oltoko.de

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:e1:b9:20:c4:78:be:8b:36:82:a4:26:5a:c2:a1:5b:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oltoko.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:e1:b9:20:c4:78:be:8b:36:82:a4:26:5a:c2:a1:5b:df
Serial Number (int): 374610641151605940548374733817919205104607
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d8:e8:71:2a:54:6f:aa:7e:e7:71:b7:4d:f6:b5:6c:5d:e5:42:05:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:98:38:67:2f:bf:4b:51:85:23:cb:69:00:37:ff:98:7f:59:bf:52
Fingerprint (sha256): 0d:1e:c3:9e:f5:6f:52:05:03:52:44:ba:22:c6:0d:79:a1:15:20:bf:c0:b1:85:ae:40:1a:39:83:27:20:5a:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oltoko.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oltoko.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oltoko.de

Other certificates including the domain name oltoko.de

(limited to 100 certificates)
www.oltoko.de
oltoko.de
www.oltoko.de
www.oltoko.de
social.oltoko.de
oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de
social.oltoko.de
www.oltoko.de
social.oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de
oltoko.de
www.oltoko.de
www.oltoko.de
social.oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de
www.oltoko.de

Certificate

The complete raw certificate details for oltoko.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374610641151605940548374733817919205104607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 22:41:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 22:41:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oltoko.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643318886195272170659772547751047781096962884607811879389851952541323532349320178077377575361706169601470690265695410192468916999040752354242530541961498094243819205978986214768338679018375234859958515070461074614013485194079249126966361417233894545120803736242043358034333625693492463959354548286569482056734644658237752931843327932081186937994663205995103007555006996487040231073111208928028475493452459628940922160396000740926187064287987699842302318895449982462741725570035973138024226225285966841942869018494717024740858173507634586505822047063828220406241180315636017754567505034160131790518421196147830154996023900644697336851952457984151757592937673487260050654061555462502774987093068598175419160379618670391062804219383765739460352225508306159866046221878329535769049653266886851961181269802653713654868621449757805700910700724723159325750979868503912866983932118134760557244140359178184711123979714177872115927741183662422350055343561436732434820441459612693504942382475015460970194632218784718872709268721167438921490333919768645023846352162630506766998459660862784609810467534121619744147798878151803830516324057720085630422951911743049866990046912817363669667108897661759585588062905318590777613873247311803872993082847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8e8712a546faa7ee771b74df6b56c5de5420510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oltoko.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ec2022ba0000040300483046022100a671f4c1e2609c4f7921ab8c619d273292961ae26cb8ad7de384123840d9c1e702210099838e282fa36275556aa10b24f6ce6877d54e68c210d1b1665d1bf5fe8de1f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189ec2022d60000040300473045022021fab7065544468b953c36c5ba1f91b3c93c4dc044ffc41173968fb3c62dd047022100fd41e87a8af541c5889688a5fe93a29f1d31fc9bb306343495fe961c56e68bb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00334b97ca1a4eca260b4c7ad09fde6eb10ca0ddc148f565b081c18a491543430e7d94989dd4889a691e3b7059b3b496076b01149abfed8467373ad6d7d63e6fbbb90bd64e3a9de4c3db43abfce8fa56d9cf045a1be104bcf63cd96f959b685d3498819237eae5ea6be4c5ad946b7432120443a2004f9d72408d3667ecf5881c8f807f3fdfc568f70a0fdd3d6f7cdbcc20d05c9cb699f160148756882732c9652070191040f30d4c93a2bf31c7f2270aeec7360b5bb7838e4c75788b09c2fd20faa567e3980249e27f7b7772f6909a33cdc2c165078a33e4b0af6358bae923cf9ca7ab466024b86e0f7f3ac942e0288fb98aa6b774c19a6b4644fa2005520f1957