www.goppingen.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:95:ca:9b:36:3d:c2:c1:ed:10:dc:af:02:29:3b:47:e6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.goppingen.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:95:ca:9b:36:3d:c2:c1:ed:10:dc:af:02:29:3b:47:e6
Serial Number (int): 277188953637052209134207682668561014933478
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:bc:f2:ba:73:02:b9:fe:08:86:45:d9:8c:a7:96:c0:f7:12:76:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:c2:9d:ca:74:00:20:fe:35:4e:ed:b8:fc:a2:57:bb:58:93:7a:1a
Fingerprint (sha256): 16:3f:60:13:b9:c4:9f:f9:8c:4f:ec:14:4f:25:51:9a:84:ba:15:c6:1d:39:88:15:f0:2c:6e:4a:5e:91:4d:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.goppingen.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.goppingen.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.goppingen.org

Other certificates including the domain name goppingen.org

(limited to 100 certificates)
goppingen.org
goppingen.org
www.goppingen.org
www.goppingen.org
ataui.org
www.medicsuperstore.com
goppingen.org
ataui.org
www.goppingen.org
goppingen.org
www.goppingen.org
ataui.org
www.goppingen.org
goppingen.org
goppingen.org
goppingen.org
goppingen.org
goppingen.org

Certificate

The complete raw certificate details for www.goppingen.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISAy6Vyps2PcLB7RDcrwIpO0fmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjIxNzQ0MjRaFw0x
OTA2MjAxNzQ0MjRaMBwxGjAYBgNVBAMTEXd3dy5nb3BwaW5nZW4ub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsowmORZjS0fmueToFIE8r1+9Dqjf
UDnUe+sqTEKWbq+xTV16l9oejabfVCsEWSAlMtI3HmjVSPoAlHQSnXJLEngFX1JK
fhZaRFhDJptDohPWhZnoPihAMg61SXCoyPpZmSlcPxRpTb2hSt50SqkwbKdkeNvb
RLx47pfoFuq+LxV4eqoLqvoEru51Xqibd4mgvHMcjASoRTokp1tUkHyC3saBYbci
06lZ5n2AHpRT9ZwfVEmNEVNsLDsq/Fnca7mgveFWE6r+0rgbr6B52KL3lsoD/Ivo
ueFu4YWFVBQo8xwmts1MUSnzlgrm21p46M4N2OTMT069zUNv4NiAmHbLPXhT0YjO
/OlRxiC7ti2ehc5FlL4zsFqejxtM62EeJXsMxKOx+M3ogGsfvwUxxCS1Ks8ezfCw
l54o3e2Qux/fPs+uSblq8Ffm6Mk5xRDTOlh2n2eJWMajpqncUozR/khO7FUhoJc5
kTHEt3UsJkaSVjH6J61A0sBtXtUnkYAKItZUxG0QFz2A6CeZ78Gqkp6lBXJwI9bH
qgsSgqzdlWKr8pe37Nz0BO9/DHLNqvgfMfJZ3Oe7iu0Dx43dRH021tkHIxJQjUor
QC2ZRGJdxTSIiH8g07a2UjDPiJ6tXJ1AOwpskEPJUo9PNYrA8WtfH49s9jpRpnvH
Fl81wzcRuAH1UA0CAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
6rzyunMCuf4IhkXZjKeWwPcSdgowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cuZ29wcGluZ2Vu
Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aaa36RIAAAQDAEcwRQIhAIxsvsr0nvto+PBwyZK5I3WUliGD687OvjA2ZSnPaQFL
AiBuHfLP6vF5sHQu++dPes51hy9heL6egJ8II9VKA9eQoAB3ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaaa3618AAAQDAEgwRgIhAOQEVECZmgaB
4urvggA3PLkEOfm17xd8prUYGZMHU/X7AiEA3/l9Rfgo+RUSGPsjAh6mtemRT5/F
IQWGhYr/+gWg0CgwDQYJKoZIhvcNAQELBQADggEBAJJNAVC3j4WN/6gm58haHwVd
xdGLvNUFt4GGDNPS3AvTk4O2fZJ5Dd7e3LAmEg2+FhGdHZFs3zcWWgG/Z5V8i+tD
kfTKaNznAEmY6s3ZrjQSu5biRPQ5GnYqgBviwmAyDVdbW7NfFGkKAWViziEIrxJo
rmCgr9ZitzXR0aH6ZNz59r6OX3tBgVtHSgcCP4DInrYk5Q962X304Y2ltz+yuEBv
zYu9XyyIAJT+PBV+leNtWEzamCwJc+WErZNrvhpVDJgLB2di/IV/j5okv5tOpw8j
jYsiRffsr3AAppHwzyMWX5JpODzXP01qLIHBn+/rR5ojcJKb6c9NKRITfzlf7Jw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277188953637052209134207682668561014933478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 17:44:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 17:44:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.goppingen.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728410078855268301355045652912670222515852762527625385797103705972993192650874534235906009276224384983181542070211133380854409039524875175641423840190175787982906801693619452291601251641200121254719764279638507926791930032302738506618613032059359146296876990952913134703428949875057194604724662643295305568159799951196468664825424394380417286889219628924211401636034184030183150079278231234469690045586220362028106316523037056704110598444262676570846671595029406841584740139014619547431213852097534625786544638113945868785269136475417946578267488401512765077760785646556398017757890022575317796844550631420974688807209087478153888751171714042171474189931872401591472891199429249728029818840803725092390197335272190576399885174901007161774596943583639579468893949396372443389040327612463854704788317059802485876491799186264214051057943825198876160364219857763302094561474048952718396220347320970585003466981431508317100395559015412240650546657310662730004370748234166285576132693012995930795875653861135643638011276701128697824694530413894014943888758597366835266988085803200446488431220017995781862462901411479993679391333656324485663403045642225205468915186148610957428035058974988739349461213971993566034559807320615092682218622989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eabcf2ba7302b9fe088645d98ca796c0f712760a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goppingen.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a6b7e91200000403004730450221008c6cbecaf49efb68f8f070c992b9237594962183ebcecebe30366529cf69014b02206e1df2cfeaf179b0742efbe74f7ace75872f6178be9e809f0823d54a03d790a0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a6b7eb5f0000040300483046022100e4045440999a0681e2eaef8200373cb90439f9b5ef177ca6b51819930753f5fb022100dff97d45f828f9151218fb23021ea6b5e9914f9fc5210586858afffa05a0d028
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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