kuechenplaner.hoeffner.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:d0:cf:53:2b:79:72:9f:c5:ac:62:ec:62:c3:d3:a3:44 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kuechenplaner.hoeffner.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:d0:cf:53:2b:79:72:9f:c5:ac:62:ec:62:c3:d3:a3:44
Serial Number (int): 299726038805883221408089283855845896201028
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:aa:0d:18:16:08:c0:e3:15:03:5a:d2:71:3a:9b:0f:26:9a:9c:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:35:b6:ee:1b:bc:7d:48:35:57:e6:fe:2e:2b:b3:50:0c:5f:8e:6c
Fingerprint (sha256): 25:11:a6:b6:3a:23:c9:af:c3:59:8d:b1:d6:75:31:9a:2f:50:42:c5:93:7a:6f:48:52:4d:d4:6f:16:59:71:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kuechenplaner.hoeffner.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kuechenplaner.hoeffner.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kuechenplaner.hoeffner.de

Other certificates including the domain name hoeffner.de

(limited to 100 certificates)
kuechenplaner.hoeffner.de
kuechenplaner.hoeffner.de
meinmoebelhaus.hoeffner.de
kuechenplaner.hoeffner.de
planung.hoeffner.de
schrankkonfigurator.hoeffner.de
kuechenplaner.hoeffner.de
*.hoeffner.de
kuechenplaner.hoeffner.de
modules.hoeffner.de
modules.hoeffner.de
meinmoebelhaus.hoeffner.de
meinmoebelhaus.hoeffner.de
hoeffner.de
hoeffner.de
planung.hoeffner.de
*.hoeffner.de
meinmoebelhaus.hoeffner.de
meinmoebelhaus.hoeffner.de
modules.hoeffner.de
email.hoeffner.de
meinmoebelhaus.hoeffner.de
modules.hoeffner.de
modules.hoeffner.de
meinmoebelhaus.hoeffner.de
hoeffner.de
modules.hoeffner.de
email.hoeffner.de
modules.hoeffner.de
modules.hoeffner.de

Certificate

The complete raw certificate details for kuechenplaner.hoeffner.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0+eRnJ9zfEzc61jbQXr9
PpQ7thxbCe8C91Q466s6E8Z0bOtPi4d+GykPHAzrGneW1GDhMuLqbMQEuud6OnIG
a86UfTJCkDob+yxsBQ9VwXWfr7qFlx1gFScKtQZOgTTR8SJOyppgtwejHfVS4xKW
WkMBAlxLxnh7r/9JbnzwnVk94Rr3UnaudXF9v+GsvDFsEdfC2MLwakmNPxDixHgH
8w8rZyc7C5wQemv8tA5TNb7eQGNcvEPedJTzggz3yxeev40WnWDPvoGPqLEMD9+L
/hwXFcwsylYbMjks53LflD0EAyju3oNe7pX03VokrDslD1rnp8AQ/IQy6B7el65C
c9t4I/UdCyeLmGREautzXT/jRUUbDsIxTHuLtlbNb1GL2DnCj9v4XgyRefZtz2pt
hlqkvnUsp1EkZGbsUzeoGDa4ahwSnxa0AD6P44FyuENcR//embKMnSTuuX+/RAT+
uOEyBHCZNZgpuF95esEtHtjqPBV5xt0eKPapLq7zzLNdnpd50K98AE2iawfK4BLd
zMVu6D59taziiu9eKY+mjvELhF+2iyH+9920h3vBq449D3V86iS1zdyaG9uEIo9Q
C1LqG33/FS7SMIHBwGDQDuvwwFe9UkJg3zhpfjZ/I039d44L3wU9M3vhWhsLmGj6
cm5wSeyLQeYK5jxOUYFVGFECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299726038805883221408089283855845896201028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 19:21:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 19:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kuechenplaner.hoeffner.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864495204076662462219504541516890627736456615594232187709516562001090511419057674736012360598366482575451009045873393595557539178952992890802370937810127749761799802008775198164404118032042202026611946943014438215991836680519177028946267114068298615714626044232559246316519784911731434946615842939024665189481625725289766201605612112281300483724819146800567440380421363882508080054045085992304210043146457872608897155917453605156293079380186721899231976658963739535586913647386067295574849398611415055867799921631334687823856623031562653032999502251701323281117953490973694399713551907169671870308888964680277824165482379850968018914050436950710079149358543887046871339167097415233067358517602568508257286800887638189770959339478114906534239234984061222596853841547916985887250929370001818825271834218085375430844478284131672474508835677911565234636858538526894870064464332116172116925074568688856404987219410938133637086046558914464229202831929249674835752164623205884655620846527031559341254528224762953940346022903119297063426529981292769272676582190537826946565135844106178301194686543519615858373586624503769433551625508789471981779883078112400656899662536826142600616256510962201579013443111811004383329223053365820132531968081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98aa0d181608c0e315035ad2713a9b0f269a9c28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuechenplaner.hoeffner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e28a120090000040300473045022100fde0433224ff7f0c747761c45cb1aefd243343bc20c86c5c24a13309c377112a0220696b6cfe2f138497a7dab9f48a3c56b37d0d0cbc7fbf95aed0c96f50ce79ef470075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e28a120c6000004030046304402201873ce1bdd91e9e1ca4d39cc044423deda82b227e5e989069a21ce234fc5a33d022013b454873de669dfcf0c997732e812cabe9a1955be2e23f28e4aec4a75aa40cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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