wta-suhl.de

Issued by R3

About this certificate

This digital certificate with serial number 04:e1:f3:1d:08:96:de:5e:25:de:b1:83:87:9a:f6:11:04:3b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wta-suhl.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:f3:1d:08:96:de:5e:25:de:b1:83:87:9a:f6:11:04:3b
Serial Number (int): 425335829438049093629267661860335772566587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:22:93:38:55:27:4c:50:f2:c6:1d:eb:97:5f:d4:de:6e:2a:10:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:c8:0f:7b:9f:42:0f:9a:a2:43:79:c0:8e:a1:01:78:d2:63:9d:31
Fingerprint (sha256): 25:ed:81:19:4c:61:2a:22:e0:d8:8d:d0:01:a0:49:57:43:6d:f0:13:b2:13:c7:5d:1c:6c:fb:36:c9:98:4e:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wta-suhl.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wta-suhl.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wta-suhl.de
www.wta-suhl.de

Other certificates including the domain name wta-suhl.de

(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
webkiosks.zaubertopf-club.de
blaetterkatalog.kleentex.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
flyer.medion-fabrikverkauf.de
www.maryspubs.com
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
digital.queencityconnections.com
egsk.weita.ch
blaetterkatalog.kleentex.eu
angebote.dersteirerhof.at
magazine.biss.team
www.wta-suhl.de
read.africanphotomag.co.ke
kiosk.leuchtfeuer-verlag.com
kataloge.triplex-fischer.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
app.worldofmtb.de
epaper.chili-peppers.de
webkiosks.zaubertopf-club.de
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
digiprospekt.freyplus.de
digital.queencityconnections.com
wta-suhl.de
publikationen.kmu.org
webkiosk.stephanshof.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
immomagazin.wegenerimmobilien.de
webkiosk.edeka-koehne.de
wta-suhl.de
webkiosks.zaubertopf-club.de
webkiosk.bm-agrotech.ch
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
brochures.adipec.com
webkiosk.airhoppark.de
catalogs.k7-pro.com
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
silentreview.faaa.net
digital.queencityconnections.com
kurse.bdb-musikakademie.de
publications.nursingald.com
webkiosk.bm-agrotech.ch
kiosk.thewholenote.com
epaper.asscompact.de
rieswick.mediaflip.de
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
rieswick.mediaflip.de
ebooks.teammelanie.nz
webkiosk.werk5.ch
webkiosk.lurkoi.com
kiosk.seniorenreisen.de
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.suncruisermedia.com
silentreview.faaa.net
blaetterkatalog.kleentex.eu
kiosk.dorfstadt.de
magazine.biss.team
read.africanphotomag.co.ke
moebel-brameyer.mediaflip.de
webkiosk.bm-agrotech.ch
kataloge.pier7.de
kurse.bdb-musikakademie.de
publications.nursingald.com
katalog.hltravel.ch
webkiosks.zaubertopf-club.de
blaetterkatalog.kleentex.eu
epaper.logistik-express.com
brochures.adipec.com
booker.turningpages.me.uk
webkiosk.bm-agrotech.ch

Certificate

The complete raw certificate details for wta-suhl.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl0gjoMHdFpoHNF0+BMa
jWA7vrGENlIehA2DWLWJtC1xo58fF7DW7fG156RUULap+jTlK25G4CbSrJNshD4j
FDlC5PAvzhmTsesCQwSQfxua17Tn9a3zU6nvzkyOkoHdsOOLw2LNJF6/vbtlPujm
Q9UiTALEzCs6qWU/6FkMw7oX50Aw67cM6Xdcu1lGWl1c85ayjckFmizEEIUkgQV4
CFoCTjlDq6x6zPznQK4vMmwaMxFQGg4aGu+fDDbOtyM5c43ipd7oYh0o78qzKOrv
M9tTPglNuO9dqY5ItYGg1EEVB3LDa1fKjzprYru6niyUPBaCzABYXbQ8EZ+oyUp6
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425335829438049093629267661860335772566587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 18:40:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 18:40:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wta-suhl.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26051013544345884939699738861026295001862009296209020322374986324220769793378298865347909032347689364013364856462317919397455703407044415070975330854939310981810731565317557146803366018262705140258720295932169912781359907725337175296988123920157865421369807056402900006959643773852466130182468622024647531796187866137867794759208556672029327599527314952556402454902608220774986168023852021975577628709990391735513475284869141738048318729520761079289797704454555274164595576349239356462327207642445560628602461679985216631403339277555116098171441886973542336689602668475080490331274754761341077792798310796158141364783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d222933855274c50f2c61deb975fd4de6e2a101b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wta-suhl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wta-suhl.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf36614c7000004030046304402204cc4d170fcb9ff1e6d2254a522a834c01873f0cb7ec690a8cb6b8603bddb5f3e022065c58275dc819817466e6733bf34cfc04f921c5ae7aca9d80054a29b30ba1d10007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf36614cd000004030047304502200538f87935be92280caa0a9b7bbb12503bca91570d583926c16f63dc2d399301022100f15d6438d0edcb1ed122163143393076bc1b6365988b6ce9c51c3692d33b97d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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