jabber.r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:63:a2:c6:2a:9f:ee:79:fb:97:62:0c:6c:b8:6e:04:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jabber.r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:63:a2:c6:2a:9f:ee:79:fb:97:62:0c:6c:b8:6e:04:78
Serial Number (int): 312511651576389479538455082214528429982840
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:75:c8:5d:a6:ba:4e:27:39:d3:02:15:39:49:a5:ae:7e:94:ff:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:c4:8e:7a:9e:a7:35:42:39:c8:23:3f:49:04:8f:2f:64:de:76:0c
Fingerprint (sha256): 27:b9:3f:6a:49:54:7a:0a:33:2f:45:33:9a:28:92:83:4b:9a:a9:82:df:55:ef:0a:7e:12:3c:1a:68:cd:16:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate jabber.r13t.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jabber.r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jabber.r13t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)
oc.r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
mail.r13t.de
jabber.r13t.de
nc.r13t.de
mail.r13t.de
blog.r13t.de
dyn.r13t.de
rc.r13t.de
mail.r13t.de
r13t.de
oc.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
r13t.de
r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
nc.r13t.de
r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
matrix.r13t.de
matrix.r13t.de
nc.r13t.de
matrix.r13t.de
rc.r13t.de
oc.r13t.de
www.r14t.de
oc.r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
blog.r13t.de
rc.r13t.de
matrix.r13t.de
r13t.de
kibana.r13t.de
graylog.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
mail.r13t.de
dyn.r13t.de
nc.r13t.de
matrix.r13t.de
mail.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
rc.r13t.de
jabber.r13t.de
r13t.de
blog.r13t.de
matrix.r13t.de
blog.r13t.de
r13t.de
r13t.de
mta-sts.r13t.de
dyn.r13t.de
oc.r13t.de
matrix.r13t.de
seafile.r13t.de
r13t.de
r13t.de
oc.r13t.de
dyn.r13t.de
nc.r13t.de
nc.r13t.de
oc.r13t.de
seafile.r13t.de
oc.r13t.de
matrix.r13t.de
oc.r13t.de
oc.r13t.de
dyn.r13t.de
matrix.r13t.de
matrix.r13t.de
r13t.de
oc.r13t.de

Certificate

The complete raw certificate details for jabber.r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1h/KQWGEZx+XPK59JJyC
OyYYt7keFexjMenes5F+uX3ajhyzJu75ir0Yq9M58TtKaBgNwhRFxE1YnFqPglqq
NUsh1oknuZXrFyNY3xZSn8eSZQ6lR09hU8k62oaZHKazcp2FBKspu0ZGZboAoJwF
4KJ1/RtMkWl3Jm0CTm8czkIGiV3ALOK7YyMZmZqynfaBaBQdoKjtNun3TNrR2Hok
vMPmCxUQCm+xoP58FW31/5IGwNk25mGiQeGfC/ec7d/PiqJnQhDLpWUrVZHxMQ2y
YpUDLhjHemoESmiaLV6z5GPMoJeor9Ekj6WRRl92y2qYRJ6YXI43YcMSs/qkJPAG
5J/DErqvlE7pNufb/bodftmgUJk9xJ77yY0H2VscZDYKNtM7Ok6yoP/nEaRDrJWN
r/PsSWYNyugRNvnt4uANObvf2CNuhur3gBa9koUXZU03hx8jKwThixGKvjXJ/Su8
6V2K7VDulwqhFr01nRuqtzEFu6b8o+v+roiilg3fvRRclSzYtVQk+BArlO8JoDx8
BGKraky5AFIjDx/MxamDEC9kVfTGCDmwikTlfTprowHA4PYzMqXYFItpE0WfHQ30
Aqnel/AwQR0tHucvztgFk9wEX0Vgt2wnF9FBU/wxT4Rv9q32FTTiIvH/tQeRRJi/
6xMkaGZizurV9RUBD80rX7cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312511651576389479538455082214528429982840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-10 12:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-08 12:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jabber.r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873550440440083446346346079153298183662601950081256660433525313401386943748660883117395383795130955848267946725809670635538490437339082986130682332102854304256728363771021234575380156353569849509323882831057895241829772177268703425478483177837071110269384655615974507144867072594212472733756920893694595656858397364818525077489612002866215490513706748890737818911195034540622443110785840133870689219874455879546566356302995422310695644776221561921902638635374567165039657817921205962264806317348622919890723531225616601350669812022486635288883142639195395642095534748982694001043496963256582254394721248627888743396779298360851288138127576248770282513626330526285437855006625492650238506857510920504407303896972877677388318289227061829182746679520329060624700873041339685422364220517561325911047861406373529704492980015609416735135112444280758760531386399789872796692397570265124883643415913059031382889863944180977970017840131285563941205793414428370431069034438496531191167305653370809971840611789550843690761697469438868737993606047924777251816541806731995652646715463575781390476046395294835215381236337485008719425200579234660431096993959268482058026511252107311523681477724596153783249362242445686556294185814752950422013173687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1775c85da6ba4e2739d302153949a5ae7e94ffe0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabber.r13t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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