www.robin-albrecht.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:47:b9:94:91:0b:2c:c1:0f:bb:c8:85:b1:6b:a0:dd:9b:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.robin-albrecht.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:47:b9:94:91:0b:2c:c1:0f:bb:c8:85:b1:6b:a0:dd:9b:f3
Serial Number (int): 372855870359417643137935353484613479406579
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:3f:9b:30:a5:a5:ee:ef:ed:fd:5b:f0:66:89:9d:75:c2:28:0e:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:d1:b8:55:5a:bf:5e:a1:7c:d0:08:1e:63:87:10:7e:0c:e1:2c:af
Fingerprint (sha256): 17:e6:31:88:c7:a7:6b:ae:90:12:dd:ad:ef:fa:87:bc:09:53:62:56:01:5e:3a:f9:7a:8f:64:19:ca:7d:72:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.robin-albrecht.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.robin-albrecht.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.robin-albrecht.de

Other certificates including the domain name robin-albrecht.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.robin-albrecht.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372855870359417643137935353484613479406579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 21:01:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 21:01:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.robin-albrecht.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957594694824832212098033047719305441000702183493430591798011851238936580316470505702875436580107307727402408393076263563405009959055083569903278621765885855646693570042283066497657864836626430159385350733583103819953148255642079435334800133712685646049940772264527665538882867124199955766600383519441449921247577287514819012130506540540459390623066774406434015436797896796722710631802518789009949408937622423559575609230775586745774703394583193758563974126413079728206529942698412593252736351213670497729461038301052003700247912582211220457139560993065511920777266037598973000272230107796159028382318013357209680107692952694578245909943339223805196022722469717317832334000469749092958434571158655982804946577401163488153369915118099622072367464734078895586962699749822040176965934055605678420189425466205573202699651561235219033131546707584507079649838535941811182890545381577301116523507849202110805842155800981343840058449087681742205406671523351176751590932243802062980668095117146447441589620929255429842389077087472119576519237408649445125835473096249751308330883152725039839678889203579482558849224737080772177681147927541745480029734070068648510321792599319076053691065655565879825377927623450527512368418998913788050592783431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f43f9b30a5a5eeefedfd5bf066899d75c2280ea6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robin-albrecht.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166ad3ef9be000004030046304402200ecc85e357a29524d16e810b4974343486db57c184cb0d9ffaa0f985575c749302202dea0c9b165709f82d168c678176a30aad101f5277e0d564e25ba0e6496b39bc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166ad3ef9b20000040300473045022100ab0316ff39773767ea966911a093d7a78b1c94596def17b049a88b41631ed06b0220462a38441426359df4825239315784e7cd6441fbee382e344f1f0e8834c7ab3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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