adventskalender.idowa.de

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:5a:43:96:a6:2e:68:22:55:ef:58:6a:15:ef:8a:f9:af was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=adventskalender.idowa.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:5a:43:96:a6:2e:68:22:55:ef:58:6a:15:ef:8a:f9:af
Serial Number (int): 286978016773388966687638393986120099232175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:08:cc:f3:df:a6:4c:67:ee:9a:91:dc:11:8b:d1:04:51:45:89:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:a8:31:01:72:e8:d4:ae:31:3a:63:52:08:81:54:0d:a4:03:b8:90
Fingerprint (sha256): 17:9c:5f:43:05:51:3c:e2:16:5c:5b:fd:ee:87:51:0e:bf:3d:1d:56:02:5b:7a:41:5d:62:cf:7b:05:ed:e9:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate adventskalender.idowa.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adventskalender.idowa.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventskalender.idowa.de
www.adventskalender.idowa.de

Other certificates including the domain name idowa.de

(limited to 100 certificates)
*.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
singles.idowa.de
www.piwik.idowa.de
ads.russmedia.com
online-beilage.idowa.de
rest.24.idowa.de
servicedesk.monaghancoco.ie
support.bong.com.pl
bookings.adnuntius.com
helpdesk.porvairfiltration.com
helpdesk.llyc.global
idowa.plus
bookings.adnuntius.com
diaschau.idowa.de
idowa.plus
bookings.adnuntius.com
matomo.idowa.de
single-couch.de
shoprelaunch.idowa.de
*.idowa.de
www.adventskalender.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
bookings.adnuntius.com
adventskalender.idowa.de
idowa.plus
single-couch.de
servicedesk.monaghancoco.ie
app-abo.idowa.de
bookings.adnuntius.com
zuhause.idowa.de
servicedesk.monaghancoco.ie
bookings.adnuntius.com
*.idowa.de
service.zuhause.idowa.de
pomoc.lekam.pl
leserservice.idowa.de
singles.idowa.de
*.24.idowa.de
servicedesk.endrich.com
www.adventskalender.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
a.westfalen-blatt.de
singles.idowa.de
*.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
leserservice.idowa.de
*.idowa.de
service.zuhause.idowa.de
ads.russmedia.com
singles.idowa.de
www.piwik.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
bookings.adnuntius.com
*.idowa.de
bookings.adnuntius.com
servicedesk.monaghancoco.ie
www.online-beilage.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
matomo.idowa.de
bookings.adnuntius.com
single-couch.de
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
bookings.adnuntius.com
singles.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
diaschau.idowa.de
singles.idowa.de
bookings.adnuntius.com
single-couch.de
bitbucket.idowa.de
singles.idowa.de
zuhause.idowa.de
bookings.adnuntius.com
bookings.adnuntius.com
www.online-beilage.idowa.de
a.westfalen-blatt.de
leserservice.idowa.de
www.piwik.idowa.de
idowa.plus
*.idowa.de
*.24.idowa.de
bookings.adnuntius.com
a.westfalen-blatt.de
servicedesk.monaghancoco.ie
singles.idowa.de
cdnle.balancer0.24.idowa.de
singles.idowa.de
pomoc.lekam.pl
bookings.adnuntius.com
*.idowa.de
bookings.adnuntius.com

Certificate

The complete raw certificate details for adventskalender.idowa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1IpC5ROMQQ7BqqLlH2B
hSvLzp8AcKUukiCCdIlyCtzyBOjyCiKhmwKFS3vesXtD2K5SiMhw/LndN44EUrRW
0B6MiuKoBa3cO5THL1kk78RfYktgQuwNPQ6+x7v18DdEHVf+jbAMONxrzLIY3N96
FjzHBWVZm6OraWhclwGEKZoi+fXcUmP5AST9QI+trENS6bkovqrm7bRzWM8u09lu
OvYGsqN3OI8AEgbGV6QbjWNZvXeSNTbsq3fQteWPawW2k5T5VwksTcm4K4WZxOem
NGaITrvHfLytBkAK/KCvgkPB0weMwfrFAUjZm1E4YzpOmpzxtCZS/sv01Pr4RtM3
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286978016773388966687638393986120099232175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 16:08:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 16:08:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adventskalender.idowa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26171843898151223483103874518543768944913241014882110054539649855197388658201953857670193945859571854565402581740584460733620342505012672783523278876612363522718539318697305222892472765477188889457924324233203551367224723553284115939676230752571843728467229377134669564710492475280445456076207678028368269239956874557903316426632705431726216690204552660224442735571682894864594388097941458195687413149081130554057974427632155046551267514261046989989885488485163190002963046500465070952096712154629932611165012608063579873387042911091096390615383137800286107872400299345459299036767657944970679420676192849382805288851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e408ccf3dfa64c67ee9a91dc118bd1045145892a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventskalender.idowa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventskalender.idowa.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d27d8369c0000040300483046022100f249eaf872a957806fc7ae78ff9ff4a72aa214101d1a638b424b6c2faad33258022100895ea409581491f5f4abeb79eb070cf0ffbf2949bd681ed04403bc88ca1b1fcb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d27d8369c0000040300473045022100aa8df6abfd48d49aece64a92935135cbd8c18e3e76401910e353c4c071bd36310220127010c8739ca367e63e3d3f93b2a0fb67695061eb44d061b8e7146cd3d8dc3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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