web2.ro72.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:fc:d5:d0:3a:c6:4f:0b:a3:d4:43:01:2a:2d:a1:00:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web2.ro72.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:fc:d5:d0:3a:c6:4f:0b:a3:d4:43:01:2a:2d:a1:00:51
Serial Number (int): 291277499354968857556869227035457616937041
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:98:a2:4e:95:54:9e:56:3d:c1:d6:26:f9:fc:7d:86:7f:73:fa:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:a2:29:4b:a8:fe:94:a6:9e:2b:aa:14:b5:7c:00:5c:9d:f1:26:3d
Fingerprint (sha256): 25:62:0c:fb:f3:a7:d3:b5:84:29:b7:c0:b7:bb:0b:a9:df:22:c2:b1:9c:5b:52:ed:bc:89:3d:d0:9b:db:95:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web2.ro72.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web2.ro72.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web2.ro72.de

Other certificates including the domain name ro72.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for web2.ro72.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291277499354968857556869227035457616937041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 09:00:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 09:00:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web2.ro72.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787847289421704887579864791149535586764824328732888181214004621002099079168772980791275693065851447824364688050237721561909046975194737079382081082020329730221904141666170826164287946201186921693916253802293348359525523557543044518343026996057581527534464270275546926067513667752550108338509184998232084109173404686067638432497037484687540933163464020131352740258674296850654206075587648724754942886426725814202624445106525040539923102032268291916947034507912993117349357532767357592510014010227598453252198800060400470171993842785739641507908291737204948563624290054776136145196319030414953289121500085321202932802935865140043772335878966092983617146960576530094583322151749607213228627757846937779802702451889816460345449868704378594927250971204900305253092392483041291712885225508187415426365975618559186478480327305430031661243126695208890244284952828497441381295247776079235789117551329036602197775255282858628535638864066831497459049884686735732927903593299837342578022566665803265868110628889655736296792875865773885446241943961270774965662159143769262018576754438105098484512420280160408948793919595219960568852574950194815234338301691106465456887681299113175705302668630768122875127370679265618968211986625847323066984310183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5598a24e95549e563dc1d626f9fc7d867f73faef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.ro72.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170243e1dfd000004030046304402204a21d6f7b6661e53084fbb8a0af7fbdefe2cc5bb02c1bfc57af5b3cdf6b0598c022027c4de03121759b61e6f4e78361bfe335c61b32610cf8fb65c1601878b3d80c00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170243e1f2f0000040300483046022100f378ade33bf44ccabe1bd37ab7c2670bfb77918092b87b07eb684b4461757172022100e6713172f632ad0bdc54844adaadf0226bc6dd938f01cfbf6a577d9060bff3be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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