www.igha.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:31:fb:42:d0:d4:70:d5:1a:83:0f:db:02:8e:7d:57:70:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.igha.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:31:fb:42:d0:d4:70:d5:1a:83:0f:db:02:8e:7d:57:70:c6
Serial Number (int): 365456962860274136438993543211754565628102
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:10:a3:91:70:91:a0:4e:a8:bc:bb:3b:f7:28:81:76:4a:2f:df:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:44:a7:6f:20:ee:e4:9a:20:52:66:2d:c3:42:df:55:b7:57:fb:81
Fingerprint (sha256): 1f:01:ee:eb:33:6e:45:e5:c8:95:0a:0e:0e:da:ad:c3:59:66:64:d1:bd:37:76:4e:92:5a:a4:a9:0e:22:0e:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.igha.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.igha.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.igha.de

Other certificates including the domain name igha.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.igha.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365456962860274136438993543211754565628102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 22:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 22:30:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.igha.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973041348777732080562426027092991115425253054450644310482542147542603727214542886621207691214011183400873576993514785377114877205671684021714462411143958434333215500427495955000053723115746205951131263629686984448158820710434535823448503460730283311597160205974931689302590567211569790804300372109501319428073532949691450292652628380468757550443408239942361236246814033142189024582010415247080641541374582421532557838273097879190794545445633708538431350111996954745464029299000350882727380948958572437518085391828707212153265121135909161374573272921045470343967106138624760984115792119320152202178130703042836633204798939064597826701232725997885216107267088386285905583057060205352478911828723763908188309069620568046717537498958670766306626866527601254263194927895616992311616265736033347136918511900438288166988124594883663416777556301739182866122565046490520870369429521198788631173343533509205002244124748435772475489298857052792833578743461935220619108102834814797732459277032600825908106642934330203456059538775678889150710405324062022346527253895576834775756544339582713353213261850056361371057451833789287580918783364653239432951186244440503009767710135068077217926779502724531016082948823288116573151284546679651044272610789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5810a3917091a04ea8bcbb3bf72881764a2fdf09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igha.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ad0976780000040300463044022020215f0bde499dba56dcbfae0f5e365d0f274766bf2071ad880b985783b194f80220252738209d60012fdec9d89a32cd41b055d8d3d044c40f50ceaeff8beb5787c90076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170ad0976ac000004030047304502202420e668c02ffad6f7e00e5791efd2497f3a07c3ba198ef376c3c29c67a96f61022100be8dd738b8e8f9d5ac77c82d22e4a7e409adcf0fabc57a1457d7f6449143ad2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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