piwigo.test.farafin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:8e:2b:8c:01:fd:f5:ff:52:37:06:d1:29:90:5f:cf:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwigo.test.farafin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:8e:2b:8c:01:fd:f5:ff:52:37:06:d1:29:90:5f:cf:89
Serial Number (int): 263567528480667915545971094375136562761609
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:4b:68:79:66:de:35:29:de:7d:71:ce:6e:c3:0b:f2:bc:f0:62:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:da:2e:b1:a8:d4:af:01:8e:1d:c4:04:a1:db:7c:f3:ff:ed:9d:6a
Fingerprint (sha256): 1b:31:31:d3:e3:43:e0:d9:50:ff:eb:c4:9e:8d:e3:96:70:a5:28:b6:a5:94:82:4a:5d:47:f4:18:7b:5c:55:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwigo.test.farafin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwigo.test.farafin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwigo.test.farafin.de

Other certificates including the domain name farafin.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for piwigo.test.farafin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoNBEx12PFxupK6liFG79
2LHIodorC9g00MLe/j94NzxwF3QcDlVTM9s9swCw9oZ1dHLlkYVzyuU5TLig+NpT
UuyzzIiDtM0g9TADO+8AhYoFU6rQnQirXb1nzb3V2/URUBpWznieG2yqNm8igzo3
tg/J9muklAwKijk/nY6AmgYwJlRvSygDRs10OelTDr19aF3irHZgsA2SnaJ0aJno
xkWmtKE32KJR2LUE/yOewvpi3LgnOuJtfhIXJJmG+rEbdYPNVpgfP/QTqVpHBFTH
EJR9Ni+KWpWRZN/DpppkmQtIkddWxNXbB72BEvsU1uUG8GXQD5cHm84kAyx76HRD
gTS2sQj/K6pZfEYP/HMaoh0Qu1jlzr7nYmy/LY44PAbd9ZLufLTriufiwmxjpBFs
n4Vv3V24W5OHB5f+0Twb3gsBwtSjOg2bKDgYEhjFvWd0uro4O97GoDwsMhBs7lhj
NHgs+tq3GwPFw/T/4jJN6Pl+a3+5S6efLrtfwAUSGkI3hUFZss1zhnamiQVhwQ4+
4qt9sANZcviFJR0MRH1gjqVZeBhIRYExMI2uFglfRE5+8um80ooCSVQf1Vent+po
eVwxIALhDZVmfcXgPs+CNs/r8UxJ7RSyEdi+WEJyDUTy308iqAoiNry9U71cPzuY
RvOn2V3tAcUPWUMGOurWuUUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263567528480667915545971094375136562761609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 10:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 10:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwigo.test.farafin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656062043196459819706452072526508622649736646700507941297610775219869236924040361297980891091359845245057397375007179439546107799736285634281970204758951787492210731158636378355571845276944396390382291509736311993161576902624421417588087278359629669600872726841683381923128045646826371880716421403261550253604292570816954665272659724145539482729822677996704658514817564172349134867350326265930575964593018314439649077069454474310599354990192057611119876031971160064355290960897029082027047277757912008439447228252083569334131569715678827847266024764202787145726384122130651041054849355334069208858764675094085068472460369664479792731420157840868286647182185112352639037194410704339196971471439494273369692329014018726867089944938998035236602938087775189346980748301630067706015697979575106363984037463294996738177371067848393297694754997933009109395629263026783032460236196277497586436520929893017272249315785826866188756061617620985803651630178309540995790720986152819319739025162898603526863346304132228781226921547469599645302761989170971958566074809892831145360598078442806983472290357501652707470301314421923369401032943588662022755938994443604310191782643686692610940663553343233313734471596752605526742533854632977107745421637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b4b687966de3529de7d71ce6ec30bf2bcf06288
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwigo.test.farafin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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