svo-intranet.de

Issued by R3

About this certificate

This digital certificate with serial number 03:49:04:a2:6c:04:fe:fe:69:65:e6:17:22:b0:61:c7:49:53 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=svo-intranet.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:04:a2:6c:04:fe:fe:69:65:e6:17:22:b0:61:c7:49:53
Serial Number (int): 286183630835479536680083930530158855276883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:4e:e6:50:93:19:cb:24:2d:de:28:18:24:95:3e:dd:20:d0:5f:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:b5:2b:51:bb:75:c1:49:89:82:d8:6b:61:fe:34:0a:b3:2a:d2:d5
Fingerprint (sha256): 0a:42:0b:e5:ed:2f:f1:8b:70:80:46:65:bf:01:2c:88:09:00:eb:a8:44:99:d2:a1:e2:d5:e2:b1:1c:84:f7:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate svo-intranet.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for svo-intranet.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

svo-intranet.de

Other certificates including the domain name svo-intranet.de

(limited to 100 certificates)
www.dmhw.teamwb.de
sni236121.cloudflaressl.com
test.antimarder.com
sni172056.cloudflaressl.com
ferocs.lima-city.de
magento.beautyled.com
sportclubfalkesaerbeck.4lima.de
ca.antimarder.com
m.immo-look.eu
*.cgc-maeder.at
*.gutscheinscode.de
sni172056.cloudflaressl.com
www.hhfoto.lima-city.de
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
sni236121.cloudflaressl.com
sni172056.cloudflaressl.com
www.mcafee-faq.weeklydealz.de
*.webworldschneider.com
sni172056.cloudflaressl.com
svo-intranet.de
members.tjark.pro
*.joshi.gmbh
ww1.tjark.pro
www.mahya.alextino.de
kovro-piano.lima-city.de
*.petervanham.com
*.accra-apartments.com
sni172056.cloudflaressl.com
app.lerchenau.wachbuch.info
www.akticheck.de
sni172056.cloudflaressl.com
discord.boslev-online.de
mail.moinalex.de
*.broton-music.de
sni172056.cloudflaressl.com
*.lernbluete.at
hc.zechmeister.co.at
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
2015.kevinkoziol.com
sni236121.cloudflaressl.com
sni236121.cloudflaressl.com
affolter.4lima.de
sni172056.cloudflaressl.com
alaaddin1150.lima-city.de
*.feindenken.eu
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
sni172056.cloudflaressl.com
www.huetten.club
sni236121.cloudflaressl.com
testing.mokis.de
webmail.svo-intranet.de
sni.cloudflaressl.com
www.juttakeller.reisen-heilt.de
forum.woeschka.com
sni172056.cloudflaressl.com
*.diekleinewilde.de
*.datefiction.de
www.nc.beenaural.de
www.piwiki-mjmair.2ix.at
www.weltmeister.hundeschule-tutzing.com
sni172056.cloudflaressl.com
www.classic-components.lima-city.de
*.lebendige-donau.eu
aor-002.lima-city.de
sni172056.cloudflaressl.com
www.rueselmase.lima-city.de
sni172056.cloudflaressl.com
juare.lima-city.de
*.mindandheart-praxis.de
*.louvre-werbetechnik.de
sni172056.cloudflaressl.com
*.vdbenken.de
www.orlat.lima-city.de
sni172056.cloudflaressl.com
sni236121.cloudflaressl.com
*.coptrix.at
themisteramir.lima-city.de
luwu.ch
*.lars-vivendi.com
dize.lima-city.de
sni172056.cloudflaressl.com
www.skipper9904.lima-city.de
imap.kevinkoziol.de
sni172056.cloudflaressl.com
sni236121.cloudflaressl.com
sni236121.cloudflaressl.com
app.no-key.info
sni236121.cloudflaressl.com
sni172056.cloudflaressl.com
curteabrancovea.enjoi-sailing.com
ovpn.blackdiamonds.eu.org
sni172056.cloudflaressl.com
remote.svo-intranet.de
sni236121.cloudflaressl.com
mysql.mehrcoffein.de

Certificate

The complete raw certificate details for svo-intranet.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286183630835479536680083930530158855276883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 15:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 15:57:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'svo-intranet.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739157818185373868310692965386610870840889930406302677249733044884528527774701726604696822230870215758566681537121205371338790354318858951347586833387734832686060637632810847563916162213504729695758815220707864201086662077940837053959893976684113602650105963437375323651637821300061691070033389402846700967753419020986984017747835923994627144130684586386538440210027319679523084657525235853296487363977288997937577771461653993710236137453154081916024074402611408983766676079700216876286750447268095850518546124038162556998405336389375712991031751638421225726222376773598073583102994664820438941064065217939136865400526631940300467650543823469937897125757491509636911536525519992302665103801502637382615384941691137514432421139351684917360595633456782462274394360847945252633844497034804698156340196495006149809087190553165247163157436917804917474957153207888053080951496696593162248362378465392395709201919271383761669779828000554675858445122991148835833170997726504111176626440570789018902302778778731034841516447391754118996827316848268261679873984354755903713180463439537919303559397458468826937284678891019749782464563921767219735167383146094013213616789674934263492364050039085772134071025349111224121696182522672633073408456859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca4ee6509319cb242dde281824953edd20d05f59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svo-intranet.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185d54379810000040300473045022100ceae07295d48399121379c3ce4aaba2681022acc17b9b3df78cea3fb15fee9f202200dacd878632ecb4321dd536dbc2f1d2a441039ef8c49aa35e24a9e875ef39835007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185d54379ae000004030046304402203e4daefcf073d5b9b9befe03fa6f613bdd0f4bf6bc23db82cfe4abd8be830613022032509c7ae47d2bf4811754f44bcb1a7a4d7bf933b33375bdc54fddc272b8cfeb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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