idgard.de

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:7b:bf:59:a3:e1:92:55:20:32:73:57:1c:b8:81:7c:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=idgard.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cd:7b:bf:59:a3:e1:92:55:20:32:73:57:1c:b8:81:7c:7c
Serial Number (int): 418371517536133352648129913461615739632764
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:1e:0a:a7:8a:a0:ad:08:db:5b:ca:1a:28:0a:61:6b:1d:7e:d5:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:40:ea:91:3b:93:0b:b8:29:21:b9:ac:ae:d4:e8:08:3c:bd:dc:21
Fingerprint (sha256): 15:05:bd:9d:af:65:ec:be:8f:3f:ff:ab:2d:58:0e:22:d1:6e:55:13:56:89:9f:f2:05:6a:73:4a:2b:58:38:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate idgard.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idgard.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idgard.de
www.idgard.de

Other certificates including the domain name idgard.de

(limited to 100 certificates)
www.idgard.de
www.idgard.de
idgard.de
zoho.allgreenhosting.eu
idgard.de
support.itmagix.nl
idgard.de
support.subrosagroup.co.uk
*.idgard.de
*.idgard.de
support.viveflamenco.com
helpdesk.bau-master.com
support.axondevelopment.co.uk
idgard.de
servicedesk.resolutecare.co.uk
support.viveflamenco.com
idgard.de
helpdesk.bau-master.com
support.teletechnics.com
test.service.idgard.de
support.itmagix.nl
www.idgard.de
support.bitexen.com
idgard.de
help.someday.com
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
support.bitexen.com
*.idgard.de
*.idgard.de
support.itmagix.nl
idgard.de
support.jackbaker.dev
support.newlink.fr
support.teletechnics.com
assistenza.amotive.it
support.newlink.fr
assistenza.xsystems.srl
assistenza.xsystems.srl
zoho.allgreenhosting.eu
support.jackbaker.dev
idgard.de
support.what-now.co.uk
idgard.de
*.idgard.de
helpdesk.bau-master.com
*.idgard.de
helpdesk.bau-master.com
support.itmagix.nl
idgard.de
www.idgard.de
myportalsupport.thingco.com
support.axondevelopment.co.uk
idgard.de
support.itmagix.nl
servicedesk.resolutecare.co.uk
*.idgard.de
idgard.de
helpdesk.articad.com
servicedesk.resolutecare.co.uk
support.newlink.fr
assistenza.amotive.it
idgard.de
support.subrosagroup.co.uk
support.itmagix.nl
test.service.idgard.de
idgard.de
idgard.de
www.idgard.de
support.what-now.co.uk
*.idgard.de
assistenza.amotive.it
support.subrosagroup.co.uk
servicedesk.resolutecare.co.uk
helpdesk.bau-master.com
support.viveflamenco.com
assistenza.xsystems.srl
support.what-now.co.uk
test.service.idgard.de
*.idgard.de
idgard.de
idgard.de
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
myportalsupport.thingco.com
support.newlink.fr
zoho.allgreenhosting.eu
help.someday.com
www.idgard.de
support.axondevelopment.co.uk
zoho.allgreenhosting.eu
helpdesk.articad.com
myportalsupport.thingco.com
help.someday.com
support.bitexen.com
ithelpdesk.beaconedu.uk
www.idgard.de
*.idgard.de

Certificate

The complete raw certificate details for idgard.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418371517536133352648129913461615739632764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 13:26:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 13:26:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idgard.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954262674881230488805192132554599343650774042498302874699709237281981620659769333487871374605151903473248692728313348758374598731239418421392690593811027237722354404425968997283807464319744001407173831255906469346459824039051267654601457628762851883919755886197436014093277428696806724396275559577948938536296333178313915917796149723177289549422231237406610676104235119503570003682969108985767193454276157395058645292622186062498978504191609661342262264009594470835111246779588284955486603836614363409396794850082642132519291973564258176158336616030564584357418805812783923182042550894315178669574739673226971167228898219924099882976603522789227418233149871279270363311323526783955742944371636203148640047313199112045007346693011315008313497251289879834258046853231460062671589193462475996425165285441014978364265574932325216284684240982161501594944008978680050968502095743496224422817066767947377154394125042138743245688686026165993652507588401173493644581935250103011422590909001263114754469139968003646709908884244289397468957097863927022947854211858825849308202809566522674457669399773905268257797794438628592469770177760140462241812425036931443653118752389713608005303956016388799853259008386845560989154045905477994515711569371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51e0aa78aa0ad08db5bca1a280a616b1d7ed5fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idgard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgard.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eb3cd86bd000004030046304402203233963608c3faaa23b7daa2e92368b420074f6c1b3cdf3e3e0a68d86ebab4cc02202dcd362a9737dc80e41e4d53d1075281f8d9319db047e3f6cdc87b3b6d60180e0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eb3cd8dc80000040300473045022100d6963a24b42be4625ad8c1edf27ed4f54855fea4dfe254f7c313c4e05c57ba0b02204f080c456b9ffa8bd80bb54a131cc7c26e2357e9747c5d9ea4c1e25033d444b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005614ec978faee5484ca2a153b5fa82107fc5d472b2d5a40bec96e00192187b04900408198b5c6bd328d0cf12fd35fd59f6e101ca95c9e44617c1c2e2775a67fd92652267280424b17286e8a4f109ac92a0bbd1b448d1e773394c1aa689acc17b56c4529e61cfd67b74b2437d53649f3dc5338ae20469c838742758e542cc60a2eb8a2515971a40f29341f672709b4fa5d91f3a64ff53c953d86c3c372395240db311c732c0f17e4c897cce43f970bf4644afc74141f3a6cc81a6c42aeef3621200bf955ba427aca3efe96f5c4c08075c3eb2cca3a518ed42b82dcdd799e8f9537f3e3a3b5b93662e4e0009b8d60d7b1934180f3c4a390a221538e10f62c0f3df