wilderhirsch-wolnzach.de

Issued by R3

About this certificate

This digital certificate with serial number 03:23:3c:7c:b2:f4:05:00:56:40:39:9f:7b:40:e5:f3:f7:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wilderhirsch-wolnzach.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:3c:7c:b2:f4:05:00:56:40:39:9f:7b:40:e5:f3:f7:2e
Serial Number (int): 273327141791673268367925177854057619126062
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:f8:17:2d:e2:7f:c4:c8:80:78:5f:c5:17:ff:3a:0b:c3:58:4e:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:4d:20:47:3f:d9:76:72:a1:9a:ca:21:6f:00:05:dc:b4:9c:b6:79
Fingerprint (sha256): 20:43:97:cb:23:3d:41:75:22:fc:1d:2e:67:91:a5:f9:dc:e4:02:91:8a:d3:b4:a0:7b:6d:81:92:70:66:84:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wilderhirsch-wolnzach.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wilderhirsch-wolnzach.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wilderhirsch-wolnzach.de

Other certificates including the domain name wilderhirsch-wolnzach.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for wilderhirsch-wolnzach.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18+NHVjNCzN5aXIbMdEV
6R/Kt+uTWIw0II59vrOhtnbHHGLGpk2Yt3nAVCR+Vp5JYR+/HE1+7i8G7ZZpEvQ0
vWcNBRyahlOh/UxOzcyNf+gh81LLd2Pmp7SjxzczSmGXS+Lsc9PvoWINEzDcwLNJ
Ffzsj7njKRwL7fObozAM20XgMPKW5st0oaxDBwapci0Y1FLUY6vvbPO1G5Lx7QzP
RHOgFj4EMddns++lRJSoR2jCNoRu3/tZnnXKCWBNjmBO5Yn1krT89FaGyg9mHngu
UQsPLo67KQ0B2+q4fj0jwsf5DbzouBwpcXyoOEmcGjT7MQKiHxjD0wrVYIZnoLxV
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273327141791673268367925177854057619126062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 12:29:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 12:29:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wilderhirsch-wolnzach.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27243582893283152630358361802981541101881543324281125961498847160752273995430722091733841663230266693700445277431339954527853544517244275689903847668117523319175673136509954248307658747602380447400938109431075862724160952361867554226608313052141117648843934667690315621388967599703001093740040491498070319009972456307626579549997936315118598212617623968452940957184287094229454078221336777046814455604220096567201850109427046429347779707347984180409791223449280793033382258101861598438337062159072836734786393066013817363312031442192201767847864157880281122018852732097930395096670805946894708471236511318978026296659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09f8172de27fc4c880785fc517ff3a0bc3584ece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilderhirsch-wolnzach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d1cc3252d00000403004630440220300884d4b7a6398796de067ed004b5f37dccc69ac1cee77d8054a0e3e444aa040220385e54c5ef1eddab847c288575374f1a7d7a153dde8d13edf245eac7495f31790076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1cc3271b0000040300473045022100cca13632928113909ece0a583f932c621eca57fb3fe926019365d944010a0ad50220395b28c1d28d0797f4674b7278059a6dec2418236a3b8b10d9e1d34762babc84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086c3b668ae85b46c196d3a03d5572df074d1f38bb33b10be59f0d1f4719cba65e04b1ed5394802c8fa75d44a5472eb64aaefe2b9298fde514e3d7ade4bdc99da705865fee402ff8b44a949f192652a7e1b41c297b9aaa485b696bbe35bff0fefc828131ef5b6f0fe3910e868845b93b8948427fff0773d4d6f50cc423a694bde20185243ae7c6d1ac84e6ed47e7047995f44b6cedf9e278a9e8ac12b059d03f0d415c46085c80350afca2443cecef90c01fa9a9997f442c4c89c795a98770aa5c967663a39c2ff33ab7d610dfc6e915bb8f86793d9d75f3de16b0923eaf6b9f9c3498fb43b7d0e8f4d23a1d4517be6ff25c70b4093a08eee411816d42d729470