bleilaus-verlag.de

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:a6:c3:10:d0:d8:8d:46:9d:18:ad:72:d7:4d:68:72:fe was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bleilaus-verlag.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:a6:c3:10:d0:d8:8d:46:9d:18:ad:72:d7:4d:68:72:fe
Serial Number (int): 324851042728828035485868226933013445374718
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:d0:f7:65:8b:52:ef:a6:00:26:2c:d1:b2:b1:4c:ac:97:b6:52:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:16:f2:62:78:ab:d0:70:0e:15:b8:22:98:e7:b3:40:36:7b:b4:c0
Fingerprint (sha256): 10:91:e1:88:9d:3e:c0:80:1f:62:70:03:ae:8f:bc:21:44:f2:24:f9:33:b1:95:95:a7:7d:f6:2e:23:09:1b:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bleilaus-verlag.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bleilaus-verlag.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bleilaus-verlag.de
cafe-yellow.de
dachtheater-leipzig.de
hssalt.steinstrasse.isp-vhost04.domservice.de
stadt-in-der-stadt.de
steinstrasse.isp-vhost04.domservice.de
www.cafe-yellow.de
www.dachtheater-leipzig.de
www.stadt-in-der-stadt.de
www.steinstrasse.isp-vhost04.domservice.de

Other certificates including the domain name bleilaus-verlag.de

(limited to 100 certificates)
bleilaus-verlag.de
bleilaus-verlag.de
bleilaus-verlag.de
bleilaus-verlag.de

Certificate

The complete raw certificate details for bleilaus-verlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgISA7qmwxDQ2I1GnRitctdNaHL+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjYwMDEyMjFaFw0yNDAxMjQwMDEyMjBaMB0xGzAZBgNVBAMT
EmJsZWlsYXVzLXZlcmxhZy5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKrBYsGXuuzQr4suiP+Ln0jgjAA1dnZ2BJYxVoUouIeQtIyk0FiCe5+iJn5w
MjzT/M5HZydbW5I4ImFL/0W2iPu7u7Upzy0B3sPSAbTaGAN0C/puCnevM/DGprsu
UF+cTk9i9tKM4FYEFjFsIOhQdyUmU81Od26VKBFHcOKMhpFGqWH3VIFErHCWcguF
MpAPS5nwcPA740LPfGvWUmimJw9HdGWoUNxzcRGHKIPjUDgKR0R4eJJG0qgR7WSw
PyLl9koMyDfrBNlNzwSMFF8B+AgUyKqb4MFOolXYVqiqB9AodV5ROP3khOOSGjow
usskO656M6mXWMxSZUqg/4Y1CbNSMFOlzRK+gJ4MJWmotsuNofMpercqwc4H+rmm
fHxUeQqY/Z0tST6xr3pvjXuyv9uRAM+ToKtxOzKWRkoFRv1I4vPUOwPxJpUfV1oR
6mmUFLg52g7w6yRP1y/GV6rHQiw3pnFw+65PysvKjSH0GoBlexfc3rvfluYPKxVT
JROusnY7FcDVoHTASbR8ADH+tqMtqbI184wEp9i1bqZjuXV9tmCbnLZmbayz1q6T
WqJ8Xj/zpX6O+mYNsZHqo/5sAL69txmtMTUPZe4DwReBSPb7RfaqtsxN9XzbLl5c
fzIzlDc6hMou4k7TlrAsdDGWtyfYY69830TfEhH3G7iVp4RTAgMBAAGjggMoMIID
JDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGrQ92WLUu+mACYs0bKxTKyXtlIjMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBLgYDVR0RBIIBJTCCASGCEmJsZWlsYXVz
LXZlcmxhZy5kZYIOY2FmZS15ZWxsb3cuZGWCFmRhY2h0aGVhdGVyLWxlaXB6aWcu
ZGWCLWhzc2FsdC5zdGVpbnN0cmFzc2UuaXNwLXZob3N0MDQuZG9tc2VydmljZS5k
ZYIVc3RhZHQtaW4tZGVyLXN0YWR0LmRlgiZzdGVpbnN0cmFzc2UuaXNwLXZob3N0
MDQuZG9tc2VydmljZS5kZYISd3d3LmNhZmUteWVsbG93LmRlghp3d3cuZGFjaHRo
ZWF0ZXItbGVpcHppZy5kZYIZd3d3LnN0YWR0LWluLWRlci1zdGFkdC5kZYIqd3d3
LnN0ZWluc3RyYXNzZS5pc3Atdmhvc3QwNC5kb21zZXJ2aWNlLmRlMBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA2ra/az+1tiKf
m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLaYoeBwAABAMASDBGAiEAsuFgrcjX
SztyRHkr5R8wG0rNypxZeW24wbJK3hGRNSACIQCMTH1UfYekGswQgCf1mZFdzufZ
807cSdGvbVMi9Lp1XQB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABi2mKHf8AAAQDAEcwRQIhAMW8HG9iUkudR9JGHLCM+NUwOLH00lNiugwydDPz
o/VDAiAlBL/wtHtugMvS5LL6QmpBMJ3XK613QT9aA5jPKFqrYjANBgkqhkiG9w0B
AQsFAAOCAQEAKUCw8Tn149Bz8v9vQ1TxW/iOGCqcZAqT33/2bkBvReyDYSraNl7A
kJKrgemqHUVhnBJMiDoJ/bLig4HfDyR/xM4ePs9urlQUgjFbGs9DGXzyf1AQ9OMi
mZOyTxdocydSDCB8e8CvcwMJhf2KHF1+uvOPEdSJGCgPau/ivHtLIOUOlU1LyIOe
fEikW777gm2jU+2UjqetK9X6ivr/rnBJc7o9JOlwems80EQgE7lylxEIuUQOgsQt
/0Q/fyDDjJAj9NisF7XVqJtGeUQ59St+LJDrRjFbaPk9O4U1YBlr/I1o8WXqTYPE
0/06QNIBuJHm9xPJMKw6A33HeAFyU8VZsw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324851042728828035485868226933013445374718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:12:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 00:12:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bleilaus-verlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696621308341159524439487075697605801900822281800471100841739589125532394504998436524713340430454305660737739342034608619133532135023007064725294505703007224001899153665214741181456270256748238734642957338562971981174745248587299019092888732417080102967152515097897953788650077094514599909966270109617706549329150700135253082323918510517754929645180374594871390876207080685444340996936370421207999534340088478450885450342875921607406885808774014151050182319172921025706030200971930470381985368202419353736851396866654299297751294988695760724074738591794184647380071113539028094777669477605257047442470102844315396786728244509661792349578224732390788699487926417539793270268800378368696150776434612970486601731780129521830563727215484410182910792650960941229954238972231981631990692267580479234184163221844529378719053248526343900105595910636992410162687122148584661486072584170580701154235733806992073602084537810532389310561392193381694207814826703588785025820423694538508401216188133821293283601032721685487197617806005326364818895794669493981580136472936596521936033712325746230742408880030803012037819468886523654225598227930292139138732891903879528661382289952363172468218997959887491324418680644555442582923975854399901732930643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ad0f7658b52efa600262cd1b2b14cac97b65223
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleilaus-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe-yellow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachtheater-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hssalt.steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-in-der-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafe-yellow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dachtheater-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadt-in-der-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinstrasse.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b698a1e070000040300483046022100b2e160adc8d74b3b7244792be51f301b4acdca9c59796db8c1b24ade119135200221008c4c7d547d87a41acc108027f599915dcee7d9f34edc49d1af6d5322f4ba755d0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b698a1dff0000040300473045022100c5bc1c6f62524b9d47d2461cb08cf8d53038b1f4d25362ba0c327433f3a3f54302202504bff0b47b6e80cbd2e4b2fa426a41309dd72bad77413f5a0398cf285aab62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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