forum.therian.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:31:a2:47:7c:e8:1a:b8:a0:8f:cc:0e:8e:1b:e4:68:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.therian.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:31:a2:47:7c:e8:1a:b8:a0:8f:cc:0e:8e:1b:e4:68:27
Serial Number (int): 328098176485616429135805743621395045443623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:ef:ef:ee:fb:c7:e6:d1:6c:96:00:f5:87:10:95:be:b8:c5:c0:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:56:12:eb:76:a0:5f:31:bf:e7:5d:0c:c8:1c:af:99:27:79:78:a0
Fingerprint (sha256): 1c:ca:97:5c:75:9f:7c:93:a1:e5:70:73:09:69:68:cc:8b:26:73:16:da:29:a9:53:5b:33:66:ad:10:d3:fa:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.therian.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.therian.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.therian.eu

Other certificates including the domain name therian.eu

(limited to 100 certificates)
therian.eu
test.therian.eu
therian.eu
img.therian.eu
forum.therian.eu
therian.eu
therian.eu
forum.therian.eu
test.therian.eu
img.therian.eu
www.birdstop.eu
img.therian.eu
www.coronavirus.y8nn8ck.de
forum.therian.eu
*.simone-gerhardt.de
forum.therian.eu
therian.eu
test.therian.eu
therian.eu
www.img.therian.eu
img.therian.eu
www.flaneurcast.de
test.therian.eu
therian.eu
therian.eu
*.louisflindt.de
www.alpha.mhh-chor.de
therian.eu
test.therian.eu
therian.eu
therian.eu
wjxcmnjujqblyz.tjark.pro
test.therian.eu
forum.therian.eu
test.therian.eu
forum.therian.eu
therian.eu
img.therian.eu
test.therian.eu
forum.therian.eu
ns2.woeschka.com
forum.therian.eu
img.therian.eu
forum.therian.eu
forum.therian.eu
test.therian.eu
forum.therian.eu
therian.eu
test.therian.eu
forum.therian.eu
therian.eu
test.therian.eu
img.therian.eu
therian.eu
therian.eu
forum.therian.eu
forum.therian.eu
test.therian.eu
img.therian.eu
test.therian.eu
test.therian.eu
forum.therian.eu
img.therian.eu
therian.eu
localhost.rallyefokus.de
img.therian.eu
img.therian.eu
www.forum.therian.eu
forum.therian.eu
therian.eu
st.kevinkoziol.de
therian.eu
img.therian.eu
www.zimmer.augl-hof.de
test.therian.eu
therian.eu
therian.eu
test.therian.eu
calliope.zarembo.de
forum.therian.eu
therian.eu
img.therian.eu

Certificate

The complete raw certificate details for forum.therian.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWI8xRlNVf55zElnUQQh
fsAqnYti5R+FSpMKwtzWEfLgYvIamKjlMv98ho0+mhpnNZKg6mqFpMFkgmzTMYxC
t97ETEt/zUwfVx/OT/fsiXEH6RJs7UMQh7ovhafwPhlU3PsHt84pSzWPf5UuNWFh
k4NxojZVMpHHQmNTGutQrMrPxakvGt4Nb9LOo/Td+4pTRXZV0S/0j2FW+AzNYCru
ZW7NVkV1DLoRhdPzLCjPaSo0tSzkg0jWTwOcL7uwvkU+LB+dfKxyJ9QPUVrOSAoP
2LK9zj3TTi3GLi3VG2S1LGAaESQIzZ8riugZqFUMFs/O6Du8jL9dzWJfn2E/7PRp
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328098176485616429135805743621395045443623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 09:15:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-03 09:15:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.therian.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24412435517237538247123256072191746414087435231855003613853537319118717645214764366978491696227138218849016075062412722223183751902559489410725427551452406590964525675020856882187916502490617603406714001987763164612575472247997549529090133940633304334656030648044340009855878929064980841114336810174667434439881850978281162619445317269908032153795066862590953518134083436040047277005921695674472202383451900161637237256700015802983877741860532512871648742243066874104631017826427781776744434821715399001337406707578419688791320658969986130948077035659213068161098429760481842203789164552010600700641019916247173982491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27efefeefbc7e6d16c9600f5871095beb8c5c01b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.therian.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166e35ed4ae0000040300483046022100f5053e68d839d4a806cafa8ec1898f51d0b52e0a022ece4a5c82ecc8571bb816022100ed7dfa8af4840feb35c1905f07313ab5e7ce2057dacefdf5ca1543e82a652f9b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166e35ed4ae0000040300473045022100a9f8cd3794bbb24449a3048916aad83fa5c6ea7c32633c7f0dee70f8bfa37869022023fd76d9ac3dca2866ab328638182adef8c9c938af4276ab9d56949a25d83659
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00669b16c19981f64b8a99e1bfcbe8ce0363d02e27b8ccbfadf5a507aa282514d4bdb6aff0702c08454c893f4ae6c90743169979c9ac2763395de8d9dff24d245e99486721730ffe868c1e4681dc626793081ab5dd2a302b4511ae7fdd3eb560b77285bb04f3b6b4483dc13eec634c0a96e024cadad703cfeae1514355784a209543afdb7d71f4147eec7eeef59d9bd631d88162920f005442f816e115db549709b650762cad6c1e89a35da96b7769ae0153c1ab518b588b1140acb1e5719ee42923b4648220ed7f9ce624eecc5a0957329281192f01356874c6a8c1f015f81b5b44e54c7bc3dae5c0dfb7b5479ccfe5d878ce91b32971aba7d3b894cc3e72176d