bitverdreher.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:64:bf:bc:00:44:bd:a5:af:35:64:10:10:bf:7d:e9:63 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bitverdreher.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:64:bf:bc:00:44:bd:a5:af:35:64:10:10:bf:7d:e9:63
Serial Number (int): 323742449283205230229620977134145462200675
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:27:49:2e:a4:0f:dd:37:bd:ee:34:e0:f7:62:1c:7e:5d:35:f1:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:4d:c3:7e:4e:ea:0a:ab:2a:2e:ab:e9:df:61:82:3c:92:8f:a7:1b
Fingerprint (sha256): 29:35:18:f0:f1:3d:4b:b4:28:d8:da:e5:08:d8:ee:7a:a7:2e:97:c9:06:25:b8:36:ba:3f:fa:49:20:49:b2:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bitverdreher.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bitverdreher.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitverdreher.de
nkuhlig.de
www.bitverdreher.de
www.nkuhlig.de

Other certificates including the domain name bitverdreher.de

(limited to 100 certificates)
cloud.bitverdreher.de
cloud.bitverdreher.de
stats.bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
kis.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
kis.bitverdreher.de
stats.bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
kis.bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
cloud.bitverdreher.de
stats.bitverdreher.de
stats.bitverdreher.de
cloud.bitverdreher.de
bitverdreher.de
bitverdreher.de
kis.bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
kis.bitverdreher.de
bitverdreher.de
kis.bitverdreher.de
dev.bitverdreher.de
cloud.bitverdreher.de
cloud.bitverdreher.de
kis.bitverdreher.de
cloud.bitverdreher.de
stats.bitverdreher.de
kis.bitverdreher.de
cloud.bitverdreher.de
kis.bitverdreher.de
stats.bitverdreher.de
bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
stats.bitverdreher.de
stats.bitverdreher.de
kis.bitverdreher.de
bitverdreher.de
cloud.bitverdreher.de
bitverdreher.de
stats.bitverdreher.de
kis.bitverdreher.de
kis.bitverdreher.de
cloud.bitverdreher.de
kis.bitverdreher.de
stats.bitverdreher.de
cloud.bitverdreher.de
bitverdreher.de

Certificate

The complete raw certificate details for bitverdreher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323742449283205230229620977134145462200675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 11:05:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 11:05:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bitverdreher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848800688110920484387754674009944374666177780873770524190531110814925134867104944823454420626362718234083759785515265735229679347209580616899589408366766786710982233447463570056213399040020445491578870778654144238709361754597967506958575099679962372817835572244431072132514084640287859264633223099405227724456624937892657337089271830796186840962757887633279861093355131405887459966647517288336988267489042159716050829017853036475689387840534988703217234504158031239549202564448317473420439952260784687396935522740281285344484106324610705072056639044660571901080249034149972859788279674519424881379418537811330706092128648018462122077513442287849750794641686290349061724251047497814532792964796110479229182522381881604653132994525144252392553995535948821367386544295076754124527267210266066832391427288508761396810616628996281982666632857639784624145057071166798414825398020549346488589902289862053709220218019117523377147148956911060470244838355773643705491118710982387688497542722092834314897593322587725620501212509026584974752169047969356642863898694127832182486311641326241954933017445747846423012920563563929307512884611493530274528893571528125754602233923193587053841550316780173148401155717095543511872765370223369709000508381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9627492ea40fdd37bdee34e0f7621c7e5d35f185
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitverdreher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkuhlig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitverdreher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nkuhlig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d6329eaa30000040300483046022100bf283f296b4a0831668a915789654be8d851d0251a10d46a83dde518aac4d3c80221009ae13e533f578f3f61b31f6a5c147e63d9f1d2504fa34b23c5723d98d6600fb2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6329e9530000040300483046022100e817b7ae306200aa527980c4cf34b49403792d344138b2801d9c6a647fb9f8f4022100ec985a8a639bd5c6fb936022ad9ef40a5980e022776a4ad948a00e76ff3c71be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0076d90e1b0c2787801f444185fddfda0aa3c9a23f154616555a2a0d01328e6cf429fa1336ba337323346719f43a815d03655aa64193aee2cc2b51a6e4b272959a97643cf7b06def1366e4837f3d69acca311a34de7d511e5115cb474b19ff66596b31bf4675e8d3ebfb11348788573726eb8711d32eb62b70c4ca10a95b443bf713c2dd6b5fbc3fd23b641650fb19ac45dc5607ecfbb1adbe28e190882f4d459b0cec0a7d943c89577d619571ceb925a5b465df761a8f18fa33c8af5938dab5f68b9e00c505ae4eea9df757864566359de87e1c9e0a43a749ff43d88cbba56fd1c27ebccd3af77b9070e89a28d165dc6a421cdf34ca5dbc2245d79e74e2eafc61