zischka-online.de

Issued by R3

About this certificate

This digital certificate with serial number 03:d0:3d:63:b0:4c:15:bd:cc:9c:2e:90:33:6a:e4:06:75:69 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zischka-online.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:3d:63:b0:4c:15:bd:cc:9c:2e:90:33:6a:e4:06:75:69
Serial Number (int): 332197190635699974388644023105565164467561
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:52:85:4a:55:35:70:34:c4:c1:cb:e2:d3:47:c5:0e:11:8e:71:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:91:d0:60:bd:df:a3:a5:fe:54:e7:84:38:17:51:8a:b8:5c:a0:8f
Fingerprint (sha256): 26:64:e9:e2:c8:26:c8:92:62:a1:a6:c5:27:bc:c3:da:12:81:1f:b2:f0:f4:1c:4e:d7:d1:44:8f:a9:85:e6:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zischka-online.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zischka-online.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zischka-online.de
zischka-online.de

Other certificates including the domain name zischka-online.de

(limited to 100 certificates)
zischka-online.de
zischka-online.de
zischka-online.de
wasserschadenbeseitiger.de
zischka-online.de
pichost.zischka-online.de
zischka-online.de
pichost.zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
pichost.zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
pichost.zischka-online.de
zischka-online.de
pichost.zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de
zischka-online.de

Certificate

The complete raw certificate details for zischka-online.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3lWrUVTyrjjEqNMdvcd
DXlY57FXgGJywyMCIayIclLFERtohJs3AhoGPBodA0xXE0YyAq66DxfQZV1B+tFG
deYMxBcwbGzA55SVMclPbs6ePNTkvihNdEH45ZAozHzdPb3NA49Id+ixPLXP67o1
n5i0tkyByi1+HXDoF4i9ZiJToChs30c094bu07+JMTfmwHuq+UBtKfCXb6UV7C2d
tD2o5t3A3O+3rnMRhuqU9nKBqo68U1jHMzODfa4pf1OCNB5kNTju0+roZOqBwSEd
ZEIu7HCg4aJ29yyDfxfOI4Rf6lyhGc+cdGweyB91sycgTtVbt4ieTspRsqJeLdgs
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332197190635699974388644023105565164467561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 12:40:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 12:40:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zischka-online.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20636677994011569964555487523438556777823335699741651540156551145818002350496055686751312357387050463262504506975927035865143636863514161316092797701998445548035482544822259888137499947294401971505240780846728426952329721973546631775961357363118754572910239644641851516655577470426164003238615300408238073977101118792325863946542270676564492999544131376812354453837093907068818153275161060506928312806962516609313750083947241372807920926242784347687437056649764278883476509881628783895237856806630754513104773460450689326305508823624636247660904905597436776398289623879268303696712360614379310351221124432454636547223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e252854a55357034c4c1cbe2d347c50e118e71a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zischka-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zischka-online.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af5c4bdca0000040300473045022100b568b027df964fc394d1a0cef7a65fcd42c59e95013e4f148ef6570c32eb07bb022068f327646e38816ed3761dbb0cf9d3921fc8bf34a83ac74a9465537511205821007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018af5c4bdbf000004030046304402205af9dee39b315b99163d8896601bbe65dc05fa62b4d7b98f8306bf6cc3fd0a7b02201fddd5ef390ae90e52a042d47586906c5fd0b4fed7d24873ad48e2354b289b76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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