www.vfr-bulletin.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:fd:14:60:34:30:9e:b4:85:97:f4:43:7f:4d:10:67:3a:14 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.vfr-bulletin.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fd:14:60:34:30:9e:b4:85:97:f4:43:7f:4d:10:67:3a:14Serial Number (int): 347455380705229656916664544289076309080596
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 95:e6:c6:a7:43:dc:b7:28:3b:14:a1:ea:f0:5b:b0:88:b3:a6:1b:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b2:4a:7b:98:4b:c6:73:06:58:90:82:e5:a0:53:6a:3b:e9:ba:91:e0
Fingerprint (sha256): 19:1b:0f:02:ed:94:fe:3e:b4:ab:8a:46:98:45:37:25:5d:01:f2:22:8c:58:18:59:25:f9:a4:cd:92:a4:34:b7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.vfr-bulletin.de
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.vfr-bulletin.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vfr-bulletin.de
vfr.eaip.de
visualflightguide.de
www.vfr-bulletin.de
www.visualflightguide.de
vfr.eaip.de
visualflightguide.de
www.vfr-bulletin.de
www.visualflightguide.de
Other certificates including the domain name vfr-bulletin.de
(limited to 100 certificates)
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
www.vfr-bulletin.de
www.vfr-bulletin.de
vfr-bulletin.de
Certificate
The complete raw certificate details for www.vfr-bulletin.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISA/0UYDQwnrSFl/RDf00QZzoUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMjkxMzE3MzhaFw0x ODAzMjkxMzE3MzhaMB4xHDAaBgNVBAMTE3d3dy52ZnItYnVsbGV0aW4uZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNm/LWenvswl1pohMMF6QSgplu 0FXXzmPgpNCLcMzJx7hADOYhJ/Ysct4t7l2ZlOUhCynqYvUWZP6QuM/d5gXg27M1 kYfPLBIOHtGxAAa/+Crqm1ZwwnrxxmoZpdXtcN1qLrrjkdkdBkkcq+M1MlIZJZym 8F35caA0Vl3W1lgmEgxfOyJx2lC5gydsZrbY22ixOmMivV799OPt1Eo1KtyH9wPQ Mr6Wem9Eb8YDhcpZ4vUaIDMcG258Wp95vBFQu7gJ9NmWTysS+jMGgKmnREJ8NC2I v2RFJRm5FwVG2RqxXhmQEuVMKz6ndlndRA+A2GELFivnKqfohhZyz0QX+SPBAgMB AAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJXmxqdD3LcoOxSh6vBb sIizphupMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wbAYDVR0RBGUwY4IPdmZyLWJ1bGxldGluLmRlggt2ZnIuZWFpcC5k ZYIUdmlzdWFsZmxpZ2h0Z3VpZGUuZGWCE3d3dy52ZnItYnVsbGV0aW4uZGWCGHd3 dy52aXN1YWxmbGlnaHRndWlkZS5kZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB 5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5 IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5 IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3 DQEBCwUAA4IBAQBmE6jv8xCpf8Eix3Jx6xw78D+9/EGvqEBfO+/7ehPPI6QtQ7WX 7rGDA35K52EdpL5t43+27fn0ioZoViyKkzBMq25jdzJfTNb08liSTF00+zhNdKOD 0rzIJml9cj28z1bG0qh8eEuiDzaGzydD1+/EqxJQZExofFdhHLT2r44+GNec3FTH ty0E0wEwuBaRgRgR5n1ooJfWUhzTSYXyi+X2eCppNU8iE9UJO7kXIg/grVJxened 8tSpo9XVRg8EfUXkZ2g7qa4QGqyvWnP0FX3YhACNUxj3e+D29uOXHOBqP2gNqaFW LUZ2hm58c55IW0noT4jwpoTgEkNGyD+sEZ/N -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZvy1np77MJdaaITDBek EoKZbtBV185j4KTQi3DMyce4QAzmISf2LHLeLe5dmZTlIQsp6mL1FmT+kLjP3eYF 4NuzNZGHzywSDh7RsQAGv/gq6ptWcMJ68cZqGaXV7XDdai6645HZHQZJHKvjNTJS GSWcpvBd+XGgNFZd1tZYJhIMXzsicdpQuYMnbGa22NtosTpjIr1e/fTj7dRKNSrc h/cD0DK+lnpvRG/GA4XKWeL1GiAzHBtufFqfebwRULu4CfTZlk8rEvozBoCpp0RC fDQtiL9kRSUZuRcFRtkasV4ZkBLlTCs+p3ZZ3UQPgNhhCxYr5yqn6IYWcs9EF/kj wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347455380705229656916664544289076309080596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-29 13:17:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-29 13:17:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vfr-bulletin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17876502113711003960307572408307903215671942747182727370363059880919369171347107283429012991389295023654482582556736165143117390462995045030767946995870304040947149451189138994778504831670196943044305275700817916201192897815545307225327305782529040485027171792638468699572770386859795205832739638633127372956415896844362582942019690143539262742417403920185336454173267759290815634641653342666566886067682300846767185800934947790850819815203022801997811301972019939920725912244877203039968463544671360295901117559230517984951429889207431384998777655582839877100968259961406551163979768522883371904514028976567307805633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95e6c6a743dcb7283b14a1eaf05bb088b3a61ba9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfr-bulletin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfr.eaip.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualflightguide.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfr-bulletin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visualflightguide.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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