apfifoges.stugen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:d0:a8:d9:43:80:36:0f:b7:a5:81:4d:97:84:eb:d7:ba was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apfifoges.stugen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:d0:a8:d9:43:80:36:0f:b7:a5:81:4d:97:84:eb:d7:ba
Serial Number (int): 280329744111558702101305648189494983907258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:6b:59:c5:89:df:fe:91:2f:e4:3e:ae:9a:e6:0d:2c:eb:81:5e:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:65:d6:db:32:18:11:9d:76:50:eb:23:e8:e3:c4:39:f8:24:7b:dc
Fingerprint (sha256): 0c:de:bd:b3:2c:4f:b5:59:a2:29:f8:94:68:93:7e:ab:7f:2d:ac:6a:43:96:9f:ae:f4:42:6d:5f:5d:ed:a1:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate apfifoges.stugen.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apfifoges.stugen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apfifoges.465.kif.rocks
apfifoges.kif.rocks
apfifoges.stugen.de

Other certificates including the domain name stugen.de

(limited to 100 certificates)
politik.stugen.de
dm.stugen.de
riot.stugen.de
fb3.stugen.de
riot.stugen.de
politik.stugen.de
pt.stugen.de
pt.stugen.de
pt.stugen.de
onoc.eu
q-service.admin.stugen.de
q.inf.stugen.de
apfifoges.stugen.de
politik.stugen.de
postfixadmin.stugen.de
testdomain.stugen.de
wing.stugen.uni-bremen.de
politik.stugen.de
politik.stugen.de
pt.stugen.de
dm.stugen.de
apfifoges.stugen.de
esc.stugen.de
git.stugen.de
piwik.admin.stugen.de
orga.stugen.de
apfifoges.stugen.de
stugen.uni-bremen.de
q-web.admin.stugen.de
politik.stugen.de
q-mail.admin.stugen.de
onoc.eu
orga.stugen.de
orga.stugen.de
dm.stugen.de
testdomain.stugen.de
apfifoges.stugen.de
stugen.uni-bremen.de
orga.stugen.de
pt.stugen.de
winf.stugen.de
onoc.eu
politik.stugen.de
matrix.stugen.de
stugen.de
admin.stugen.de
apfifoges.stugen.de
q-service.admin.stugen.de
apfifoges.stugen.de
pt.stugen.de
politik.stugen.de
publichealth.stugen.de
stuga.math.uni-bremen.de
stugen.de
inf.stugen.de
publichealth.stugen.de
matrix.stugen.de
stugen.de
publichealth.stugen.de
q-mail.admin.stugen.de
esc.stugen.de
q.inf.stugen.de
apfifoges.stugen.de
onoc.eu
stuga.math.uni-bremen.de
apfifoges.stugen.de
inf.stugen.de
onoc.eu
icinga.admin.stugen.de
fb3.stugen.de
winf.stugen.de
stugen.uni-bremen.de
q-mail.admin.stugen.de
q-mail.admin.stugen.de
matrix.stugen.de
politik.stugen.de
sharelatex.stugen.de
q-mail.admin.stugen.de
publichealth.stugen.de
wiki.stugen.de
onoc.eu
stugen.uni-bremen.de
dm.stugen.de
q-mail.admin.stugen.de
orga.stugen.de
q.informatik.uni-bremen.de
testdomain.stugen.de
riot.stugen.de
apfifoges.stugen.de
wiki.stugen.de
stuga.math.uni-bremen.de
orga.stugen.de
orga.stugen.de
orga.stugen.de
q-web.admin.stugen.de
orga.stugen.de
stugen.de
ges.stugen.de
esc.stugen.de
matrix.stugen.de

Certificate

The complete raw certificate details for apfifoges.stugen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280329744111558702101305648189494983907258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 09:12:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 09:12:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apfifoges.stugen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837776916979963652047581671891024884566884544386811091152843152268536687433922432007418247248440891761610557717838245587622245602770726664413127974693675439507320674013424543813220329171733453478397228955527580096105139061936314307256870431524023394532642056817007729928772222927361950220758935567000474548313546551894133033864052053208660659199488122023109200278133031017840968529307996364285034469732651109457825145376566973603852503387985147312582900786314316194789920068163990051420020791099313081915785963718512362071752915976751464735751941306808017117708105066912213448148592519811424600441471173837103085588338045276718149120173649847403127727437732188713753975242820250197289952777199479304580421534707455691228205509974640537199818677834979613363747909399270609706115514670993627224142649064608334863106423051281049664835285585299775983927305896608704287658396849226107316790256868405245507042067905514654148044984418924865061051198747605243203264174302118393100711668751225410170724110588766452554061857680204815113416102378956277479073030277563156250330704115798749589815688235773063593455511918760969384295476745027563404672326420557950042985879835058746904357232496065906266970619173230812961324999623505097785742558007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							946b59c589dffe912fe43eae9ae60d2ceb815e48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apfifoges.465.kif.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apfifoges.kif.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apfifoges.stugen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169053de0c0000004030047304502204d2143a5d14fdc09dbc0fef04ae5a851e0170f336cd09e70026ce6947d8c4e2f022100ea181cf15ec2ec5b32c527e77ad9cdfc974e876819162fd1e203e4a77d4c6bff00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169053de1090000040300473045022100e50884bbc61b4936d8835824b939d7d783d00a48a05c2eccaa5c22320e832a0f02204e101c05e9f21a5945f632a3c12df4e793f651f9f1b763b7a65c66c96e30e7c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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