdV/U+jaCO7ay0AEVWpP3XLTCmKpqQheNgBX2Gf KOObFF8lPbnKcnowYz3mZ01Es0MkllmmMxll03T9NEHWS3PQs1gDZ0mei0SqfAo+ HRVOePdUsb+JdRCLzGL4FYIrzv+dh+qLW4pqQ8FAIx88jO32u6aj/BoqcoJuMkvH pj1Z0C4ZSta27/vq8koS7czaAMHtkHF5exMTopjsOlUkRLlgosTo2H1DCKwjxrJr i+ZRX4ZMaSh21C67lqRV2l57gzlk2MqbGc46pMmgIYAGTloo8ev9qH2EYeODiHbN AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 370809496552801159641372283660921585304347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 23:20:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:20:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geo-kompakt.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30032017730169268567748128936921380222073989436741841258074949910740526978174371774728654704828376018084307507162674293209196421919496926364107456704914252372210528535610547711575158397829719119947014748279092981789761553696029422856484876683290129087512340652106053604688840998137674822572945649796572981764593151783920329867793227718202155008503078571438458413124206875808244180826671569072180215807201556335742601349415085679165276402949238992995755139060356971602253670160665654891269543706241779010303416957215704339955626614068404935319408585132548340799625513826002858849492301940595147534710402047813667441921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97151136abbfde1fa22c3b6c489105b57b6a3595 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automation.guj.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo-kompakt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guj.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i8n.guj.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiele.eltern.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.haeuser.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geo-kompakt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e25bb9d3a00000403004730450221009fb2b31af7d15da9df2360ed2b57b666b6818714a618449ea45f8e29b514f19d022051215bb2a008fae2099406dd101c0890bc4f8cbe89e6836412882412fceeb87b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e25bb9d760000040300473045022100fac43bbb6743bacc3d791ed7f3d1a996fa456de8bf03cc2862d4a668cac471c902203bd49dc5f916e7fb882305d912380d5cdcdb8f2cb8d5da6db4785a48a7e4b2be . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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