engo.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:30:62:40:9e:a9:b3:49:22:19:c2:e6:5a:8d:2c:33:e1 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engo.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:30:62:40:9e:a9:b3:49:22:19:c2:e6:5a:8d:2c:33:e1
Serial Number (int): 267526253499392228677923409823807566525409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:68:fc:a8:9f:a2:8c:e6:1d:6c:c5:83:c5:cd:d8:5b:8d:95:a0:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:6a:7d:d1:fc:f2:66:26:e4:5e:9e:db:9f:2b:cd:bf:67:4c:4d:3a
Fingerprint (sha256): 0c:11:cc:b5:3c:5b:1a:46:84:65:d2:47:aa:07:55:12:4c:ae:3a:3b:e0:97:4e:f8:0c:3d:7b:e9:73:fd:9d:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engo.isp-vhost04.domservice.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engo.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiegenossenschaft-ostthueringen.de
energiegenossenschaftostthueringen.de
eng-o.de
engo.isp-vhost04.domservice.de
www.energiegenossenschaft-ostthueringen.de
www.energiegenossenschaftostthueringen.de
www.eng-o.de
www.engo.isp-vhost04.domservice.de
www.xn--energiegenossenschaft-ostthringen-iqd.de
www.xn--energiegenossenschaftostthringen-xmd.de
xn--energiegenossenschaft-ostthringen-iqd.de
xn--energiegenossenschaftostthringen-xmd.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for engo.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267526253499392228677923409823807566525409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 00:07:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 00:07:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engo.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704241915227105729141732368584348483471926385504657458969671227948181161292415126936389538734381381687434340991194629269735341352892357579968151696774657050386106588074402825180842342866945699325425072514265032296394788339582659369082690929599489746565092008625215698738744062091282708369217939027123488700866463492573445014828911494233553349846782033351303661262891445389209995700280097460926750693196372175505581751750220312675395595829499740446617890191470325550942469242432399222459937934096620320232758218355603561905082480816328649867798982407717756569470728061583572968730795278583300950913700608281005125023830139202777380195722600297710410640344917810150558929836290245901060086782453490669711488226923233332477210780747466311952937970144164019180930899924192576886409987953524455530944874304608059942693948022309661378395003655393706894948627906081761296655896342362997782125514233256915341209411016207369707091110524350732426802920027288360781316518073964889742142751007119470914452585792434326118569831578827591711823757963422990181300395730011167369091539286645839306017234063203709813558975538307048908527663668733441535384134730579615689587296804237375060929073049661921132417863134420034224901800828902585720601719807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7068fca89fa28ce61d6cc583c5cdd85b8d95a004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017133476813000004030046304402201fa940dd535c5e5d6b7fcec9f90083266f65493f3f619884277c83e2ce130c8902207f2537549fa2ff77eeb9798b739c71838e372c81ba2aaa8170ceeb072608ff7b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171334768060000040300473045022100c9fff3ff44bfdf7c8c9cc26d81877952cadbc52fb342e86f05f0080f49f9eac002200fb51c86e0a0d36536ace7e6f53b4fd1e5b43761c6d8e98f0488a86b0718d75c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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