topf-online.de

Issued by R3

About this certificate

This digital certificate with serial number 03:c2:d3:97:99:ae:72:22:9b:9d:28:f0:e7:db:a5:39:1c:47 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=topf-online.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:d3:97:99:ae:72:22:9b:9d:28:f0:e7:db:a5:39:1c:47
Serial Number (int): 327632891238908750625571947361512434768967
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:8e:ce:39:d8:f4:9f:41:9d:39:0e:16:87:63:44:87:f7:4d:8e:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:1d:a6:6e:fb:ec:ac:92:49:8b:39:2d:ff:26:31:22:db:f6:b3:68
Fingerprint (sha256): 27:41:40:b1:89:7e:eb:db:a7:5c:07:be:eb:e7:5d:c4:90:31:6c:9b:f0:f8:3a:b1:cb:68:16:26:81:f6:67:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate topf-online.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for topf-online.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

entwicklung.topf-online.de
topf-online.de

Other certificates including the domain name topf-online.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for topf-online.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327632891238908750625571947361512434768967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 02:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 02:48:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'topf-online.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624796483041718480482982459700608350002142494224176420705880893866097684067728557709187933809119067411465808728193494533805708869178065143818061815966539158360692369067769974433005531403475197621881034833667784938801634725210621673029899860735846251009507278063894642453377599386231944440357798050712936726565354933879525720894133266925022044416214715156852004043654454470184141443701876006988082513647788420012009796219480066304758219980751511098596769411322895013654591035242269797650520085571738988901813938901037158620049582146075048441295431347230166797523380330705674734647942770631841398699332677544120601554403247706711661143250366973822071015029711818456354889578842236997024051362214738467523643785889270538670353152995631869685596391817630790510291849763233231959725909598545331977037393094417878329927035251868350287719900531663380441971636527918117623021270024948679799250620524597075946450259908182205616397769631563756492248441637257831643653850719646897871799521956891693491407706704049245871469149861933215294294659489805997800775515730585016081769347273690135090002372493368498007093194728523866079639842705569240911980400484602898211043021492965703833088104198329975339809362733383062537236435694107764764193741659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							248ece39d8f49f419d390e1687634487f74d8ec0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entwicklung.topf-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topf-online.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bfa4b57070000040300463044022017ad367f0ef9e115e17e80932550e2f4813ebbe0d33fc9b8590e2fbcfd65d02d022018573f9639d1cb6af293929dc2b33888bcaff4681c0164d54c674ec00c844cb90076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfa4b571000000403004730450221009eca156912f39ee78c95621a2c6a513b0b901bf03517f82aeed03215f094b5f5022026991cda704a05af88a373a2e393e9dfc51a00faf016058befb15315f36113f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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