www.kirche-venedig.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d7:b0:bc:8e:4d:48:7e:90:37:97:32:11:73:cb:ba:23:da was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.kirche-venedig.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d7:b0:bc:8e:4d:48:7e:90:37:97:32:11:73:cb:ba:23:daSerial Number (int): 334732489848575227484264674611704685536218
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: de:74:49:92:39:f0:19:6d:3e:66:ad:f2:aa:15:38:87:e6:14:af:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f1:38:21:20:98:32:fa:f5:34:25:0a:43:ff:38:f3:01:6b:75:61:58
Fingerprint (sha256): 24:eb:b3:49:33:9e:9b:f0:e3:f5:55:7e:31:05:69:7c:36:85:c9:bc:9a:ba:79:45:ff:79:65:83:9e:ad:9a:4f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.kirche-venedig.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.kirche-venedig.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.kirche-venedig.de
Other certificates including the domain name kirche-venedig.de
(limited to 100 certificates)
kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
securetest.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
securetest.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
www.kirche-venedig.de
kirche-venedig.de
kirche-venedig.de
www.kirche-venedig.de
Certificate
The complete raw certificate details for www.kirche-venedig.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISA9ewvI5NSH6QN5cyEXPLuiPaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjQyMzExMTBaFw0y MDAxMjIyMzExMTBaMCAxHjAcBgNVBAMTFXd3dy5raXJjaGUtdmVuZWRpZy5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjf3e6jCJNCFmDlt8aonNhm MRzzQRip0M/JuifeuoM1Rjxd1qXtPu5idooxMqejyQZZlCaXsZGHCh7yEFTbou6D mPZQYjiV24omf6A2j+iJRJkElsn78SObkreJB4zMhZ4ZITuO9M63yyvSoWIvPQSX QQnym5wDUylhNyYHyEqfxPcAgMGI5WOHaBN5AJFtcdnp3N2rlqDfgLZNIDYS+O1k u4UM2RJwYVzqkh1oH9QUS4r/0lFNJHtVsgotSt+cAnfmabhFZvtal4FJaMtqx3MK vEfAgv821YYWks8bOX0/4BNc0cxFSr/O7J2onepPHIVg3K1YmuHLVblMFwDqT/MC AwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU3nRJkjnwGW0+Zq3y qhU4h+YUrxkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghV3d3cua2lyY2hlLXZlbmVkaWcuZGUwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW4AQLUIAAAE AwBIMEYCIQDbXIYOentKOyfABkeBjfhv/Tg5V2Tu6Cgzmup+i197aAIhALV9UMhW p53edVKtJ9fX7BiqBQArEmZRki2GJ72YV8eGAHUA8JWkWfIA0YJAEC0vk4iOrUv+ HUfjmeHQNKawqKqOsnMAAAFuAEC2zwAABAMARjBEAiBeCzii4sGLLUbPxwJz8b9H 5t/kUtH66HlfarsgfQOH0AIgetqfTaF0wnzHlKrnR3dk3ZeKUAJiHhNEknUBeL7w yqkwDQYJKoZIhvcNAQELBQADggEBAFzq1OBbPjp3jN0AXQD0aN1wSbUIm8njmIxl SLMAKDFAOKVHhQ9s00FrKd6VePP7+Tjo1eDALQcYtEZ/LHc215YcjluB7De4aAok BZZgMwAABmgB4bwv/+XFARKSb3rB4eaNp3KggbbNjpjuAu6Ajbq7PE+ria5ixcxL pP7semZY/T3jXa6Wy5e3tiPJnwA875oSDlpyxNPl6RJZQwnnjXfxAg6y2ahV/zZI Rf76yc0UbyVx9gcZp+RRLJpqGTZ07gMGk6O8xs5QxRilQF7KZvs9wfTqdwo4igOx vKqlKbM9aq1cfmux+p1vSNk40N1nX5j6UBODSYisy7WNcLJyKwU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN/d7qMIk0IWYOW3xqic 2GYxHPNBGKnQz8m6J966gzVGPF3Wpe0+7mJ2ijEyp6PJBlmUJpexkYcKHvIQVNui 7oOY9lBiOJXbiiZ/oDaP6IlEmQSWyfvxI5uSt4kHjMyFnhkhO470zrfLK9KhYi89 BJdBCfKbnANTKWE3JgfISp/E9wCAwYjlY4doE3kAkW1x2enc3auWoN+Atk0gNhL4 7WS7hQzZEnBhXOqSHWgf1BRLiv/SUU0ke1WyCi1K35wCd+ZpuEVm+1qXgUloy2rH cwq8R8CC/zbVhhaSzxs5fT/gE1zRzEVKv87snaid6k8chWDcrVia4ctVuUwXAOpP 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334732489848575227484264674611704685536218 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 23:11:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 23:11:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kirche-venedig.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23338241007668303385797166215644439172522784406132660514136417019348297592224586382191783800868205035845419697762450839053668009056014454228904275666510603124241794240802257893332248363568507451431925601707306649821108373641806679607391220451219750726662985786205478472071985948475223741170453909941851845676257898758982796807969361968811540159655201989307164046477413110744150279383616444348691238892877628765146786027593610156565044268379783297910135883460997889381253601676541240776944014294492170539956909043826180378615293459178117596058533776315563283972083242360996499275368840095018640964433665144637161623539 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) de74499239f0196d3e66adf2aa153887e614af19 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirche-venedig.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0040b5080000040300483046022100db5c860e7a7b4a3b27c00647818df86ffd38395764eee828339aea7e8b5f7b68022100b57d50c856a79dde7552ad27d7d7ec18aa05002b126651922d8627bd9857c786007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e0040b6cf000004030046304402205e0b38a2e2c18b2d46cfc70273f1bf47e6dfe452d1fae8795f6abb207d0387d002207ada9f4da174c27cc794aae7477764dd978a5002621e134492750178bef0caa9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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