fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:43:6e:f4:b4:ec:e6:90:ce:3b:e1:3b:8e:9d:13:15:f8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:43:6e:f4:b4:ec:e6:90:ce:3b:e1:3b:8e:9d:13:15:f8
Serial Number (int): 344455389715604082962115426767295665608184
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:ec:29:c8:b3:0e:6e:da:0d:cd:7e:da:b0:d0:f7:7e:48:bc:66:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:3e:47:13:65:36:fe:56:0c:a1:8f:be:86:c6:af:1c:26:16:f2:27
Fingerprint (sha256): 1d:fc:56:cd:60:c1:4e:83:80:03:9e:57:32:77:66:98:9f:06:df:0c:b9:81:be:ed:18:f6:26:6b:25:57:af:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344455389715604082962115426767295665608184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 05:12:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 05:12:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818284305195853391773099079404307232373568311913919639820275595502617256455895116483012615136631221347922815192142349380636551666659795981958052282222086704918151208246847135466337081186237317969630286313121632443441701375547497797193137199298523306127924922955388238889748716257902446676936598180694021315091772216148697997370059262371554855311845386631992731962770616020389244395841940690751710819372497986021218459560731030672446248057206477800848873857970613557653045133096865628100323272090789680337589738055652161264776230985275616641751915369433890662759585855977231252581556216307573839410549281686317060225240220165031773190019502246292690060078356433047916856969896875232399203269483682946724297644844011119339482902214034009232638851009805620575483605699026857039275494776991885024809214256547478189149334858993506844448461388748339097128909511837166758896467442523922230938378628945021119958790416593694085570951448851729430471411884802414618125381023260773048982910274226344678641677450532518159228170113904662664274189913221915470542078928274077306455436007413843498525678415327304829038222099855204950666324956684492655903510484977429876633985553801837847863268279876342097643641122121722709935525120803613951753959939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74ec29c8b30e6eda0dcd7edab0d0f77e48bc66a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016782253d900000040300473045022100fcb7aae304cfa1bf47f573fea4cdc0223627e7cb5b73e769cc3e820ece2eba3b022009425700ad6e6ab9d70efdacdcc4b6d825e3543f3402392d128527a1f914dc6a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016782253faf0000040300463044022037dbebed38d551f32cec9189683ab993507accfca58bedf33d765fc89d7d9d6702202655db5d25d3b4eb009a7f9f5e356ee5d3533fef8024b6d8d49531073dfd9985
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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