franchise.test.kueche-co.de

Issued by R3

About this certificate

This digital certificate with serial number 04:cf:61:f4:41:01:36:2a:5d:2b:dd:0c:55:3c:3b:13:28:87 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=franchise.test.kueche-co.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:61:f4:41:01:36:2a:5d:2b:dd:0c:55:3c:3b:13:28:87
Serial Number (int): 419017797034152483666304011918505340512391
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:40:f7:dc:37:54:dd:84:3f:65:4c:78:c2:fc:dc:1f:7d:66:77:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:ae:21:67:c7:10:15:5d:43:9f:e4:f3:35:ca:e8:15:9d:98:3f:06
Fingerprint (sha256): 17:df:2e:32:34:29:c3:d4:93:49:dd:99:bb:da:8e:f9:a4:8f:54:9c:08:d6:f4:f4:fc:66:00:1c:59:18:a4:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate franchise.test.kueche-co.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for franchise.test.kueche-co.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

franchise.test.kueche-co.de
franchise.test.kuecheco.at

Other certificates including the domain name kueche-co.de

(limited to 100 certificates)
tennis.yumpu100.com
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
digital.industrielle-automation.net
webkiosk.con-nexi.de
magazine.kueche-co.de
epaper.krombacher.de
magazine.kueche-co.de
webkiosk.wonendoejezo.com
kiosk.laloupe.com
mediathek.stiftung-liebenau.de
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.miles-magazine.be
*.kueche-co.de
digital.derkonstrukteur.de
online-katalog.baude.com
kiosk.laloupe.com
webkiosk.wonendoejezo.com
kiosk.laloupe.com
e-paper.moinmoin.de
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
ssl.yumpu.com
*.kueche-co.de
epaper.immosale24.net
kiosk.laloupe.com
kiosk.laloupe.com
digital.foerdern-und-heben.de
kiosk.laloupe.com
zahlung.kueche-co.de
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
digital.derbetriebsleiter.de
magazin.rollstuhlsport.de
epaper.krombacher.de
magazine.kueche-co.de
prospekte.intersport.de
digital.derbetriebsleiter.de
magazine.kueche-co.de
epaper.immosale24.net
digital.derbetriebsleiter.de
epaper.krombacher.de
magazine.kueche-co.de
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
online-katalog.baude.com
magazine.kueche-co.de
magazine.kueche-co.de
digital.derbetriebsleiter.de
tennis.yumpu100.com
ssl.yumpu.com
epaper.glasmarte.at
kiosk.storyboard.de
tennis.yumpu100.com
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
tennis.yumpu100.com
kiosk.laloupe.com
ams-api.kueche-co.de
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
bibliothek.bregenzerfestspiele.com
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.miles-magazine.be
tennis.yumpu100.com
tennis.yumpu100.com
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
epaper.krombacher.de
franchise.test.kueche-co.de
franchise.test.kueche-co.de
epaper.krombacher.de
webkiosk.mvz-atrium.de
kiosk.miles-magazine.be
magazin.rollstuhlsport.de
tennis.yumpu100.com
magazine.kueche-co.de
webkiosk.con-nexi.de
ssl.yumpu.com
ssl.yumpu.com
franchise.test.kueche-co.de
ssl.yumpu.com
kiosk.miles-magazine.be
kueche-co.marcapo.com
online-katalog.baude.com
digital.foerdern-und-heben.de
kiosk.laloupe.com
digital.derkonstrukteur.de
digital.derkonstrukteur.de
kiosk.laloupe.com

Certificate

The complete raw certificate details for franchise.test.kueche-co.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419017797034152483666304011918505340512391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 05:41:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 05:41:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'franchise.test.kueche-co.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 968436700140091644455577389542081391992967777715965999385208135904587443263150131716493555709420817627946224234879259864828531830001677346082632880732765601855098921941255496053900489404661382633707873348440279047164299071223307837874228141770854685981025272591652738642270135883499543893693930627470592891528517110321244101620184284593540455776783651338799829370334178063076605914863731262673785801870151638873588312703896945351481652801452700187258781544224944027829956191007506049483466622294689323816476558623761518206941338444671217034394821584444023762042038375869436779795769400311720467952553746866605139921596337067996838754149344688776112056776627166760199819014665715216415730935733716623778605216467559704300351307492593227643253371825680384315670604548781258987315665637393785023019231369322535007970062976112394939006902328899370191200141265033596287080616099784319614072500396090247447454150281755141765625839294785092553923111560455375181280806264907867144940811394511831124617046411751712514114751145739286577646923313910867669270493977698622112870665417279260297678779370519782107556930746741297111043679054216857581533928716447330419805085979059753445754201543442056796721363195331663607682798639449882129032474291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f240f7dc3754dd843f654c78c2fcdc1f7d667773
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.test.kueche-co.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.test.kuecheco.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017be30a61770000040300473045022100b012c56669edfcadd28e16fe441a1a533b17b7653f6b93f7549b095c3fad268102200a139a72769958bb1445da5fee129746683269934fe381938c4f3bb0fcd4e71b0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017be30a61950000040300473045022100b2ef4c82d9f78f1942f3d9cfec76372109ac6e55a894156415b1dfb3825290f102204b4ca20e3692ae43b5ba7ded42c6ee5cdb836c00deac9ac75534a15f407bff41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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