tee-kaffee-shop.com.datpasst.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:f8:2b:26:4d:b8:9f:08:f3:3e:8d:61:60:30:95:8c:9d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tee-kaffee-shop.com.datpasst.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:f8:2b:26:4d:b8:9f:08:f3:3e:8d:61:60:30:95:8c:9d
Serial Number (int): 348438733948728895212740668727109543627933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:6a:f7:b2:46:88:97:72:ec:cf:6b:c6:f8:94:be:52:93:36:99:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:f9:99:99:ab:5c:8b:b9:7b:87:e2:3e:95:e1:17:d7:9d:35:c5:53
Fingerprint (sha256): 0b:6c:b6:92:ed:94:8d:70:e1:fa:8c:0c:c9:8f:ea:61:c3:e2:aa:f6:02:fe:3a:c7:91:d0:7b:10:4d:1f:09:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tee-kaffee-shop.com.datpasst.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tee-kaffee-shop.com.datpasst.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tee-kaffee-shop.com.datpasst.de
tee-kaffee-shop.com1.datpasst.de
www.tee-kaffee-shop.com1.datpasst.de

Other certificates including the domain name datpasst.de

(limited to 100 certificates)
datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
tee-kaffee-shop.com.datpasst.de
datpasst.de
fullwood.de.datpasst.de
api.analysa24.de.datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
version.snailsites.com
stage.datpasst.de
gruebel-duebel.de.datpasst.de
sanetta.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
version.snailsites.com
chat.datpasst.de
datpasst.de
ccontor.de.datpasst.de
sanetta.de.datpasst.de
chat.datpasst.de
gruebel-duebel.de.datpasst.de
datpasst.de
datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
version.snailsites.com
adfab.de.datpasst.de
ccontor.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
app.analysa24.de
tee-kaffee-shop.com.datpasst.de
gruebel-duebel.de.datpasst.de
fullwood.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
jwd-paderborn-de.datpasst.de
gruebel-duebel.de.datpasst.de
stage.datpasst.de
datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
stage.datpasst.de
chat.datpasst.de
jwd-paderborn-de.datpasst.de
tee-kaffee-shop.com.datpasst.de
version.snailsites.com
app.analysa24.de
adfab.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
tee-kaffee-shop.com.datpasst.de
tee-kaffee-shop.com.datpasst.de
jwd-paderborn-de.datpasst.de
*.datpasst.de
datpasst.de

Certificate

The complete raw certificate details for tee-kaffee-shop.com.datpasst.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348438733948728895212740668727109543627933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 06:29:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 06:29:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tee-kaffee-shop.com.datpasst.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805134890646572359131978461438053661512819376548993293909163154777062214360735775874809344432149716217452957844946034806003019484482851819375021014328141913292434412227702449169390910223429490231741847898325699225484483499816301393412752049170611786333511134217084515195890162860367910762327926406442742487371935264464835806339942409173694193699098484136370719330356592163434129790543646022841153817947123898315371630923421820143303969765047745146844343878100288779158300666442982087764998370885684113779373377831082513735042789615200984612839767229186313160892810476951838283076300896154489784138769126865292973746520262430045058461730082386122118740584646041256335043934230519499557419176027375824789922121683896160316878874675346492858829658398216105451693405878137509029639114310433845096133984075614375967812116080314753685319218389981287180226180539058961262725112955061786083393465190315067630918651901032012101070879812424352795082193522510868665043141757526587362984971099271781337499535819167381680692996905875216336802247402113589523779159534144173687965044470858221549302649125647150417737874781167529333629440244282597707925725043025902743092832513654370153279139558897609377720724241421758825252558726977473807850498337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							666af7b246889772eccf6bc6f894be529336994e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tee-kaffee-shop.com.datpasst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tee-kaffee-shop.com1.datpasst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tee-kaffee-shop.com1.datpasst.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001668b3a5c710000040300483046022100fa34a33ab4249fdf0d210618fc6d4bbe732655cf685ba9f050411f6f17c69292022100ecea2e5b24aed4a722a414572d0e812afc354b69833a6711949924a065a81c36007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668b3a5c81000004030047304502207809ff8e1e1555095205bf94ff8a7fd3c391ddba51f262ea21d86f4591091300022100aa084c52554380d5ccdbad18eb822a3d99fd2f0a9695e676464922e37891e9e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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