biosphaere-potsdam.de
Issued by R3
About this certificate
This digital certificate with serial number 04:27:e7:4e:68:06:f8:a1:fe:9b:99:63:d2:bb:02:69:7c:0e was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=biosphaere-potsdam.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:27:e7:4e:68:06:f8:a1:fe:9b:99:63:d2:bb:02:69:7c:0eSerial Number (int): 362027614813061783821466359047950321679374
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5f:98:ff:29:5d:b8:ad:46:16:99:45:17:1c:fc:b1:4f:b4:d6:06:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ab:8f:bf:08:55:b0:4c:ee:81:ba:97:db:e7:2b:fc:a4:5f:06:f5:87
Fingerprint (sha256): 12:6d:6e:ac:b1:a9:f8:af:26:99:27:20:dc:e7:ad:a8:5d:d5:b1:80:c5:ac:f1:29:eb:e0:4a:29:06:f0:e5:8f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate biosphaere-potsdam.de
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for biosphaere-potsdam.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
biosphaere-potsdam.de
biosphaere.web.mageprofis.de
event.biosphaere.web.mageprofis.de
eventlocation-potsdam.de
naturerlebnis-potsdam.de
tickets.biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.eventlocation-potsdam.de
www.naturerlebnis-potsdam.de
biosphaere.web.mageprofis.de
event.biosphaere.web.mageprofis.de
eventlocation-potsdam.de
naturerlebnis-potsdam.de
tickets.biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.eventlocation-potsdam.de
www.naturerlebnis-potsdam.de
Other certificates including the domain name biosphaere-potsdam.de
(limited to 100 certificates)
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
www.biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
biosphaere-potsdam.de
Certificate
The complete raw certificate details for biosphaere-potsdam.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISBCfnTmgG+KH+m5lj0rsCaXwOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTUwMDMxMDBaFw0yNDA0MTQwMDMwNTlaMCAxHjAcBgNVBAMT FWJpb3NwaGFlcmUtcG90c2RhbS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANLqiOgFZqIrqVK+n6NKKMO9+O7Z2NCrLO1Ac3qqO5ueIbH5y6LTcfEm K8FWzK7W5Vb0jVg8Y36d1ve2H+njTlv235tYs1cVTp0N5ZRL8FNOV5NRw+Ivpb54 0HMlWPiioZNS6CVj5JB5De3vqpLrykE3Y/CQc4AsQUnEY6W/2VpAc7yxIqsV/edS shkOUw8uwu+nUCWPbca79OOq1DAijBz/D9RS4X2CW6g8CATvBHKo+DIGOGNSUuEq i1dxzt3jIE0U1sBm2ut2NHugh2QntU5JyVPXeFiXfVMZdKtk7ovMi8ZfiPNpDfcc ZVk3wL6+ob9b4c1+GNvsGC6bOD4SU+8CAwEAAaOCAwswggMHMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUX5j/KV24rUYWmUUXHPyxT7TWBgcwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggEQBgNVHREEggEHMIIBA4IVYmlvc3BoYWVyZS1wb3RzZGFtLmRl ghxiaW9zcGhhZXJlLndlYi5tYWdlcHJvZmlzLmRlgiJldmVudC5iaW9zcGhhZXJl LndlYi5tYWdlcHJvZmlzLmRlghhldmVudGxvY2F0aW9uLXBvdHNkYW0uZGWCGG5h dHVyZXJsZWJuaXMtcG90c2RhbS5kZYIddGlja2V0cy5iaW9zcGhhZXJlLXBvdHNk YW0uZGWCGXd3dy5iaW9zcGhhZXJlLXBvdHNkYW0uZGWCHHd3dy5ldmVudGxvY2F0 aW9uLXBvdHNkYW0uZGWCHHd3dy5uYXR1cmVybGVibmlzLXBvdHNkYW0uZGUwEwYD VR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwA7U3d1 Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY0Kvk3dAAAEAwBIMEYCIQDc KVMhVQZRFtUQfijJ11S7TJh97rG8ox4PFMsVof+4HAIhAOeB1Tl1bYUFipmuV2LD bLgjXzfTJRZ3eVT2InbE6l9QAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGNCr5PtQAABAMASDBGAiEAtWpULNzB7XDgdShXAp2eJymnWNGbORV8 kDGOig1dMlYCIQD80V5MpIKmsiqTQawus1XleZhDCXSBlgd+gbvsgus+JDANBgkq hkiG9w0BAQsFAAOCAQEAJhjCt7d3KMtcg6ZBsZ+Sbf/y/KEImy/3WF1P7vTg9GOp szur7CQm5DTEcCU570LQNGlXcWF7iiJ8Lr+matWF79PwiT7XYlv5mMrca4IR0VAm j2AsLHPV6+nfHZSyCsFTK2nobttS8eBGToiDoveOxROL8nwziDDPx3QnjnfgV8vI HYrbPAhCm6Yu1U4TFKmmr8xo+IiA64V5UjndXNzllVxhIZfvme4yXS6XXDt5rbmA QFVl6B/QLScLehsjSs8GLShfN5S0T7eh5ttyLQCRSZoFzxkTzpxtAnxPbmRhBx7j wK6TwSbAqClkbvfBqNPLwxSuLw8CSxuASJO6Rj44/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uqI6AVmoiupUr6fo0oo w7347tnY0Kss7UBzeqo7m54hsfnLotNx8SYrwVbMrtblVvSNWDxjfp3W97Yf6eNO W/bfm1izVxVOnQ3llEvwU05Xk1HD4i+lvnjQcyVY+KKhk1LoJWPkkHkN7e+qkuvK QTdj8JBzgCxBScRjpb/ZWkBzvLEiqxX951KyGQ5TDy7C76dQJY9txrv046rUMCKM HP8P1FLhfYJbqDwIBO8Ecqj4MgY4Y1JS4SqLV3HO3eMgTRTWwGba63Y0e6CHZCe1 TknJU9d4WJd9Uxl0q2Tui8yLxl+I82kN9xxlWTfAvr6hv1vhzX4Y2+wYLps4PhJT 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 362027614813061783821466359047950321679374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:31:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 00:30:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biosphaere-potsdam.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26625697458461139835282930798476663241225816056348617230609102429270600799355667025003352456376563375799828981104962838161875170133661551589082149946975462892484951566965050588123674961649514028546308511733704377001577480836817445879347214145796318934054430009828271566443676628157082773558856322115692499228091861477264365564573537419398932471732845724057440511419961589206292494959376554575910008626030597011168917228739243781875342285901326412815020708242363124879486793435068592222383810429620878205894434821559066246076718280496390279605677762152132819331084432441773032756834092963852272382350514827908265169903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f98ff295db8ad46169945171cfcb14fb4d60607 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biosphaere-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biosphaere.web.mageprofis.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.biosphaere.web.mageprofis.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventlocation-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturerlebnis-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.biosphaere-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biosphaere-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventlocation-potsdam.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturerlebnis-potsdam.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0abe4ddd0000040300483046022100dc29532155065116d5107e28c9d754bb4c987deeb1bca31e0f14cb15a1ffb81c022100e781d539756d85058a99ae5762c36cb8235f37d32516777954f62276c4ea5f50007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d0abe4fb50000040300483046022100b56a542cdcc1ed70e0752857029d9e2729a758d19b39157c90318e8a0d5d3256022100fcd15e4ca482a6b22a9341ac2eb355e579984309748196077e81bbec82eb3e24 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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