digital-eastside.de

Issued by R3

About this certificate

This digital certificate with serial number 04:80:bf:58:d6:3c:0c:1b:60:07:ed:f6:f6:12:9d:26:3e:cb was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=digital-eastside.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:bf:58:d6:3c:0c:1b:60:07:ed:f6:f6:12:9d:26:3e:cb
Serial Number (int): 392259630507432671753285259036917296938699
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:13:d9:1c:1a:83:dd:48:d6:43:9e:f6:a3:68:dd:45:df:a3:a2:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:c5:22:0e:e5:5e:22:c8:28:9f:c9:58:52:4e:6e:0c:be:1e:f4:1a
Fingerprint (sha256): 1f:c5:49:0c:19:b1:35:9a:e0:60:00:27:fe:9d:b4:8a:b7:b1:aa:3f:28:66:1e:40:88:92:45:ac:8a:23:99:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate digital-eastside.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital-eastside.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital-eastside.de
ipa.digital-eastside.de
seafile.digital-eastside.de

Other certificates including the domain name digital-eastside.de

(limited to 100 certificates)
seafile.nasec.de
digital-eastside.de
seafile.nasec.de
seafile.digital-eastside.de
outbox24.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
seafile.digital-eastside.de
www.digital-eastside.de
secure.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.digital-eastside.de
digital-eastside.de
buerger-fuer-schmoelln.de
digital-eastside.de
outbox24.de
outbox24.de
www.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
mail.digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
outbox24.de
digital-eastside.de
seafile.nasec.de
outbox24.de
support.unistor.de
seafile.nasec.de
icinga.digital-eastside.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
outbox24.de
digital-eastside.de
outbox24.de
seafile.digital-eastside.de
seafile.digital-eastside.de
seafile.nasec.de
digital-eastside.de
digital-eastside.de
mon.digital-eastside.de
digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
mail.digital-eastside.de
support.unistor.de
outbox24.de
www.digital-eastside.de
outbox24.de
seafile.nasec.de
support.unistor.de
seafile.nasec.de
seafile.nasec.de
digital-eastside.de
seafile.digital-eastside.de

Certificate

The complete raw certificate details for digital-eastside.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgISBIC/WNY8DBtgB+329hKdJj7LMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTgyMzEwNDNaFw0yMzEyMTcyMzEwNDJaMB4xHDAaBgNVBAMT
E2RpZ2l0YWwtZWFzdHNpZGUuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCt0R1BzFYo+45By65i2vz175mxYaK6b9qHITo0lrunS5zCaTs7YNhBXwPa
k18vnStZmB5UP5u+AkFcEc3VjF8J7Qi0IBqZ3P6O0vkaRwIq08ygBa6d/TC+fb56
8GGRsNpQvd7FHIxFi4qnkbfIUN+PcpWu22A8PUqZKWXd8nI3bbv94asw7WRPPx24
cBSgVeKWTPPHkgLNqIRL6WOlE73SIXHfOpxdXRxCWkxU61NvZEj7SuqNPOTAXlte
UqjfXgnQa6ebPB/Il1XQY6WjiNss3HNZszz5HaLOm5vS/ehCTGhntGFdH/ZeQXgC
xh8toj+Q3NWDStL87lkzeZpCkoPbU/PrCcoxz4YJdKB0XBJjJRtxIKEFXnJlB4To
G9OON8GdBWoN4Zoh794eAZWI7dbSeUkegOq/jauylJXlZzAjfCVD/vr5rQynywQ7
YBiEJHq6MFV12vwFj0d+OGO0k0tSs91kqpjm/kEpLAKSrciqGVl3qXlGUP2gFojk
VTELsoahkHmaZH5XpxuHs9d+jEo3l0dzJ91sw0tkmPkDX8zOUqDBC/hTJYU7o/m8
6WI1qjGJkk19CSHvM4SbvUmWdGMfsSpbmr9/5O4TmpYB84VRWzuOE8IIXOF/ZKtG
uttXx6hdgeGR7ZIkjXh2JPFNSfR0/TamaKTwKqoEdGBspSofdwIDAQABo4ICTDCC
AkgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRZE9kcGoPdSNZDnvajaN1F36OiHTAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzBUBgNVHREETTBLghNkaWdpdGFsLWVhc3Rz
aWRlLmRlghdpcGEuZGlnaXRhbC1lYXN0c2lkZS5kZYIbc2VhZmlsZS5kaWdpdGFs
LWVhc3RzaWRlLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGK
qsZmTAAABAMARzBFAiAP4GoUThrZ9KdC6kw5THTmI4g6KZTM4TjRJYxorlXzqQIh
AP5Jw+gyNdi1ryPJRjRxH/oBrp4OSXutd9mu5Eb2Q4P7AHcAejKMVNi3LbYg6jjg
Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGKqsZmXwAABAMASDBGAiEAsphGDRRUZTZF
w+bbJEUIv0amos83LV0tLpdi/JxOdTkCIQDhoxhxEa4kbIniam0fIsAJid5PcqOf
oGhgdnJ5MXdxPjANBgkqhkiG9w0BAQsFAAOCAQEAcvp7ixh5vNfCDal0xOFGMypg
8VyRQRlezui2K/HzSYDtDRm/eFf2N0cf1zHDyZ5tTX7DRirPU6nmSdK0mVDsi1UG
LwPcsHldSsQQe/EMXYp0MhFPxs2v6lsOoUF/JGyKehPwx0wM73LXWcEzKiSPVIEW
AruAfiFA0ebeDccXIPz+Auy8Jg0YsoDiWJEaiE6reqNzzpTF7PRQzz07Qe3ENRI6
ZNgagiZUgiz+BgQKghjOzKyTYNYb7nVj5vC+ZT4phCBjSbUTRwJdutBzmixv2npA
SLqCocYBRxDSNqfqW2UvYJ2mypu7E0JQAoTvCOFjoLJ4I4MMS1UeenlDq0YmMQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392259630507432671753285259036917296938699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 23:10:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 23:10:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital-eastside.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709110891944674451765291362183216493166875440697987324330444044617785431172882640021909190430743569451693211528228669052167916922673948293325998239138824052612307008960729052568211602941748879202333520991642822564159438320694617601775361331115375875230345712127665108248390955761953727445244078593638633211625503302377396236151723641867585910957347502755227045288828763815460670699117057706636142097941951625291221180226065195926748199105830347960654124186565325080037952950493833017032646706582416864276959169075566213767779897621953234438652815656963780844276666961565586099717183567327874342671089162629285634229340446003553097088751147672323325049937263369075355116338349722725282354844667028072353241098777452573100137844880480981401976504345460654800902402884933967295685258304095871340568354074833447034280957639835298881853702214737958564647626056944170217915623820344637947468735327633129779029069320301378266968481824443813754767783846839670775664067439393703428972451102439658591887644292310894163102328180905684585202951344476407261386381867983454156132519109505025123358786827740184531066493771116701478345538750659043643869731502721322635576807564965627407051071227186827944680478953015969041641619275850934498510905207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5913d91c1a83dd48d6439ef6a368dd45dfa3a21d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-eastside.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipa.digital-eastside.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafile.digital-eastside.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aaac6664c000004030047304502200fe06a144e1ad9f4a742ea4c394c74e623883a2994cce138d1258c68ae55f3a9022100fe49c3e83235d8b5af23c94634711ffa01ae9e0e497bad77d9aee446f64383fb0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aaac6665f0000040300483046022100b298460d1454653645c3e6db244508bf46a6a2cf372d5d2d2e9762fc9c4e7539022100e1a3187111ae246c89e26a6d1f22c00989de4f72a39fa068607672793177713e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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