web2.ro72.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:9d:5b:36:0e:9a:b4:b9:42:62:97:b1:d4:47:56:be:e4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web2.ro72.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:9d:5b:36:0e:9a:b4:b9:42:62:97:b1:d4:47:56:be:e4
Serial Number (int): 280942115100533782864056455290346678959844
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:83:39:4d:f9:72:06:c2:1f:9f:1d:af:93:42:d9:95:3d:ef:d7:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:be:ba:c4:3b:c5:7b:db:60:2e:b7:c3:5b:1b:fd:d3:3e:e1:e1:c5
Fingerprint (sha256): 12:a3:4c:1c:24:64:eb:84:d9:79:2b:a3:80:7d:ed:9a:53:c9:19:d6:d7:3f:4a:94:7d:e8:a8:e2:3b:09:22:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web2.ro72.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web2.ro72.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web2.ro72.de

Other certificates including the domain name ro72.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for web2.ro72.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280942115100533782864056455290346678959844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-08 08:00:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 08:00:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web2.ro72.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728145570389465168471166353468008977929854342315916941302090726734181156971336495636481060182897319284854419053867133323541710800370809582430345283176079881253788831160437725172175647232130225291709445862222013660878492030728968136141936790713322606382792893782023358841052860596898277760634388856527730996765806757418956123884075136846322484740239045426599799022219812650937707067983133536997071425804227569146587164527820783336341530700057373739135446269129513218776509651418282253915060397231076537456376523613300881400411550911306372078461487623557945148641513620731665876480011545929054556736943539701568889571297055081778878126477105921842153414554493257832699847497219680761768383197450962442903940710489086895940867215417744232947794197015754358656246983081835241180996057334043398022369255490468605679571668124995017393785547777572417331320392205958041986672702036452378022825877528329241319503641298408846845287250613153451597747556687554816323122821615878321774174970016411291523264418073174399957575738169598621973584842474917725426844053526136960333132014356802093085035225227691084451519108389215266160172375790954671080020242080345688658499303669997101605860708357907678290612987717196682978707595533693817386712761031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2383394df97206c21f9f1daf9342d9953defd79d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.ro72.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b3651084e0000040300473045022100cf63730b56f639068d19afdbc204134b9b8f5262bed7588572c56648e7f5c875022033a89c90054a2b0f7a1d76a63cdb83cc84b593a0d7f9f710ed315349aa51c051007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b365108410000040300483046022100b5f03351cb72e2b14ae25dca52380bea4bbc803590ecb48227c587c0415ca26c022100ff9ec5f02135f3be0eacdfd02e06aaecad69e7c52fee4431227d2d0a48ee977e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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