welzcare.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:9c:10:cb:9b:32:15:6e:9b:52:0f:37:ed:c3:a1:16:ca was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=welzcare.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:9c:10:cb:9b:32:15:6e:9b:52:0f:37:ed:c3:a1:16:ca
Serial Number (int): 287746046821910199951225412671545414850250
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:50:69:c1:67:31:53:6b:a9:4d:1f:f6:da:29:9d:84:a0:b2:ea:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:6f:14:c9:f3:bc:c5:24:8e:5f:6d:5c:56:ee:63:06:71:14:9f:08
Fingerprint (sha256): 23:b5:db:51:7d:04:53:0b:18:ed:7c:48:81:74:fd:08:2f:9b:12:61:bb:d4:b5:a9:67:94:0b:41:09:eb:f2:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate welzcare.de

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for welzcare.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.welzcare.de
welz-care.de
welz-care.net
welzcare.at
welzcare.ch
welzcare.de
welzcare.net
welzcare.webhosting.pixelcreation.de
www.shop.welzcare.de
www.welz-care.de
www.welz-care.net
www.welzcare.at
www.welzcare.ch
www.welzcare.de
www.welzcare.net
www.welzcare.webhosting.pixelcreation.de

Other certificates including the domain name welzcare.de

(limited to 100 certificates)
welzcare.de
shop.welzcare.de
welzcare.de
shop.welzcare.de
sweetcare.welzcare.de
welzcare.de
welzcare.de
www.welzcare.de
welzcare.de
shop.welzcare.de
welzcare.de
www.welzcare.de
welzcare.de
welzcare.de
welzcare.de
welzcare.de
shop.welzcare.de
welzcare.de
sweetcare.welzcare.de
welzcare.de
shop.welzcare.de
sweetcare.welzcare.de
welzcare.de

Certificate

The complete raw certificate details for welzcare.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BeqeHgjm2Xf63Ybuhpy
Lt1+Dq637RpPb0xV50MckJsWaElxVXfUndSBcHpc0Cg2nRO5wZVHvnyIWR4EFMij
lbKzSZfoXTS1/TB1BBlhFOailg6aEPJBVAX+WZN8gG7UtXIYfWCi1P7avW+IT8JC
SRgptgiHSGluj6nqK9AenwKfudWngRepjdoPeRxHJrlV5Mksrbn8uwRe0hPzhpcO
YEKCoXv0fe6TMxfoSFFvxqgB2tf16EX58SQIGmTchPOiSWdxBR4s6ct0yQ8QKs9L
R+7diNL/uTqdn3uaG2VytDn3hy+YIGNyR+IGpUY4008y/URupp9gb/6UBLgojCZI
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287746046821910199951225412671545414850250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 06:34:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 06:34:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'welzcare.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26774190743397491231593914333316970363440462517519743972311769378393452368273949500550718329821788721712516714885202516994606254565725829153887170215436455111005126951851992857437005537894325921158418310776984589929217028173480947338609236945467732516033180642154653898741844588251686521353212920557427518364936467349298076285739473749469578387616687254347766227057589575951915794950737739275455909122281093672735905345876266271483151221116601714543630728895443257722137480505529201714344228367991478511780330208525650790549297583417656070206871433550975045004638861112080501192035518493743907232414056948200081082473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c5069c16731536ba94d1ff6da299d84a0b2ea81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.welzcare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welz-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welz-care.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welzcare.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welzcare.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welzcare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welzcare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welzcare.webhosting.pixelcreation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.welzcare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welz-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welz-care.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welzcare.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welzcare.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welzcare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welzcare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welzcare.webhosting.pixelcreation.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec06219bb0000040300473045022100bf0ee7fa839081e61251cc803f0da8fd3f0da7ad78cef051d1694bdcb5d3aa96022068a7e398c31f5034db112922cc91fc64d22af50cdc24fea02344449c5f3bfbcc007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec06219b10000040300473045022100c4016948c172c89f399f79910e87d1e9a7622f919785a1878a65fa2da421f630022028e787a06bfaad57c37d79cbf05ad61d6a74187bf755120590b918c4b823e4c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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