seafile.digital-eastside.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:41:3f:cb:16:42:38:4a:06:4d:af:ab:a5:13:51:55:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=seafile.digital-eastside.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:41:3f:cb:16:42:38:4a:06:4d:af:ab:a5:13:51:55:07
Serial Number (int): 317570179390756356813876270374529631606023
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:f4:ed:e9:c9:e0:1c:f3:49:e3:47:ea:8e:d9:22:9d:77:66:19:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:4e:d5:5f:fa:3d:b1:37:96:5d:58:db:f9:49:5f:a2:1e:98:bb:8b
Fingerprint (sha256): 0d:0b:95:35:3c:5b:a6:f6:d2:41:aa:0a:ce:30:a8:c7:8b:00:83:66:d7:91:30:f2:75:14:7d:ee:11:00:eb:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate seafile.digital-eastside.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seafile.digital-eastside.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seafile.digital-eastside.de

Other certificates including the domain name digital-eastside.de

(limited to 100 certificates)
seafile.nasec.de
digital-eastside.de
seafile.nasec.de
seafile.digital-eastside.de
outbox24.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
seafile.digital-eastside.de
www.digital-eastside.de
secure.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.digital-eastside.de
digital-eastside.de
buerger-fuer-schmoelln.de
digital-eastside.de
outbox24.de
outbox24.de
www.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
mail.digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
outbox24.de
digital-eastside.de
seafile.nasec.de
outbox24.de
support.unistor.de
seafile.nasec.de
icinga.digital-eastside.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
outbox24.de
digital-eastside.de
outbox24.de
seafile.digital-eastside.de
seafile.digital-eastside.de
seafile.nasec.de
digital-eastside.de
digital-eastside.de
mon.digital-eastside.de
digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
mail.digital-eastside.de
support.unistor.de
outbox24.de
www.digital-eastside.de
outbox24.de
seafile.nasec.de
support.unistor.de
seafile.nasec.de
seafile.nasec.de
digital-eastside.de
seafile.digital-eastside.de

Certificate

The complete raw certificate details for seafile.digital-eastside.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgISA6VBP8sWQjhKBk2vq6UTUVUHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDEwMzAwNDlaFw0y
MDAxMzAwMzAwNDlaMCYxJDAiBgNVBAMTG3NlYWZpbGUuZGlnaXRhbC1lYXN0c2lk
ZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOgrMhMcvxTUmLhr
lU8zRNFWuR7bDGdZAGh/532iLC/WVQCaWFR7v3tgR7mdNhVleQINaGztxA91dSmc
k/4XyCNoxAelXmgmTMDo0RImRWImCXUYeWg3Q4l6H9xGmSFeTVEvXiSd9zzabdDv
TNt0tTam9/Zmn67RlqbybQHqCz6hlyfrunPkx0z0Myqx92Y7FocDyqMyyfd3RfWG
errdo2p12qshD1WkSNW7g1y57N7vpvvs+Xs/w9bkcL5dWFueKkFZkNlXGQ/+lpJg
SuJZQ4FNbWfKB7L6lNcUAUj86k1NeR9Q6qwC6KG6QLQqiHBjqiiBoyGt3D8H2ZPg
mFLRuSHvrOfzbgE5MrJNmPWRT7/NQod9TeZbPhInzxfQXjPxZFUVyEW0zb7jcqg2
C3iARYhsukiVpPpJcWgpAD23e9UdWykZNU8cVMa/4mV1wVDPz2HU5/z5wUIuXLEm
GKX5cgjEi3hUe+qpRjzQc9io4DUHgMwGB3oj5M7NbkKQncRCUSjznUUeb7iL7d91
N9JpZFqJX4WYApcyQ3p+iaZTQw0TWXZ9VuHknR0gwjJaSjPH0eFs9rFXHB+18fV+
L8us1omMqIGbaIZoHbKGfFkTp10JloxiTShgN6kCXg0kfHp/ZOJ1Eovv8pNcQCPF
4tU4ShZuIItTN8JGJBv7KDh088szAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKH07enJ4BzzSeNH6o7ZIp13ZhkcMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbc2Vh
ZmlsZS5kaWdpdGFsLWVhc3RzaWRlLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5
iiUgZ2va+nDnsklTLe+LkF4AAAFuJR95HwAABAMARzBFAiEAmvxyuFlwqQYLdWgi
gOaOaKETO7DhGDz+aTLTAs+WRg8CIHlSgLCFZ10TkMGbpUsvuac7AwzfuNUjytpv
ZL9HHTZzAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFuJR95
pQAABAMARzBFAiEA6IRc6wsOr4tRk9Jeu/3aIFoM5tmYNkKDvKPQb39eoCYCICUS
O9yWUJtOH3vnGLpAoeB+qoGnV+yjAbAH8gI3/DA5MA0GCSqGSIb3DQEBCwUAA4IB
AQCPPLX+ojp6rihtyT96ZLO7yU79f5qgVhYQv7GSBaFyF8bCSfMHBOmqZkcBNsGX
VVBe1fgQ09SiKN7Pz+SjWJyT+cg7PUVvAl3teIi6xcZD4QI+46iru0mnOMAwOKI+
ITtPKEwS+Vf+N1fhipBFfOF+X3bu4aAfslfkmO8GESWWjOy+grdYfWIjG4MpvC8P
nklYQspkXZ28M9I+bGd+BVF/hTlq3YYOGxUcz9ibnJoQY9F+x+9zsFmyqzbz3kGP
kPtsGcu3YiDsUwpzuFJUgTKpfxoYzoonAJ/HlmvhCtqQ1/QC+dzJg6fLY77MnndY
Ig6GIM+4JEgSqZoYlksEuh5G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317570179390756356813876270374529631606023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 03:00:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 03:00:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seafile.digital-eastside.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947165793664088132454163383827534518431324984490586052008885041901418350953157732452883150124408235194477816744590275630208643749792929382709237279166551939576714779495737443471784797567727103223219709639162035304288329829953350118493118096467093376999064377579364672557387502323868674900742173225724614646422913564037672862404176563621274836724337309204320969011047368670590120710354874953398627957093046586851746386769577813081503966703377876459951086789243636323932000359969032667931233491843134850930287436017212092973167106172255187560963345047268855299212858918435584484806520036872577171222566913968694158214364197150223015075175568838249015313026431230809946823499240039005831757522561790087143734192912604290123683164274411442203336917242925175091949566126117133038626076458572284547825294527992784848075202095263338843868975514393307625930333630540146776854705817759477815216745929247530895174767479391386825595970150046579696232717663880383361960302099364157254351075423068869019455271931608954158537874826958390087118412229451434427377647926290133605359356073044414451796372517855082580288933594986245083691728123487197569787806750466552268134762321442200492067937714667537459667351733929421318309005574651577432580279091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1f4ede9c9e01cf349e347ea8ed9229d7766191c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafile.digital-eastside.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e251f791f00000403004730450221009afc72b85970a9060b75682280e68e68a1133bb0e1183cfe6932d302cf96460f0220795280b085675d1390c19ba54b2fb9a73b030cdfb8d523cada6f64bf471d3673007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e251f79a50000040300473045022100e8845ceb0b0eaf8b5193d25ebbfdda205a0ce6d998364283bca3d06f7f5ea026022025123bdc96509b4e1f7be718ba40a1e07eaa81a757eca301b007f20237fc3039
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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