immoflowhaus.de

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:0d:d5:f0:52:38:2f:b0:7c:2c:d7:9c:b2:9e:f3:71:db was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=immoflowhaus.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:0d:d5:f0:52:38:2f:b0:7c:2c:d7:9c:b2:9e:f3:71:db
Serial Number (int): 271223437233456430221003411725797932888539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:76:0b:c1:15:57:2d:51:15:9f:44:c7:53:17:8f:2e:4c:92:bb:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:a5:a4:1d:cc:72:15:28:0c:ab:15:6a:22:af:c7:90:c2:52:64:59
Fingerprint (sha256): 0c:19:53:c6:29:dd:81:90:36:7f:7c:1a:4c:e5:be:1f:3e:e3:87:b8:70:72:fb:47:7e:c4:44:48:69:84:ca:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate immoflowhaus.de

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immoflowhaus.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5minutesapps.com
beertrend.com
bikemagazine.in
calibites.com.clinicalphysiology.com
cannabiscarrier.com
daisakuikeda.com
dentalcenter.co.in
icagy.com
immoflowhaus.de
livingwithanostomy.com
lto4sale.com
micoly.com
neural-networks.com
nwlandscapeservices.com
regulatoryarbitragefund.com
sjn.co.in.healthyhomecheckover.com
sshaadi.com
tucsonchillers.com
www.rxsugarisswealthy.com.goodhempmilk.com

Other certificates including the domain name immoflowhaus.de

(limited to 100 certificates)
immoflowhaus.de
immoflowhaus.de
immoflowhaus.de
ssl-7x3jc.epik.to
discoverrio.com.iwggw.com.immoflowhaus.de
immoflowhaus.de
suncitywindowwashers.com.immoflowhaus.de

Certificate

The complete raw certificate details for immoflowhaus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykSyowzSrr37Gb0ADb2E
X02vAvlKnDA/GqO3X4id6QvVchMqYZLNxubu442W0M43XnqEuRBmTPIJWJHxiTpq
HEvojN9VXwdzAGiIJPJble2Dlqoqu4RMGdQjqylH1JTB56AED5jTn18Ql22IUoeE
MJ6Dk1Xjb3l1y/PQ5wFDF6J+Ffk8XS3OJxqxzos96ns2PX8HTHJjVBu+CkVUSJvu
eenYm+RUWuRn5hq7wryk+ogM55yYe/vbk+KW8L/E66PmF5UYaubfYQ3ntAZMH2Rs
VlyCEJghd0NWlNgm9oNCZO4w+TRhK9glpFD4m0zDT8aAsmUWkyAAqPj4R1NnqXNh
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271223437233456430221003411725797932888539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 21:27:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 21:27:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immoflowhaus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25534013751125546850315007937998958887823596625072813796642656415164081012740911618513921542693103975481266845015925005817992818892161546531158945123052854340937003771929563273104676150731458186336460096765848478581678003513966095066064805667228680221240619984738474820836261164303314928350231414680002190396941677175199425502974355077281560065370227136510222266904438480622336067814060996444261050324735037056738784219925468774922264612036175162745751211363107053074018835669671572982932099924593123025485408184181306416402208996139216057089223099151219561671198888640048542849714641574535557002918312523999778922761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f760bc115572d51159f44c753178f2e4c92bb9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5minutesapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beertrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikemagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calibites.com.clinicalphysiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabiscarrier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisakuikeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalcenter.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icagy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immoflowhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwithanostomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lto4sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neural-networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwlandscapeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulatoryarbitragefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjn.co.in.healthyhomecheckover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sshaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonchillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxsugarisswealthy.com.goodhempmilk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cbcd689c3000004030048304602210082c154c2b8934c19d7449273acf4e03ce5e9f208330598f2f0ac09d82092cadf022100bdced2a937b420d54fa7d2dff41d69a395fca026f5937c93cf4ba83ad3313e5d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cbcd689b70000040300483046022100dd8bf2125fefb8f9dbc65025315ee1d1724d24ba7dbce6023b84ad8bfb3396cd0221008ca78d6303c3db1778d2a94c054f596841add1462dd785e90fa2c66bc7d55c97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00042d8aa9cd59ca8a8271b0db0c48ed82bb41dc917a933cc3da7c492c79c09956dc2624ff21fdf654611473d86c7e443c78ec8761bd327868b2f7f9e81cfac2689980ce2679303b54ecd24ded1fa86454714b6f63b8aa5382834341940edf4bf84fc0d863d67da0786e4f8cb5a267c73919582ac85247f42f893486fbf7408068c75531fba2ff1736222c471a0d7d66298449f7dd46033e763b5e93bc70b90c5a239bcdab99582b551cf7bae82aee43e7602e2ee5c4204ed5a0a4d45325970e684493c6d2cc89d695598fdcc4566b4cd2a81f15a599e5d7272063acbc0d8f04c4791bb1fbda4b3945561137b1ee9bd4d1598dd7f0200b53f7de6702cf4206424e