4d53.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:14:1b:ed:fc:a0:20:ef:8a:da:f7:56:d8:0b:01:a3:47:db was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=4d53.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:14:1b:ed:fc:a0:20:ef:8a:da:f7:56:d8:0b:01:a3:47:dbSerial Number (int): 268179629987795093923669754476934119770075
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e5:95:ef:80:df:12:6e:9b:ac:ec:82:d6:cb:c0:1a:d5:5f:9b:24:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 29:a3:48:c3:57:78:1b:6c:9e:28:67:3b:5d:fd:b6:b9:53:7a:5e:a7
Fingerprint (sha256): 0e:b7:a9:07:50:81:fc:95:de:da:a6:0e:91:8d:e5:2b:b4:6c:3c:34:28:a4:ce:4f:f6:8e:2a:b4:26:a3:70:f3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate 4d53.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 4d53.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
4d53.de
martinstauch.de
www.4d53.de
www.martinstauch.de
martinstauch.de
www.4d53.de
www.martinstauch.de
Other certificates including the domain name 4d53.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for 4d53.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgISAxQb7fygIO+K2vdW2AsBo0fbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIyMTEwMDlaFw0y MDAxMTAyMTEwMDlaMBIxEDAOBgNVBAMTBzRkNTMuZGUwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDbxxCq4ePQZlBYm4o7zb7gsF5jp0K1gOvky79aKFDP PuQme+chjgycoinreLeFP7J/8xX0AkZ2ScQEHLkDOZlJKo47KXE+PEBOOfBY1m5K 4BqbQAnCBSpFv6a/3Xt403iuBzqtd0Ag+AJj6nYlVGWNUP3q70uRkRz6cg6gbcJc mqlRA9XmJgPQyE6AeGA46XNvCrWkdZ9ogr9PhlVNCQCKQKY6gKRzWtWsX3ul9UJp mO/l/uCi/jB65wolAP318yHvD8A3gYnXfYhL9HkRtdmsm7W0eNgzb57Qy8bF6OEp KCOtOYxQy2xxr+yoOISSwRJqqlXzjMwNrkLiV01vO1rLRGylcbu7N6/EeCSFDPRz mIzXa0lHpYizY61XOLkSwo1SxVkaubGE8a0t3PxnT6OIKa7e+lwC4rmUV5yawEfT cuABaJsliC5myUF26OKh/qczAdXsVrKofCLFP0q11zsB780y3x/V1SqXR2BWaqH5 sH9MfAfHhGJ8aupA3J8WU/c4czRalw07L2esdIdtSoPAuWsOfgpaXAda4xPI2Srl pqdNxF64RXQMFnfZajaCKKkWD9U42q1sTxbFlFV1OPxC8b5RT7ys7LGuE02H//hV GJsPZxFUPg57TDtKu8/3zlJjzaEEZExPDhNQ1l0n/cOKdDdri6GPtnyGbEdosKvy IQIDAQABo4ICjjCCAoowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTlle+A3xJum6zs gtbLwBrVX5skcDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMEUGA1UdEQQ+MDyCBzRkNTMuZGWCD21hcnRpbnN0YXVjaC5k ZYILd3d3LjRkNTMuZGWCE3d3dy5tYXJ0aW5zdGF1Y2guZGUwTAYDVR0gBEUwQzAI BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBep3P5 31bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW3CBZmAAAAEAwBHMEUCIQDf NRf6QLbk7Hb0PCuX4PMhuQiIwtGlGpDC6LeRqXY17gIgc5Ba3iFvNv2YGEm8x7wn 03+4dmlp4tjNPWV/X+oShC8AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAW3CBZmlAAAEAwBGMEQCICab6Yk62Bk1HZ8vSzpP17Hp4kpSa9Kb4IC5 qQw+oiQrAiA1HDzS8odHKkoZQRdFdFHE+fDTkUiYcAoqPIEjc4vWMzANBgkqhkiG 9w0BAQsFAAOCAQEACLryPZ3KWC4/Ep08A3thNKupA+ZSZjSTbUU0PetXfZ5e6B4j TlJ8gX+9wfbuiYZfZ1pyY4SZpTZFqt5+McnFExF3mkAmeJblIrYQVk8tFdsHGnnh 5MrrSEHIToqGx9R6/K9QV4otvk4tV/QvpKDuE8dMCTWrm5zJvzIiaqt245V3Zli5 NaKz4tlWYkV5Z0ujBXwcVgGc7hw36MA+ogK9vChIgRZwnnGs+4Fr7qg/aVVBxHrk EBDVQjqoQDb5HdKQgrfMehtyb7Ub1De9KjLDA6G95y0/dByw0nNhB+jKQ5jnykh6 QN+uQCJWuEGdSITqWk6XquIoFtlFYnjl0DjQdg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA28cQquHj0GZQWJuKO82+ 4LBeY6dCtYDr5Mu/WihQzz7kJnvnIY4MnKIp63i3hT+yf/MV9AJGdknEBBy5AzmZ SSqOOylxPjxATjnwWNZuSuAam0AJwgUqRb+mv917eNN4rgc6rXdAIPgCY+p2JVRl jVD96u9LkZEc+nIOoG3CXJqpUQPV5iYD0MhOgHhgOOlzbwq1pHWfaIK/T4ZVTQkA ikCmOoCkc1rVrF97pfVCaZjv5f7gov4weucKJQD99fMh7w/AN4GJ132IS/R5EbXZ rJu1tHjYM2+e0MvGxejhKSgjrTmMUMtsca/sqDiEksESaqpV84zMDa5C4ldNbzta y0RspXG7uzevxHgkhQz0c5iM12tJR6WIs2OtVzi5EsKNUsVZGrmxhPGtLdz8Z0+j iCmu3vpcAuK5lFecmsBH03LgAWibJYguZslBdujiof6nMwHV7FayqHwixT9Ktdc7 Ae/NMt8f1dUql0dgVmqh+bB/THwHx4RifGrqQNyfFlP3OHM0WpcNOy9nrHSHbUqD wLlrDn4KWlwHWuMTyNkq5aanTcReuEV0DBZ32Wo2giipFg/VONqtbE8WxZRVdTj8 QvG+UU+8rOyxrhNNh//4VRibD2cRVD4Oe0w7SrvP985SY82hBGRMTw4TUNZdJ/3D inQ3a4uhj7Z8hmxHaLCr8iECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268179629987795093923669754476934119770075 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 21:10:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 21:10:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4d53.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896614374274500574696149291837181702282277334196558937090171617535570745960718200944355919785679691467130428812097085607409985915718779711357018467682701420374612192372945256884779538431588870521633294891439596132216414456084392977313378463604342835675739697418893087546874108953549996128591756554491346593379819039380386797875569620757207384868737325429841715569516472146923596129295012886415092008812542370383335257819091627551089709421446208343493711040223749925177142896417420406751584425852005652086767628320609306442737793080215209301350133861467931990183496710610792546969042223574464410746486611101141324882835672287404632120926434864104669085080574424870705847593371579218366734576248395813158436733753871131410058502148530048588364804018954116503352142615391685510843513156825304982585643888447924741790228880304152144995391870058320300765965273586305743865042342741763160750332347261996000308220869920541879486130826183957843298577518335264231185983773359838186590564281979654541165291576730223093817683807461890710224731893305315433960687937899155361745658407632116220509337497192560533061366803488102402523054356389098941169172664140352736536025143988953549711601949474815809382954415237794746236393686160181193513628193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e595ef80df126e9bacec82d6cbc01ad55f9b2470 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4d53.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinstauch.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4d53.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinstauch.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc20599800000040300473045022100df3517fa40b6e4ec76f43c2b97e0f321b90888c2d1a51a90c2e8b791a97635ee022073905ade216f36fd981849bcc7bc27d37fb8766969e2d8cd3d657f5fea12842f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc20599a500000403004630440220269be9893ad819351d9f2f4b3a4fd7b1e9e24a526bd29be080b9a90c3ea2242b0220351c3cd2f287472a4a194117457451c4f9f0d3914898700a2a3c8123738bd633 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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