henri-nannen-preis.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ba:c8:e0:59:bd:ed:a4:d2:c2:9f:ed:b0:48:4b:76:13:d3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=henri-nannen-preis.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:c8:e0:59:bd:ed:a4:d2:c2:9f:ed:b0:48:4b:76:13:d3
Serial Number (int): 412008674468170960413296684166402155090899
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:f6:67:09:7d:ff:03:04:f0:2f:ce:ae:a4:7f:ba:06:da:99:93:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:2d:98:32:c8:68:70:bd:c2:4b:f6:73:f0:71:92:d8:47:ea:46:3f
Fingerprint (sha256): 1a:f2:fa:45:db:54:c9:14:ec:cf:86:aa:91:15:e5:c1:fa:3a:18:58:c9:ee:b7:43:44:22:f2:8a:84:f7:d4:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate henri-nannen-preis.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for henri-nannen-preis.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

henri-nannen-preis.de
www.henri-nannen-preis.de

Other certificates including the domain name henri-nannen-preis.de

(limited to 100 certificates)
henri-nannen-preis.de
henri-nannen-preis.de
www.henri-nannen-preis.de
www.henri-nannen-preis.de
www.henri-nannen-preis.de
www.henri-nannen-preis.de
henri-nannen-preis.com
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
www.henri-nannen-preis.de
geo-kompakt.de
henri-nannen-preis.de
www.henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
www.henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de
www.henri-nannen-preis.de
henri-nannen-preis.de
henri-nannen-preis.de

Certificate

The complete raw certificate details for henri-nannen-preis.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26pDuAyymG6GNlITrda8
/Dgrtd+W2m0WOIbFekSaX5IghU94Z8SLmB/LAQyF8ED8ZUKkui86aeYqvq3XlPGT
YwwDyNpXpKv7G07cxM/N90SWVaJfCcbUKqMaQrXG4Qc7kEpy+UvpMubJUwVWjeRw
wstaMX6qoJza0Qi1QVR7SZ9y37q+nIcY95BwQAOZK+SOWdphu8f7RYtWmp9N4lHf
X46IEOSxJYMb1rMP/uonsAI7br/P0t2wPQ0q0XCUAIGXmaLgSTZ49BEorlaWqdh8
YGVuF3ebwKTZCdCUGgw0avsyXdIcv0NwBRQl4fko8N0J5NH7e/NS4cjoTAKZITRI
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412008674468170960413296684166402155090899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 23:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:24:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'henri-nannen-preis.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27730149355144902808094852403030585935472643482229933178310057106856681196195810882332103374547497609718324457907501957456956561144236902108497910233982971938145678790012848415658529656691821434847072671062164333883989020812701433025097386188139706899541863763170447212793871591645425485249701137853423327754790560238119929185270952323682012961888642619437745780005089674882260124485490945566676185832350229049598817500235854337273363191098094283179992327185660910564963184421691281669769151087350107788567487426252488417720669323974669529177750769024496796122711707975795231542568348480974006477759256232008950761531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94f667097dff0304f02fceaea47fba06da9993b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henri-nannen-preis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henri-nannen-preis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a0b2e5458000004030047304502204cef92cf347a84dcd5f2f9132c61cdd7bfc909136e47dd31debb1919bb93f45a022100f5b4e70f6752c3905f95319a352c5512e03b429bdc161adb44d09f7a48b0effc007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a0b2e549b0000040300483046022100b95eaa9fcc7e00070b525e550c6dc16292edff952aa3155ac4437d7d4b64b3a1022100e401c7b8db28dddbe6a4baea0ca37591de08832e8503bded895ed6b6b95ac40e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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