steinstrasse.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:25:8d:d3:fe:df:0d:58:bd:c9:d9:ab:97:ba:39:e3:40 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=steinstrasse.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:25:8d:d3:fe:df:0d:58:bd:c9:d9:ab:97:ba:39:e3:40
Serial Number (int): 304602636243722431039133983422380030681920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:a4:34:0a:1a:3a:b1:ee:10:5b:01:05:a3:65:c4:18:82:1e:85:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:cb:4d:d8:8d:ac:6e:d2:1c:af:b1:e6:72:40:ec:29:d7:ff:e0:3f
Fingerprint (sha256): 09:ef:bd:da:fc:ac:12:d0:18:0b:f3:28:9d:80:b3:55:39:dc:c3:1f:9e:ab:ce:c4:53:90:0a:69:e4:81:17:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate steinstrasse.isp-vhost04.domservice.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for steinstrasse.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alt.haus-steinstrasse.de
cafe-yellow.de
dachtheater-leipzig.de
galerie.kijuku-leipzig.de
haus-steinstrasse.de
hssalt.steinstrasse.isp-vhost04.domservice.de
kijuku-leipzig.de
stadt-in-der-stadt.de
steinstrasse.isp-vhost04.domservice.de
www.cafe-yellow.de
www.dachtheater-leipzig.de
www.haus-steinstrasse.de
www.kijuku-leipzig.de
www.stadt-in-der-stadt.de
www.steinstrasse.isp-vhost04.domservice.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for steinstrasse.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304602636243722431039133983422380030681920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 01:19:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 01:19:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659811804285385840187638455647745534138762464398634250337931300363855280799784439790867595649723735879445739028382125010795182631024996709655043315881441497934280667049987056264303032171619519782555518067955934555439601380598783054971951538609691277707786016367769884769290857242484507989609060150375878666522688619402403783436058308923260511808343663168059094273063662627824313732211820950886365743507737872756364846628367837476891962069705602459585599040689026104618168113985988873396633746215192732411331207628253223020185533528098006452260586870977437052472005657284585147987084353482334395679915721943397903435555396515867272923363354280739674183922433752984790573788082492276154030504515656503052047415364806617227880880599794738858954679374839351813094393562207351164996396339006946244673476150722555132311755811971533023095658491402453478337037279882148135306914548558118112460583738716123444657780194856167970195150270493884628622487492550019957536860353873351507752815215321633964552705089548768688155397765744314611912516672793474043566014652510556454536135533347196262578032265675864967351571415008017434967049323138998459173920627922594911374700608942783739433113897747970886497874528519693538131498806959871396131455261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41a4340a1a3ab1ee105b0105a365c418821e8551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.haus-steinstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe-yellow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachtheater-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galerie.kijuku-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haus-steinstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hssalt.steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kijuku-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-in-der-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafe-yellow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dachtheater-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haus-steinstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kijuku-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadt-in-der-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170dbfd320100000403004730450220744820fd0869ca6e1d7e14455ac14a06955b8478045ca9c8b4206748d2255437022100d05353f2f9d24c6b23d852657653598ad01794192722450079a97dc56c5c138700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170dbfd325c0000040300483046022100ed4b1ab30b69c6c9b0d1e75840a91fb551b845b98a317f87a24f5e14c7685fd9022100c1a2ca5d18f0378e341814d18fb8dcb95915e5e2b146c7dca7681a54745adf96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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