api.analysa24.de.datpasst.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:05:fa:9f:c1:ff:1d:b9:15:07:a7:b3:08:8b:a8:d3:a3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.analysa24.de.datpasst.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:05:fa:9f:c1:ff:1d:b9:15:07:a7:b3:08:8b:a8:d3:a3
Serial Number (int): 291289653538789999967167874563676043793315
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:6c:ea:6c:82:3f:fc:00:47:06:7f:15:e0:20:33:4b:94:9b:21:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:53:d6:17:97:61:e5:3b:db:7b:88:8e:67:6b:57:74:0e:c6:c9:84
Fingerprint (sha256): 13:6b:e2:34:8b:99:88:b3:34:58:30:e0:e0:95:c1:dd:86:b6:e6:93:e5:13:48:50:03:54:73:47:29:20:35:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.analysa24.de.datpasst.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.analysa24.de.datpasst.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.analysa24.de.datpasst.de
app.analysa24.de

Other certificates including the domain name datpasst.de

(limited to 100 certificates)
datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
tee-kaffee-shop.com.datpasst.de
datpasst.de
fullwood.de.datpasst.de
api.analysa24.de.datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
version.snailsites.com
stage.datpasst.de
gruebel-duebel.de.datpasst.de
sanetta.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
version.snailsites.com
chat.datpasst.de
datpasst.de
ccontor.de.datpasst.de
sanetta.de.datpasst.de
chat.datpasst.de
gruebel-duebel.de.datpasst.de
datpasst.de
datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
version.snailsites.com
adfab.de.datpasst.de
ccontor.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
app.analysa24.de
tee-kaffee-shop.com.datpasst.de
gruebel-duebel.de.datpasst.de
fullwood.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
jwd-paderborn-de.datpasst.de
gruebel-duebel.de.datpasst.de
stage.datpasst.de
datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
stage.datpasst.de
chat.datpasst.de
jwd-paderborn-de.datpasst.de
tee-kaffee-shop.com.datpasst.de
version.snailsites.com
app.analysa24.de
adfab.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
tee-kaffee-shop.com.datpasst.de
tee-kaffee-shop.com.datpasst.de
jwd-paderborn-de.datpasst.de
*.datpasst.de
datpasst.de

Certificate

The complete raw certificate details for api.analysa24.de.datpasst.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291289653538789999967167874563676043793315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 16:50:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 16:50:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.analysa24.de.datpasst.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798887765359943606378044504391882570640369398390783578096114529687915565752362357609653860541615203724226004387180057502841629236063334352898173600089672228352618604252017940944826631921726986432181926059857476147074647470721153194433716764139942442797055996642376777125970886740320441375220613839120384928176840535552403229404335635466830973279161447032294027817198204359191259865158344508541997453894181104141609232084025381345260402552387019512587190072449901751279935828339586365217557092162073699980698376044323905145603257149678097959752442703169930631202951844506596363986032597024443606298379646388944668897188682111454238612818852561699099030746155505910094934722680787114620117516172791924040314948419165176205203004112401800828086583502256143620002513512376149390496142484338591031492325850982580753720755472233205848452813814339712015560850580013508440593699399322325581313042963937691688723480982586648922538711877996392062816244432759291387686223472168393962685567300722360723771502797828346366781997098307294989817577067780646738259013875621934631436265197744532194289697695887176840908176927056868276366552727617632724921053442021266012416779213191985903756031264928739090979199106711701927977559288259353723339629411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							396cea6c823ffc0047067f15e020334b949b21a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.analysa24.de.datpasst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.analysa24.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b1950517b00000403004830460221009bb4c49b73be46b1f80fab5412bdb591e9184cdf5551fd0b082874d22e8ba2290221009c5e1d8777cd865f3a0dfbf8edfa1d81b0671dbc6ee96875711b0b0acd53a932007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b195053a80000040300483046022100f53ae745db9f663ab618a4d0ee519ccca3a656792b7933d256984b539e4fe845022100f925283827437c42f4d2b0dfca6123b9ddfa7f61e23ba5c65e7712be9c4e935f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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