kuecheaktiv.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:e5:3b:29:e2:3d:6b:85:8d:e2:29:fa:02:47:cc:32:f6 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kuecheaktiv.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:e5:3b:29:e2:3d:6b:85:8d:e2:29:fa:02:47:cc:32:f6
Serial Number (int): 292266971224217967990596526752707067523830
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:05:21:6a:4f:f5:bc:b0:19:1f:53:bd:4e:91:d9:bb:2f:a1:1b:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:b9:fa:dc:96:09:9c:d7:04:95:d1:4d:2e:6d:b5:ae:22:64:2a:28
Fingerprint (sha256): 0c:1e:81:18:b8:d1:d8:cb:fc:62:51:c2:36:72:77:6c:2c:60:62:f9:4a:dc:f6:81:94:18:d9:92:bb:99:30:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kuecheaktiv.isp-vhost04.domservice.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kuecheaktiv.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kuecheaktiv-kreativ.de
kuecheaktiv-sparschweinmarkt.de
kuecheaktiv.de
kuecheaktiv.isp-vhost04.domservice.de
werrmanns-kuecheaktiv.de
www.kuecheaktiv-kreativ.de
www.kuecheaktiv-sparschweinmarkt.de
www.kuecheaktiv.de
www.werrmanns-kuecheaktiv.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for kuecheaktiv.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292266971224217967990596526752707067523830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 01:10:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 01:10:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kuecheaktiv.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907327058157694351878930862779844643747928664757391255333337163224118709689689063354158763964599312161354766365667595663541283428026877490093674408093108374714892346136786880908247658295877503018266523551295637959103064693505567543283965280498984296665914361688604847615571419080712552230432170444467790358294112624292018089296494190650158566191419875849851090291710705844801483430774003836010396236585213722247871488330781855605961435067222055119278473790892228046958376757863464634365004983786408216713548765576819865458251667870387706057888025295503271783812470239276377763541798593180366706568196698233173564020724117310732297406308793382451405318862414895275619799593601715799056751101809607254525758509850580039381835916712690167165119558636911253562058360814977032933978819387324864052979593865039026636139235367345508619420542446567271604489959168564720129266781761854548776128772466934044009390900266534143069493635111179580337998638856852831512563870653612579968676581861267358430936904308809680492601145218070903622708526492095992829026578751777412833951716052174647022940800429944644078958391725720705450638016311189741116236892001624822878873820721179248807900397024681357621830697983462779108447696586303561119770443293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e805216a4ff5bcb0191f53bd4e91d9bb2fa11b66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuecheaktiv-kreativ.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuecheaktiv-sparschweinmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuecheaktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuecheaktiv.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werrmanns-kuecheaktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuecheaktiv-kreativ.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuecheaktiv-sparschweinmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuecheaktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werrmanns-kuecheaktiv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a87598df0000040300483046022100acc082e597087cbf615fe3bd2186a9068347e0aebf5f4d3188eebad2bcac6134022100b0c0f03788cf30bd75f307a532e12e0e5d7142fadc64ccfb03566b3478c4cb5d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a87598fb000004030047304502203ed043d0847a63a2dda77522f34b5df04923b6f99a0cc4beaece49bf2790fbae022100fe7caa35d756cb5646ffb6c862b2d882844cc1ab23b1dfa210f132541a2e8760
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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