kerstingernig.de

Issued by R3

About this certificate

This digital certificate with serial number 04:72:19:9f:36:89:d8:c2:d3:0a:ae:65:d6:52:64:32:fc:c2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kerstingernig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:72:19:9f:36:89:d8:c2:d3:0a:ae:65:d6:52:64:32:fc:c2
Serial Number (int): 387275390937294562507727029711363955162306
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:9e:59:56:3f:45:2c:ab:e9:02:db:34:99:44:2c:be:9c:17:72:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:0d:71:7f:2b:31:2a:42:a4:98:30:15:ff:6a:49:fa:dc:5d:17:59
Fingerprint (sha256): 25:85:1e:eb:10:88:5a:da:bc:54:6c:51:60:ac:24:3b:04:27:27:71:7e:97:6d:82:5d:30:41:b2:75:8d:3c:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kerstingernig.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kerstingernig.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kerstingernig.de
www.kerstingernig.de

Other certificates including the domain name kerstingernig.de

(limited to 100 certificates)
booking.wizer.dk
booknow.amplifysales.co.uk
meeting.spectral.se
booking.tanktestingservices.com
bookings.waps.solutions
callback.topinsure.ie
termin.s-s-b.de
online.perform.training
termin.eds-b2b.de
www.wefeelgood.training
training.lets-grow.co.uk
webinars.abraxio.com
apply.leadingedgeaviation.com
www.vle.myfuturecourses.com
learn.hypergrowth.buzz
www.wefeelgood.training
webinar.kerstingernig.de
booking.thehospicecharitypartnership.co.uk
go.leandirekt.de
bookings.charac.co.uk
booknow.michaelbanks.photo
bookings.waps.solutions
installations.woosage.com
campus.immovisory.de
booking.meditop.dk
online.perform.training
kerstingernig.de
bookings.charac.co.uk
campus.immovisory.de
apply.leadingedgeaviation.com
bookings.waps.solutions
bookings.neopartement.com
citas.yacrea.com
go.leandirekt.de
webinars.abraxio.com
kerstingernig.de
learn.hypergrowth.buzz
agenda.konomu.io
webinars.abraxio.com
bookings.waps.solutions
mein.kleeberg.me
academy.tooledupraccoons.com
academy.businesslabcy.com
bookings.utopiaparties.com
education.aluna.info
bookings.hakoh.com
imworkingonit.thirtynin.com
citas.yacrea.com
confirmation-rdv.degentravel.com
go.leandirekt.de
termine.haering-consulting.de
bookings.hakoh.com
www.vle.myfuturecourses.com
booknow.michaelbanks.photo
confirmation-rdv.degentravel.com
rdv.qbisme.com
training.lets-grow.co.uk
bookings.merits.ie
booking.upfront.ie
citas.yacrea.com
bookings.waps.solutions
cyou.digimlabs.net
booknow.adeptcloud.co.uk
cyou.digimlabs.net
bookings.routescoaching.com
booking.thehospicecharitypartnership.co.uk
installations.woosage.com
schulung.your-extensions.academy
calendar.halosync.io
online.perform.training
meet.kaizenbarcelona.com
schulung.your-extensions.academy
academy.tooledupraccoons.com
bookings.waps.solutions
campus.immovisory.de
schulung.your-extensions.academy
bookings.waps.solutions
academy.tooledupraccoons.com
apply.leadingedgeaviation.com
learn.hypergrowth.buzz
booking.upfront.ie
academy.tooledupraccoons.com
training.lets-grow.co.uk
callback.topinsure.ie
callback.topinsure.ie
webinar.kerstingernig.de
mein.kleeberg.me
schulung.vimopro.de
termin.eds-b2b.de
bookings.waps.solutions
education.aluna.info
booking.ilogixx.de
bookings.amazix.com
www.vle.myfuturecourses.com
calendar.halosync.io
training.lets-grow.co.uk
imworkingonit.thirtynin.com
termin.eds-b2b.de
www.wefeelgood.training
cyou.digimlabs.net

Certificate

The complete raw certificate details for kerstingernig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhbxNb59UmE9Dv5n8zon
mr1k6FqbdUn37W/Ykgl1lv6EGa4qtqmVtHyuEcf6l4XltTblii70GLcoJZTrguOv
maciParhuaPap56LLR/zwSHgftwHyphb8ddcb3CdDF9crFiWKzKXMvicKPowF3CH
BoukbTvCHxzkPEuaMTft8k8IMXgJJ7LWJgP7ATOGlc6sOVXR57Pvkjh0jFphdLqk
GNXrTxRMHS6Ayruu1iyOWmgWCNs6OYYeGOenNbOZ/4vD/F2lT2Yea3yNBW0I6Z7h
Fcj0dk9XlxY/EM9OFcxj3k8PXT2rB5b6zsrbfSVelqvz0KRAzHEhIYdbGL0sEj9z
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387275390937294562507727029711363955162306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 03:23:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 03:23:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kerstingernig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25511450836592160241078656979462316762167041779524431770623570373474112104625676853411251569605697508856022721381456418569790218096314559342412173057776946876340047697020567766997641500108659327430932031858733933100004066442806571018309613370558907396029188854028452268414788851054120495235026592001316699897507559859442140686854222988586044051805184648525813878039860503181382748434149209330715736064003264061126242579001721519566643807138429656986014902477008221548245618888714474217569012950361661656102097727498831782921183693115520674735073477630005497703581488971229802835357610244541566412675170911412499215347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd9e59563f452cabe902db3499442cbe9c1772f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerstingernig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerstingernig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7fa40b0f0000040300483046022100e0257a00c4e12a9f383f47753a316ec1d098539c929c80b65601357cae91c0cf022100a28f65154712a1f04b5ba72d77d74202383eadc086bb1a5b4b89c98fdf38407400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7fa40b1b0000040300463044022061b68ff350fe119aa9fc18c3015e6f2e9f7aa9f4ec9935683703434f440195b70220660cf8b67bf0f9c646cbd1fa770de223070fdc59ed6ab77f3d2f39227d744493
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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