qpakfvmvnanewmail.werkstattsystem.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3e:3b:32:47:8f:2d:85:10:d5:c2:d8:14:28:8b:84:5b:e5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=qpakfvmvnanewmail.werkstattsystem.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:3e:3b:32:47:8f:2d:85:10:d5:c2:d8:14:28:8b:84:5b:e5Serial Number (int): 369625335994128204889993004669794913639397
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9d:24:5f:4e:a8:c3:41:05:9b:da:59:c6:a3:c3:59:39:3f:5e:cb:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 78:91:50:65:eb:2b:99:d5:43:65:fb:71:3b:1c:de:df:7d:4d:4e:a8
Fingerprint (sha256): 16:59:40:54:c6:d6:98:37:2c:bd:00:bb:2c:ab:c3:d0:a5:b5:d6:2b:90:ca:1e:d3:d8:7e:37:f2:8f:75:81:7a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate qpakfvmvnanewmail.werkstattsystem.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qpakfvmvnanewmail.werkstattsystem.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fraeuleinschulterfrei.de
qpakfvmvnanewmail.werkstattsystem.com
qpakfvmvnanewmail.werkstattsystem.com
Other certificates including the domain name werkstattsystem.com
(limited to 100 certificates)
develop.werkstattsystem.com
angelatillhon.lima-city.de
werkstattsystem.com
tuqroevbtdicbel.knockers-2.at
foebomysql.werkstattsystem.com
www.werkstattsystem.com
qpakfvmvnanewmail.werkstattsystem.com
qetnycms.werkstattsystem.com
develop.werkstattsystem.com
www.paasi.lima-city.de
ehuwvsitemap.werkstattsystem.com
ailrelay.werkstattsystem.com
bvb-fanclub-nr1-in-sundern.lima-city.de
www.outlets-stores.de
www.werkstattsystem.com
sandra-nele.lima-city.de
r-mx02.werkstattsystem.com
develop.werkstattsystem.com
magento.digistop.de
xjjshmysql.werkstattsystem.com
alidai.lima-city.de
as-projekt.net
webshop.markuskrispel.eu
www.abacus15.lima-city.de
www.werkstattsystem.com
wp.anycraft.net
isosqmailin.werkstattsystem.com
xycyolydwdeqwlx.sidbrowser.com
werkstattsystem.com
hhewrgw.werkstattsystem.com
elastic.werkstattsystem.com
werkstattsystem.com
testing.richterpaul.de
qxntdmail8.werkstattsystem.com
narengi.lima-city.de
werkstattsystem.com
webshop.fliesen-keil.de
oxwflcorreo.werkstattsystem.com
werkstattsystem.com
www.nicolaidomenicobleher.de
werkstattsystem.com
hjegnemail.werkstattsystem.com
ulzxirelay2.werkstattsystem.com
werkstattsystem.com
www.werkstattsystem.com
feaqmgw.werkstattsystem.com
raynamic.laroussi-medien.ch
questgames.lima-city.de
gateway.werkstattsystem.com
www.db1.lima-city.de
www.rettungshunde-mantrailer-berlin.de
angelatillhon.lima-city.de
werkstattsystem.com
tuqroevbtdicbel.knockers-2.at
foebomysql.werkstattsystem.com
www.werkstattsystem.com
qpakfvmvnanewmail.werkstattsystem.com
qetnycms.werkstattsystem.com
develop.werkstattsystem.com
www.paasi.lima-city.de
ehuwvsitemap.werkstattsystem.com
ailrelay.werkstattsystem.com
bvb-fanclub-nr1-in-sundern.lima-city.de
www.outlets-stores.de
www.werkstattsystem.com
sandra-nele.lima-city.de
r-mx02.werkstattsystem.com
develop.werkstattsystem.com
magento.digistop.de
xjjshmysql.werkstattsystem.com
alidai.lima-city.de
as-projekt.net
webshop.markuskrispel.eu
www.abacus15.lima-city.de
www.werkstattsystem.com
wp.anycraft.net
isosqmailin.werkstattsystem.com
xycyolydwdeqwlx.sidbrowser.com
werkstattsystem.com
hhewrgw.werkstattsystem.com
elastic.werkstattsystem.com
werkstattsystem.com
testing.richterpaul.de
qxntdmail8.werkstattsystem.com
narengi.lima-city.de
werkstattsystem.com
webshop.fliesen-keil.de
oxwflcorreo.werkstattsystem.com
werkstattsystem.com
www.nicolaidomenicobleher.de
werkstattsystem.com
hjegnemail.werkstattsystem.com
ulzxirelay2.werkstattsystem.com
werkstattsystem.com
www.werkstattsystem.com
feaqmgw.werkstattsystem.com
raynamic.laroussi-medien.ch
questgames.lima-city.de
gateway.werkstattsystem.com
www.db1.lima-city.de
www.rettungshunde-mantrailer-berlin.de
Certificate
The complete raw certificate details for qpakfvmvnanewmail.werkstattsystem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEZTCCA02gAwIBAgISBD47MkePLYUQ1cLYFCiLhFvlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTgwNTI4NDlaFw0yNDA4MTYwNTI4NDhaMDAxLjAsBgNVBAMT JXFwYWtmdm12bmFuZXdtYWlsLndlcmtzdGF0dHN5c3RlbS5jb20wWTATBgcqhkjO PQIBBggqhkjOPQMBBwNCAATliKj8ilez9/vmM+0xnNU92Ibd9LaNaEk6H2wr36hg IaSjhIz9DZS0p2YrbeIoN4g9BKdF4788xETQBXaGKt1Wo4ICQDCCAjwwDgYDVR0P AQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSdJF9OqMNBBZvaWcajw1k5P17L4zAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzBKBgNVHREEQzBBghhmcmFldWxlaW5zY2h1bHRlcmZyZWku ZGWCJXFwYWtmdm12bmFuZXdtYWlsLndlcmtzdGF0dHN5c3RlbS5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQAZmBBxCfDW Ui4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY+KY4jXAAAEAwBGMEQCICo+Anwn 0RSByCSzPBscq9V0nhC8ujXyGIvoIDs6vqRpAiBez230YL2OoId2WKLYpHlWT7ok L1anbImaQd6cV94FKQB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb AAABj4pjiM4AAAQDAEcwRQIgR0VxxaxvAKXhKHcpm6zyO0IR6mtfziZM+NzAyapB xVcCIQDUi+3w3TfCVUJ/3n8zWYoOmKdsUEyzgP7wYVTzsOrwqzANBgkqhkiG9w0B AQsFAAOCAQEAq7QUjwiTZeDU4g3bxVY0EPeHR/sBQ3PGQ0rXx5UhiSeMUHZtCM4R 3s2EVxIxsWm6EijlvZHxHyjOwuId/INJz5eVcP3GLlBkgKzMWliJYV5HGw8R45fL onx+knmD4sBTQtU51vHeYzZIMEnIo7NB375lR4Y4I2miCMhPwaDdF6Q5+U6ewEDE 7yi9aOEMIv5spZXCcnWMMzhf4IK4Xd4ftnMpGd1gEH+ZOFKxzmX/5qmpg2u4cccb 4As+/D65M/Gl2nCSQeo8djMAGEP4WsdJjzo31TZuHDzdWt9pw7M3L1LzmQCKQDx+ KGA+Gy80ogoB08GihqhIAQk6UaoQFQf20g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5Yio/IpXs/f75jPtMZzVPdiG3fS2 jWhJOh9sK9+oYCGko4SM/Q2UtKdmK23iKDeIPQSnReO/PMRE0AV2hirdVg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369625335994128204889993004669794913639397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 05:28:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 05:28:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qpakfvmvnanewmail.werkstattsystem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004e588a8fc8a57b3f7fbe633ed319cd53dd886ddf4b68d68493a1f6c2bdfa86021a4a3848cfd0d94b4a7662b6de22837883d04a745e3bf3cc444d00576862add56 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9d245f4ea8c341059bda59c6a3c359393f5ecbe3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraeuleinschulterfrei.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpakfvmvnanewmail.werkstattsystem.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f8a6388d7000004030046304402202a3e027c27d11481c824b33c1b1cabd5749e10bcba35f2188be8203b3abea46902205ecf6df460bd8ea0877658a2d8a479564fba242f56a76c899a41de9c57de0529007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f8a6388ce00000403004730450220474571c5ac6f00a5e12877299bacf23b4211ea6b5fce264cf8dcc0c9aa41c557022100d48bedf0dd37c255427fde7f33598a0e98a76c504cb380fef06154f3b0eaf0ab . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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