checkmk.nasec.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:75:58:93:f7:f3:06:74:46:2b:08:59:f2:55:6a:ff:53 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=checkmk.nasec.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:75:58:93:f7:f3:06:74:46:2b:08:59:f2:55:6a:ff:53
Serial Number (int): 344521734922778891784745392001284974509907
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:d5:9f:39:c1:c4:0d:f2:cf:8d:03:7f:72:7a:87:be:5d:ee:09:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:83:e0:74:a3:a0:1d:ec:93:49:f6:54:fa:45:5f:be:03:c3:ec:db
Fingerprint (sha256): 16:29:56:d0:e9:ab:a2:1a:1e:f2:4c:a3:98:ae:55:48:af:fd:3a:e4:f4:5b:21:93:8c:68:27:5d:96:2d:17:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate checkmk.nasec.de

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkmk.nasec.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkmk.nasec.de
desktop.nasec.de
doc.thinking-machines.de
easyjob.seaside-productions.de
files.seaside-productions.de
ftp.seaside-productions.de
mail.web2desk.de
monitor.unistor.de
nasec.de
playground.aic-consult.de
s-t-e.com
task.nasec.de
tipico.seaside-productions.de
unistor.de
unistor.nasec.de
webmail.nasec.de
wiki.unistor.de
www.nasec.de
www.s-t-e.com
www.unistor.de
www.web2desk.de

Other certificates including the domain name nasec.de

(limited to 100 certificates)
seafile.nasec.de
seafile.nasec.de
desktop.nasec.de
unistor.de
unistor.de
checkmk.nasec.de
homewiki.nasec.de
srv05.nasec.de
outbox24.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
www.nasec.de
unistor.de
unistor.de
www.desktop.nasec.de
outbox24.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
unistor.de
wiki.unistor.de
checkmk.nasec.de
unistor.de
v22018102995674690.bestsrv.de
unistor.de
wiki.unistor.de
v22018102995674690.bestsrv.de
unistor.de
checkmk.nasec.de
unistor.de
digital-eastside.de
seafile.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
support.unistor.de
unistor.de
www.klopapierkrise.de
webmail.nasec.de
seafile.nasec.de
support.unistor.de
monitor.nasec.de
outbox24.de
checkmk.nasec.de
digital-eastside.de
seafile.nasec.de
wiki.nasec.de
outbox24.de
support.unistor.de
seafile.nasec.de
wiki.nasec.de
v22018102995674690.bestsrv.de
ssl.nasec.de
digital-eastside.de
unistor.de
unistor.de
files.stephi-engert.de
mail.s-t-e.com
seafile.nasec.de
wiki.unistor.de
srv05.nasec.de
seafile.nasec.de
outbox24.de
outbox24.de
wiki.nasec.de
desktop.nasec.de
unistor.de
v22018102995674690.bestsrv.de
seafile.nasec.de
desktop.nasec.de
vz.nasec.de
wiki.unistor.de
digital-eastside.de
seafile.nasec.de
unistor.de
v22018102995674690.bestsrv.de
digital-eastside.de
www.nasec.de
support.unistor.de
outbox24.de
outbox24.de
unistor.de
checkmk.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
seafile.nasec.de
wiki.unistor.de
support.unistor.de
files.stephi-engert.de
v22018102995674690.bestsrv.de
srv05.nasec.de
checkmk.nasec.de
seafile.nasec.de
webmail.nasec.de
seafile.nasec.de

Certificate

The complete raw certificate details for checkmk.nasec.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344521734922778891784745392001284974509907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 09:09:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 09:09:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkmk.nasec.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786536922666241323225008014168709351617654383566291050594112473420723183406220190787050040038144248160724598529931775843031127090550102413339179056283732345396156914033986488169360366158778331975587583131848758794514990190361639688780905684228040027528763088845658434931155232516943716373422339374103007242427963381573102667834506140385451022703527696807910061587437913575111784665549672163589504482306523119115883767688888700395693093163741262782823794899606476514744471875756117136855336893464513772170252425936639428442914103669423098134730628317741836397710335855191177124434514649963869145685124429520344160415633113851540187124434873037037107485734009268375689337787866305111956085472588615877206257791087711938227490178989839429656790478152971613754764433652758594369866457724272973731564379632649465613115351632626023531909385055989924443676164807098961336139217541384544652381461488664431897123514964262091884498991085073113164244522393590324569559178600305210531612728656465989025926591219046295892603412586603758967836039452832768239632230634069769706892423456050534970340984930093000554282476729899745940498640760172183377033978146148583199695688051006360998178285317179233738161873029940432839001314860443230384718400279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afd59f39c1c40df2cf8d037f727a87be5dee09ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.thinking-machines.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyjob.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.aic-consult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'task.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipico.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web2desk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016551a91b160000040300473045022100baabd2ad696614eb642dad6b23cebeb971bb7049c8f71b87825410bae7e5d7c30220694120f360fb32aefeb364da3b1d74d065495750d0e4681e7f664e39463ff370007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016551a91cd20000040300463044022037c6c9876dd27fbe24678dc41616b6028aa055704175042527a2ee09c59c3bac022064df8fd34554b63ae51d9870b7ad578509690c3f2fe132b932e9d6f8d7087ca0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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