goettinger-marketingtag.pfh.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:29:3b:cb:19:ac:04:36:30:67:a1:bb:b9:af:db:12:cb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goettinger-marketingtag.pfh.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:29:3b:cb:19:ac:04:36:30:67:a1:bb:b9:af:db:12:cb
Serial Number (int): 283850302824767603751512517544879828177611
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:35:66:f2:9f:6c:4b:5f:d2:9a:bd:02:f7:26:58:a6:3f:f6:12:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:e5:e7:eb:97:8a:c3:a1:c3:3a:87:63:da:55:d7:ac:5d:17:22:3e
Fingerprint (sha256): 0b:81:f7:64:88:26:10:3b:ad:a2:3c:df:79:8d:0c:f9:4c:00:84:18:88:f1:dd:64:03:c0:e8:8d:18:7b:30:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goettinger-marketingtag.pfh.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goettinger-marketingtag.pfh.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goettinger-marketingtag.pfh.de
www.goettinger-marketingtag.pfh.de

Other certificates including the domain name pfh.de

(limited to 100 certificates)
webmailer.pfh.de
cloud.pfh.de
hilfe.pfh.de
pfh-goes.pfh.de
goettinger-marketingtag.pfh.de
inside.pfh.de
inside.pfh.de
www.entrepreneurship.pfh.de
my.pfh.de
goettinger-marketingtag.pfh.de
pfh.de
www.pfh.de
learn.domusacademy.com
cloud.pfh.de
net.pfh.de
admintools.pfh.de
cloud.pfh.de
elearning.pfh.de
admintools.pfh.de
learn.domusacademy.com
www.pfh.de
pfh-goes.pfh.de
rundgang.pfh.de
rundgang.pfh.de
admintools.pfh.de
cloud.pfh.de
my.pfh.de
www.entrepreneurship.pfh.de
rundgang.pfh.de
hilfe.pfh.de
www.pfh.de
goettinger-marketingtag.pfh.de
cloud.pfh.de
elearning.pfh.de
my.pfh.de
my.pfh.de
webmailer.pfh.de
www.pfh.de
image.community.bundabergrum.com.au
www.pfh.de
webmailer.pfh.de
pfh-goes.pfh.de
inside.pfh.de
elearning.pfh.de
webmailer.pfh.de
pfh-goes.pfh.de
cloud.pfh.de
goettinger-marketingtag.pfh.de
pfh-goes.pfh.de
hilfe-update.pfh.de
www.pfh.de
pfh-goes.pfh.de
pfh.de
rundgang.pfh.de
hilfe.pfh.de
admintools.pfh.de
webmailer.pfh.de
www.entrepreneurship.pfh.de
pfh-goes.pfh.de
my.pfh.de
*.pfh.de
pfh-goes.pfh.de
inside.pfh.de
net.pfh.de
hilfe.pfh.de
goettinger-marketingtag.pfh.de
net.pfh.de
san-6-s50.tlsprovisioning.exacttarget.com
cloud.pfh.de
inside.pfh.de
image.community.bundabergrum.com.au
inside.pfh.de
webmailer.pfh.de
net.pfh.de
inside.pfh.de
www.pfh.de
webmailer.pfh.de
goettinger-marketingtag.pfh.de
admintools.pfh.de
my.pfh.de
image.community.bundabergrum.com.au
my.pfh.de
rundgang.pfh.de
san-6-s50.tlsprovisioning.exacttarget.com
www.pfh.de
rundgang.pfh.de
inside.pfh.de
rundgang.pfh.de
goettinger-marketingtag.pfh.de
net.pfh.de
goettinger-marketingtag.pfh.de
cloud.pfh.de
admintools.pfh.de
www.pfh.de
www.pfh.de
pfh-goes.pfh.de
learn.domusacademy.com
image.community.bundabergrum.com.au
*.pfh.de
my.pfh.de

Certificate

The complete raw certificate details for goettinger-marketingtag.pfh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq94QDgjY+VsNmCOoXWn
joKXqSOljyFGFucu/sg2LSMxDhOEgYAqGCOqoEAPLWn/u/dGFkv6Hth1RGjxDN18
vnV7dlatzgsrGp+/deyZt6I+2UdgSLy3ikYPkVJo3ZeP3edeckQhwywkgdkH9Tsk
HGL8Fvvh7SQETd2r0NvEVexHD2y1s/ovfPRfhX+n9ufJPqAh6QRRn+bFbgZxe73A
hzM7oOxhSzY5GVmiJRWm9R7MWs5ur8/P7QhQbJNqDkPeMBP6lrXBPQAhA4R0maia
YYDpNpH+Y3l6uwPiK5RVJOnIN8Fn+IsDYYt3DmoyEMZxGsF+a8Pbz8jILqfYBr6k
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283850302824767603751512517544879828177611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 23:12:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 23:12:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goettinger-marketingtag.pfh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26091618171744458175410620771312136269513476911646021295031072016194528279348483531820620729970072436401619820452191319016846954947286770248065979542763987199848718131765582902568429145978627206211521259477414192195304107794988750667282331080780190085735536899810652221955241314865595160365668326776599541787866664272349788691773317440687567632153634839328849574976743477640648279757859561150628485613739533949593247898350202021496824733726610260629317541531830181627619561449557396967302996857333066803401292749711637269883779992170303967120070111864385932360073750488161011349141880279963396388277884114967610696847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f93566f29f6c4b5fd29abd02f72658a63ff61214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goettinger-marketingtag.pfh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goettinger-marketingtag.pfh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168f3a587b50000040300473045022100c59ebb1471520b7009bbd6d1228d9ce4eddd6a2e87fef1750f1b7b6baf1641c702204773eeec0efd0b8cf8ac3ea571aa13148275aac4faf43038d84f4de0c610a8c100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168f3a587b60000040300483046022100b68d9971072ed782eeeb4bf681f7334c722c8dee11bc821639e291550bd8d968022100b2f8f1a1cd44b840adfe45666ddeb03dead9178cdc8208c62d29dea513b0d919
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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