deutschland-spielt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:0f:d7:1e:2d:e0:59:4b:6f:a2:ce:5b:0e:60:f2:d8:f7 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=deutschland-spielt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:0f:d7:1e:2d:e0:59:4b:6f:a2:ce:5b:0e:60:f2:d8:f7
Serial Number (int): 321587892116155194714449436314755675642103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:9e:24:27:3f:2f:f0:a4:de:8c:19:04:96:3b:da:97:7e:3b:1a:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:e2:64:f6:52:a4:5c:1c:6f:49:c4:54:b0:bf:e0:5d:fa:4e:0c:9e
Fingerprint (sha256): 1b:50:80:12:96:d4:7d:b0:ee:ab:85:f6:c5:6d:cf:2a:69:2e:4b:24:03:42:d9:13:60:3f:56:2e:01:1d:06:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate deutschland-spielt.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deutschland-spielt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.deutschland-spielt.de
deutschland-spielt.com
deutschland-spielt.de
www.deutschland-spielt.com
www.deutschlandspielt.com
www.deutschlandspielt.de
www.die-schweiz-spielt.ch
www.oesterreich-spielt.at
www.schweiz-spielt.ch
www.screen-seven.de
www.screenseven.de
www.volks-spiele.de
www.volksspiele.de

Other certificates including the domain name deutschland-spielt.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for deutschland-spielt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321587892116155194714449436314755675642103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 09:43:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 09:43:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deutschland-spielt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723520934542383483954474533611394054860378806265584172020642119221586049016932879326446840299176499493966141076254463611959068497585390987935858925367251731023257938113462520203700538485854481860467296772912812036342314124634666588065164318148601964301474131807894312991498199056957194700451687955156127195767458690932158563691565819945162259752660664357323633447066803284391457938495337388094297737018756550230165387283774629660143978773657670569744920469754045896908851671247329192335587306305114051138926578123053674358262197216934238478793887453015483166101281876732790598649285023861548211391471448468633568538333965244283452314861587604403360926983288155217434423462443289972772121321452532488655905015234511133094004149381665870195300994113296744266496674794203228988263653531179535646838485773073704131159405194579500466335892561625369987796568973101798231668531896577564802890217407053685211869414606623737556478358943011103687268953743697443508991738217717415876911957880695348208972380197927230412310878573847434871508349193514682276659372381743983259862938242804508390084041889541102398132552926604360097275897714123693612600870162105146060179525938280580633055680910514715914811122756487378276391352549993807058458716841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c9e24273f2ff0a4de8c1904963bda977e3b1a93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschland-spielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschland-spielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschlandspielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschlandspielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.die-schweiz-spielt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oesterreich-spielt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schweiz-spielt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screen-seven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screenseven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volks-spiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volksspiele.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e7e1c372c000004030047304502201793f7d50e602cc660b3ef74e51ef16e7f628e0dcb9348e237ed033412d815b2022100a2db7c1aff7157cf3fecd18a18e3ee61ebf1b243065393b6f86ff43c947887b000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e7e1c374f0000040300483046022100e281c8ae21178a6d32935049630c307453f0d6cd11653b4ed5c5f1b7dcc0a087022100e4adfe46b0278188b07567f6c88fd3f584c501298fc77d89a5949c5ab3e8696f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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