www.kreis-goerlitz.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:e0:3c:5e:90:29:e3:73:5e:54:69:c2:db:8c:28:e6:93 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kreis-goerlitz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:e0:3c:5e:90:29:e3:73:5e:54:69:c2:db:8c:28:e6:93
Serial Number (int): 287836660575028656873426742104236856239763
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:82:37:13:ba:32:45:76:42:f2:df:c8:8e:e3:65:82:52:9e:69:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:ad:24:a4:83:27:d2:55:02:48:26:3e:03:11:5b:96:af:7f:cb:94
Fingerprint (sha256): 18:83:96:98:b8:bb:e3:e0:9b:13:98:73:70:71:be:38:61:ed:fc:32:ea:57:80:14:0d:d2:0c:38:b9:6d:9f:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kreis-goerlitz.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kreis-goerlitz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kreis-goerlitz.de
landkreis.app
www.kreis-goerlitz.de

Other certificates including the domain name kreis-goerlitz.de

(limited to 100 certificates)
magazine.kueche-co.de
magazin.rollstuhlsport.de
digital.industrielle-automation.net
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kreis-goerlitz.de
digital.derkonstrukteur.de
kiosk.laloupe.com
kiosk.miles-magazine.be
kiosk.laloupe.com
www.kreis-goerlitz.de
epaper.immosale24.net
digital.foerdern-und-heben.de
publikationen.kreis-goerlitz.de
digital.derbetriebsleiter.de
digital.derbetriebsleiter.de
epaper.immosale24.net
digital.derbetriebsleiter.de
kreis-goerlitz.de
digital.derbetriebsleiter.de
bibliothek.bregenzerfestspiele.com
kiosk.laloupe.com
magazine.kueche-co.de
cloud.kreis-goerlitz.de
kreis-goerlitz.de
epaper.krombacher.de
webkiosk.mvz-atrium.de
kiosk.miles-magazine.be
webkiosk.con-nexi.de
www.kreis-goerlitz.de
digital.foerdern-und-heben.de
www.kreis-goerlitz.de
kiosk.laloupe.com
digital.derkonstrukteur.de
digital.derkonstrukteur.de
kiosk.miles-magazine.be
bibliothek.bregenzerfestspiele.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
digital.foerdern-und-heben.de
magazine.kueche-co.de
kiosk.miles-magazine.be
www.kreis-goerlitz.de
kiosk.astrosofa.com
webkiosk.con-nexi.de
kreis-goerlitz.de
kiosk.laloupe.com
digital.industrielle-automation.net
www.kreis-goerlitz.de
digital.foerdern-und-heben.de
epaper.immosale24.net
kiosk.miles-magazine.be
epaper.immosale24.net
kiosk.miles-magazine.be
magazine.kueche-co.de
webkiosk.mvz-atrium.de
digital.derkonstrukteur.de
webkiosk.con-nexi.de
publikationen.kreis-goerlitz.de
magazine.kueche-co.de
bibliothek.bregenzerfestspiele.com
webkiosk.con-nexi.de
kiosk.miles-magazine.be
webkiosk.con-nexi.de
kiosk.miles-magazine.be
digital.derbetriebsleiter.de
epaper.immosale24.net
digital.derbetriebsleiter.de
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
webkiosk.con-nexi.de
digital.derbetriebsleiter.de
digital.derbetriebsleiter.de
katalog.ud-shop.de
magazine.kueche-co.de
webkiosk.mvz-atrium.de
bibliothek.bregenzerfestspiele.com
kiosk.miles-magazine.be
digital.foerdern-und-heben.de
epaper.immosale24.net
magazine.kueche-co.de
webkiosk.mvz-atrium.de
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
digital.foerdern-und-heben.de
digital.derbetriebsleiter.de
digital.derkonstrukteur.de
kiosk.laloupe.com
kiosk.miles-magazine.be
digital.derbetriebsleiter.de
kreis-goerlitz.de
digital.derkonstrukteur.de
webkiosk.mvz-atrium.de
epaper.immosale24.net
epaper.krombacher.de
kreis-goerlitz.de
digital.derbetriebsleiter.de
webkiosk.con-nexi.de

Certificate

The complete raw certificate details for www.kreis-goerlitz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfuwIRakJMr6wmIgvCNM
dCpYoPthTHwCPtZz5vdpZey+a7x/0qR4lvz2XbNGizYGPus3VKJQyKqH/2PEsSzC
CJbDYBh/hiZ1cnq1FdxkFo+L920PSJV+F5c4AMjmtsbqv15yGlcj7d5S1JmC8C2B
1l6U9lZlUtwAdXOYJTbWCp6vai3RybrWzvCjXCsxkLJcbHyhNE/+TETCHyXuEbyT
NDf8PqALmS0ITaNZl8/BOa+S2ZuIZzMtXG4yxkZ+2hbpLBMl4rMjUSohjwHOAXly
o9Psl31FT1rtgkPh+Q9PK7bPELsU5Cosno5E5jrn3UoLUn+E1iWxvb+rNIzo46C2
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287836660575028656873426742104236856239763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 04:29:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 04:29:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kreis-goerlitz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24488104839377232045620012319993482551147251689475851595734864746463218120087946924309747699481507785548330716100118116328067721616725247576822815108565252632126855470147699242543725408239466952134802439991152456462780111334797785628274176289266840788139167223807245426554534000829327445491780139578159887658252376248829475225548277886604909661312362792940391536231798887904991212022059827380830410948590742124059873485613549997723221046800983692333692939397229410287574568489426900749527461094594495041991060460940270277699755715282281281999520507233361369294480837942239891477655842419201495915541782643364123948623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9823713ba32457642f2dfc88ee36582529e694f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreis-goerlitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landkreis.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreis-goerlitz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017105dda03700000403004830460221008db96949d94aa34de2f8cf8a3ef286601a56094a43e5140c47a68eddebda5e260221008a49a3ed86c122a8121b16b4747dde79a6e4aa15036a8548f96b5e06b547dd82007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017105dda05c0000040300473045022100e3363193ff6e77907c368bc7b06c5f35da25b980b2e5ddd62bdcf45db56f94850220481dcf2ec80756c42039db1ad01c6dfb460dfe9799bcf2bc9adf3909ead76a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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