kreuzfahrten.expedia.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2f:7f:ed:10:cb:e6:fd:dc:b4:61:22:30:52:01:a9:c8:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kreuzfahrten.expedia.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:7f:ed:10:cb:e6:fd:dc:b4:61:22:30:52:01:a9:c8:4e
Serial Number (int): 364612457842818610540842648339832053024846
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:d8:32:8d:52:df:12:00:c3:a2:a9:42:8d:91:60:14:8c:28:28:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:d8:48:9d:7c:fe:11:7b:13:9f:ea:49:1c:4f:cf:cb:85:69:a3:98
Fingerprint (sha256): 18:16:29:1b:65:01:c2:0a:62:73:75:00:c3:eb:70:fe:8d:db:3b:6e:b1:d0:29:1e:af:0b:6c:ab:71:0f:c1:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kreuzfahrten.expedia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kreuzfahrten.expedia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kreuzfahrten.expedia.de

Other certificates including the domain name expedia.de

(limited to 100 certificates)
www.expedia.com
ferienwohnung.expedia.at
discoverbudapest.expedia.co.uk
kreuzfahrten.expedia.de
www.expedia.com
tools.expedia.de
www.expedia.com
football.expedia.co.uk
Hollandtripbuilder.expedia.de
www.expedia.com
rtk-urlaub.expedia.de
www.expedia.com
buchung.expedia.de
access.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
apim.expedia.com
www.expedia.com
www.expedia.com
pauschalreisen.expedia.de
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
access.expedia.com
www.booking.cb.expedia.de
kreuzfahrten.expedia.de
www.expedia.com
kreuzfahrten.expedia.de
globetrotter.expedia.de
apim.expedia.com
www.expedia.com
crm.expedia.de
access.expedia.com
www.expedia.com
apim.int.expedia.com
inside.expedia.de
www.expedia.com
canada.expedia.co.uk
groupagents.expedia.de
Charterfluege.expedia.de
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
kreuzfahrten.expedia.de
www.expedia.com
inside.expedia.de
access.expedia.com
expedia.at
football.expedia.co.uk
visitjordan.expedia.co.uk
www.expedia.com
www.expedia.com
workfromhere.expedia.com
www.expedia.com
redirect.expecsp.com
www.expedia.com
kreuzfahrten.expedia.de
www.expedia.com
blog.expedia.fr
*.familienreisen.expedia.de
www.expedia.com
alberta.expedia.mx
kreuzfahrten.expedia.de
redirect.expecsp.com
EXPEDIA
access.expedia.com
kreuzfahrten.expedia.de
m.expedia.de
www.expedia.com
www.expedia.com
www.expedia.com
blog.expedia.dk
www.expedia.com
www.expedia.com
access.expedia.com
apim.int.expedia.com
www.expedia.com
buchung.expedia.de
www.expedia.com
www.expedia.com
www.expedia.com
guatemala.expedia.it
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
australiaconcierge.expedia.de
hangzhouholiday.expedia.co.uk
www.expedia.com

Certificate

The complete raw certificate details for kreuzfahrten.expedia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbQfKakPlBiZI3i6SSdj
1B8rrX/qEiJXswSk6BixZtIBMpr5VIN9ES+G6tyd8qLHrrsLuYlTEK4+l5irIhxs
fHKgEpHsLG+fDvYXXJMQqp3Xq8E+Gn+abT2zor+0gKV7wiB/osrz0MxaUy64ngl0
UhrGfdg2oVR6aE7rhlIQSYe2nczLhNfXqZmv/+erXmfa+13yENeBZ0vOiBbPdOwz
tYqNDqjipfPwHGN4qDHDfTqaTufDfKrgpXQidJzbcOd3ZGt2Gz+i+vTgP9LCNHT0
fFgeSqrNOSFi/zFgYu1z3IWPsu4D6NsZ4pxajJJyHMiPbNmlP2cx1K21U7M/fIr5
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364612457842818610540842648339832053024846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 07:03:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 07:03:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kreuzfahrten.expedia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16373562675823525427085840389262555659240526810968415528213806278027594476575169639116186042904454339356083802774681304835519388266096662351305848109325207385755209869210225523833593576959706803049368350813350930383377650635489215772591148210917922424350029643132101748942010025722928499455490288869119398014502501863484481998100896594563458141421808211213229634811766648624762037149045528127137357506991728046707079617206154117916778529066321537233916651958172649039578015383447403702424461225062429025675964724115490110715899004586294123647342550859632314322304246802268397740410869485506144331973028492929217001767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dd8328d52df1200c3a2a9428d9160148c2828f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreuzfahrten.expedia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166f2596c3f000004030046304402200af0877ee67e31bc1575d10dee4325d2677fd605b2b597756d1792db4ba6b70d0220015a332ae9d7356086d79987493b4522a1b80d17816b76bd6e49109f451dfd1b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f2596d7600000403004830460221008bb1cfe841809654104f20faff3d378126a890a0b7bb17f9c47cedfb554d6daf022100ce0ae7e804ebb257380d1e788b8be32fc885abc4948c851cec789c9732354228
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f1b930cb06190ba1162d91de410e0df489f2de400cc751555d4205fdd2eb8553dd2e0ff6d33d3f87608c443011b9827248e2ba1162824e52b0c4c11d8923162c741044bced607787d7656c655e07c1720d7b7f77bc6ec40b5e40b00d4f43bc012ae639b4d4c1e6b37e3ab7827dcb57e667770cf9851653d9eca7db182154976bea7aca6f29b3c5942ce505bc4a4800ad79536c89c4fadb3436b223fdecb63bfd40fe74ded49d729582965973761976573f29ca64f5b96e07decb0499371fe807743ccec2b8b305dbfa4d34d10ee52fece2ca2ce8329442f647d631ed1a51ed44cad53cdf5153a469e83404c95bae0404d705444c158257d3aed46181bf4d16c