www.lima-premium.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:a4:65:bb:ce:45:02:0e:f3:94:df:e3:3e:13:c2:89:fd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lima-premium.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:a4:65:bb:ce:45:02:0e:f3:94:df:e3:3e:13:c2:89:fd
Serial Number (int): 382355619674658287005052942058076965603837
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:2d:70:8d:de:0d:09:cd:58:ab:7c:2e:b5:4c:50:97:ec:bb:b6:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:89:46:10:d8:84:9e:84:76:d7:10:25:b5:1c:3c:17:26:4e:58:9b
Fingerprint (sha256): 1f:46:44:e5:10:0f:2c:45:53:33:fc:41:cf:8a:12:50:a6:d0:9a:1e:2b:b7:5e:de:93:95:31:b6:e6:93:c6:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lima-premium.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lima-premium.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lima-premium.de

Other certificates including the domain name lima-premium.de

(limited to 100 certificates)
filemanager.zeus.lima-premium.de
www.lima-premium.de
sni42730.cloudflaressl.com
www.hexenschule.org
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
www.sebastian-alban.lima-city.de
phpmyadmin.immopano.eu
www.colorfog.cf
*.karoline-reher-photo.de
sni42730.cloudflaressl.com
pma.hera.lima-premium.de
filemanager.zeus.lima-premium.de
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
www.individual.appdownloads.eu
www.lima-premium.de
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
filemanager.hera.lima-premium.de
xn--die-saarlnner-jfb.de
pma.zeus.lima-premium.de
www.bc.askarian.net
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
www.thomasowitsch.lima-city.de
sni42730.cloudflaressl.com
www.stopuhr.mathesoft.de
pma.zeus.lima-premium.de
www.zukunft-unterfairing.de
pma.hera.lima-premium.de
020.icekey.org
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
pma.zeus.lima-premium.de
cms.antimarder.com
service.antimarder.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
pma.zeus.lima-premium.de
filemanager.hera.lima-premium.de
pma.zeus.lima-premium.de
sni42730.cloudflaressl.com
vivaziss.lima-city.de
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
inspire.ml
*.shrinkingspace.eu
outmail.beautyled.com
a.okan.at
*.mister-akomi.com
sni42730.cloudflaressl.com
mail.mokis.de
sni42730.cloudflaressl.com
*.heileurythmie-witten.de
pma.hera.lima-premium.de
www.test.parfuempiraten.de
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
www.atscherrer.lima-city.de
www.xn--weltwirtschaftsbrse-56b.de
pma.zeus.lima-premium.de
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
filemanager.zeus.lima-premium.de
www.play.askarian.net
uwefe.lima-city.de
*.skybox-entertainment.de
sni42730.cloudflaressl.com
www.cryptogame.de
sni42730.cloudflaressl.com
www.hoegy-buecher.lima-city.de
sni42730.cloudflaressl.com
www.dreamchasers.icn-international.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
pma.hera.lima-premium.de
filemanager.hera.lima-premium.de
www.hochformat-duo.de
sni42730.cloudflaressl.com
*.sandro-alessi.de
sni42730.cloudflaressl.com
phpmyadmin.antifax.com
mkt.antimarder.com
sni42730.cloudflaressl.com
kfz-versicherung-im-test.pkwversicherung24.eu
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
sqs.vserver.pw
sni42730.cloudflaressl.com
sni42730.cloudflaressl.com
*.piku-nc28.de
pma.hera.lima-premium.de
minot.lima-city.de

Certificate

The complete raw certificate details for www.lima-premium.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7/DVthWcrdxq5EMReg
QX5hNMMn5QFzWriVpHrPPLh0iPgTsZYyZQgZiHNguwgA+Oc7GWyi7V5aofno6RNy
dlFnkchYirooLkKAGlh2TrR0EeD0c7JWiAAsW3/h5CAsXaiVZoVGtYcianoN1lSu
TAnPwMZ8OQHdaWclL3MZi3LnQvemFmqfos/qaT4T6QkLIg6nOrFxd/wBEKSeUTkP
0r8zh8HzgqX7o25e+rJvITat3UMuPZL5dL+O+oe9dctHcu9HmgoARKXJfPb6k9Mt
w02qBM7ksi9aGACNSvCp6cV0mRVGXnqSwSbs9fv5/N9r5SL7OaFTL2g2FhxqOsJK
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382355619674658287005052942058076965603837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 11:56:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 11:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lima-premium.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25531202235265839228140535444233289012119291316021600694886265430802479357769452425024767676261371191244112392807871498392765375932835363280512772929866493857469176742987607141510107880562978420832317304634003949141813320240211556251460391437854739376661828185460008760839866884968693345782310973611378217245610773239319842968834686724945604170054506363208515468698305188938632165413368697557675716540553626380082411331434579137426526827736154928510830595597882177642273564507728440464595989359083357065559087754035977722637038994932318461465472564922295883130772672160954065341155348555364013302094907775192389536279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							012d708dde0d09cd58ab7c2eb54c5097ecbbb6ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lima-premium.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001633fd332f50000040300483046022100f021e3ffdfc116db19777a54a5299bf08f68d22d40e5c88f9a5308a63eb31606022100eb7b12a9c232400670eec74d3a228a4c2a6a17afe6dca95663f31749cc1337d4007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001633fd332e00000040300483046022100c2b3c629d4732e6b0fd7ad6094874ac6be963b63e1bef258848ca9eab664f95b022100e65f7485061ec4a1e2fa40f5522832ccf854f00c404fe4caf341c944d30440e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e3bc8bfca89d0f0a481802eb747f93391c78625ea2091383c3ae6a28787fd320ca421f9f3850b817f8d8f291b05d3e7b68d6159e9bff554ec0812f36a834d352f224708c6c82f306cb25d8cd08388b89b8431630458be1805524a225b431f80806850d0d380205df4a21efac22b77d18851959e390d0b18886a050416dd7900819b26230e284d3619bc2869f4db0bda75eb6dfc7add9fbdbc84b12e47e3f7060fa90b727a39d8b90e211e49adb295b733f29fd499d81a0831acbd5c690946cf5c4ec3f2e04479548b9026fe6780f96b50ea186babbeca7ec9fcb4e22dbd4b5dcd9bdaf24fd988e7a386b166cd04225cde5f06dd090a5849de31e9349d80473b