bamboo.atlas.1st-rz.de

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:57:c2:c7:75:28:f1:a3:f0:67:34:ac:6e:ec:eb:3f:d6:0c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bamboo.atlas.1st-rz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:57:c2:c7:75:28:f1:a3:f0:67:34:ac:6e:ec:eb:3f:d6:0c
Serial Number (int): 116975757728424849283342226998105445750284
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 4e:10:fb:d2:80:f1:ad:77:c1:22:5a:41:50:b1:f8:a8:f0:74:0b:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:f1:94:79:6a:87:0e:d3:67:6a:3c:15:da:8e:08:64:4a:f8:c0:d0
Fingerprint (sha256): 0e:f3:d4:43:f0:50:5e:f9:86:82:e6:ee:d0:ce:86:9b:c7:52:c1:c2:5e:43:45:ad:d0:ed:b2:c9:6b:a4:3a:14

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate bamboo.atlas.1st-rz.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bamboo.atlas.1st-rz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bamboo.atlas.1st-rz.de

Other certificates including the domain name 1st-rz.de

(limited to 100 certificates)
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
*.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
bamboo.atlas.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
t3inc-srv001.1st-rz.de
cf.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
t3inc-srv001.1st-rz.de
sni230720.cloudflaressl.com
cf.1st-rz.de
sni230720.cloudflaressl.com
cf.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
cf.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
cf.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com
bitbucket.atlas.1st-rz.de
sni230720.cloudflaressl.com
sni230720.cloudflaressl.com

Certificate

The complete raw certificate details for bamboo.atlas.1st-rz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116975757728424849283342226998105445750284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-15 10:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-14 10:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bamboo.atlas.1st-rz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816610456440500469136985503115926349865126322720555731840860839528762658646956842148521045904934562260415211016274656230261567939735486652285642071374480032090866410018367615215393613235244228004280295219334452354698954801414874507179093276100304175252524529796356509481934758754895803357192183055967217038328435614380900882204908344222705776310421863653281162806766672479548396285427363884045037861194633795893181244077367504977386952441226976400727562859223164408079539187304245391923914552470235355130771731079074651692993993296687777484687663414485414352418537425706188666487894370879310188480699190864750104951049385440351864120900975280027568948255064920713354664917875945063455664987868017311994092776098845130376905236024823961417049334887144897941877400464251709216247402408955084326909289850861695841330161792188619024968822118475384233937103719145408561437704817941315481796419528920260135522145902394558399542957082111658740625277517866120749448884553165947248563659417913672581927404499971537683730373446324919470053826938492697105004624891070686926263502746673592808081947037320138391594926526719494638558464885077361904671763824432785507336038551263474176798566678571302522470400750724713579999792953927438847709826967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e10fbd280f1ad77c1225a4150b1f8a8f0740bb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboo.atlas.1st-rz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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