2021.saechsische-staatsbaeder.de

Issued by R3

About this certificate

This digital certificate with serial number 04:41:da:d8:b1:ed:b2:df:0e:f0:17:97:8a:9a:5f:d5:f5:4f was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2021.saechsische-staatsbaeder.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:da:d8:b1:ed:b2:df:0e:f0:17:97:8a:9a:5f:d5:f5:4f
Serial Number (int): 370858394424923474249650075870061491778895
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 78:ea:0f:f9:03:5f:3b:bf:23:8c:a6:a9:4e:80:e0:f2:09:79:b6:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:f2:9b:85:92:b7:1e:97:14:8e:1e:f5:d8:14:bc:31:c1:29:8c:b9
Fingerprint (sha256): 15:64:f2:66:8c:05:f4:a5:e1:38:2f:1e:de:04:69:1a:7d:a9:d0:dc:c2:4a:fc:ed:54:9a:7a:dd:87:86:86:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 2021.saechsische-staatsbaeder.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2021.saechsische-staatsbaeder.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021.saechsische-staatsbaeder.de
beta.saechsische-staatsbaeder.de
old.saechsische-staatsbaeder.de
old.saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de

Other certificates including the domain name saechsische-staatsbaeder.de

(limited to 100 certificates)
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
2021.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
2021.saechsische-staatsbaeder.de
soletherme.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de

Certificate

The complete raw certificate details for 2021.saechsische-staatsbaeder.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CYbfvZ23Bh8mPB3Tchc
N8gflieHlHhgPzkeSnz7/GrYWWdj+N0Cu+D5sInz25p0JWB1ZcdZHyGO79Wns+YP
Cym6CUFdDfuWqrHWK1oih3kWw0WaKmbcbyRr4+723VhRib/NLIuiIWUcZ5Ss5jPh
2lvRJy+UZ9KQ2EDoq0uWlULb6hBnJ7t6LbVAybIqtG7dWvtqz7dFL9fBnexVWto7
pEBglnn12xU6fFy3FPFqZVxVtUNH4QUNqMih8WX9vjFgrBSfV17b9p0LcxxUkDsJ
Y1H0zvKEBxT8xh3BOzHez3nCXDfzDIN5TU+kM5e0yo0Ct7Z8BxoWwM/dM+2yu7HM
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370858394424923474249650075870061491778895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 03:00:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 03:00:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2021.saechsische-staatsbaeder.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30820937874007883857736931716413264998960152796210696143157893288743507189365306138962487375429469301535690841033758434430870740452647726713977120848837381238520157821692737021001326988567367534263946072877411114617022958348777764263387299082373819480264046855964528510056826072291112724711843303945922494242981828459135894319646563501761117988894993145886379082395093743093075443427312502462238906153904603199081491677623158153963848022450768526578152632732349687642736953851410964959047562346915132613419244987955877946685579782148861459486312200540835537420521073514213562930401319376876254952626196715600610446399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78ea0ff9035f3bbf238ca6a94e80e0f20979b6d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.saechsische-staatsbaeder.web.mageprofis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saechsische-staatsbaeder.web.mageprofis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soletherme.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189e2c119be0000040300473045022074158190ced369689e9f0b78c22875cecd0fc6ef46cc7bc5f4aedc1977a64797022100824c49bf9b91d2ca0802958ce460e6234493369a25835b5141177d813503f7680076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189e2c119d5000004030047304502210082cf06fe9d09c0fc17413fcd62ec7866ba47df3f69eae57080a608e8867d5718022027ac2e31e77e6f503584d8778b858b58d9782891541792f70a0aec7c29fb23f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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