agatha-grapenthin.com

Issued by R3

About this certificate

This digital certificate with serial number 04:46:4b:61:60:58:13:e1:2e:ca:d6:cb:fe:f8:dc:d0:f1:48 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=agatha-grapenthin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:4b:61:60:58:13:e1:2e:ca:d6:cb:fe:f8:dc:d0:f1:48
Serial Number (int): 372369107118075378293961793032839662465352
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:4b:ac:f2:66:70:ff:0c:05:a8:0c:e3:2e:a8:22:63:26:21:71:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:5d:a4:63:76:43:41:76:e7:30:9b:f7:6d:a0:0b:4d:57:9b:7b:55
Fingerprint (sha256): 29:3e:29:5b:cc:f3:93:2e:1a:77:3e:d7:14:47:87:39:13:c5:db:cf:4f:1c:c7:05:e0:7e:ad:2d:af:3a:6e:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate agatha-grapenthin.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agatha-grapenthin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agatha-grapenthin.com
*.design-touch.de
*.designlook.de
*.designmeeting.de
*.designtouch.de
*.mangata.design
*.organized-designer.com
*.organized-designer.de
agatha-grapenthin.com
design-touch.de
designlook.de
designmeeting.de
designtouch.de
mangata.design
organized-designer.com
organized-designer.de

Other certificates including the domain name agatha-grapenthin.com

(limited to 100 certificates)
agatha-grapenthin.com
agatha-grapenthin.com
agatha-grapenthin.com

Certificate

The complete raw certificate details for agatha-grapenthin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372369107118075378293961793032839662465352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 07:29:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 07:29:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agatha-grapenthin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640423499108702619692654978138422769224973227409776882646021944460348538222760933477660949268601359590369847315135997998923700061077651685382473258894895874304268643824435078638318292870790490969835567884285527660613508457393188096331149294508861718444922916831046260124007497099649434553987794335826947693076196742084004018007077119721546582420647956454963738601849242653578654002604266939978519622309157138735840142521268694929303160992439684383620534293465003056253201605857118543734106671093727140707232618711290433710089712767514994558699025658089872461594804797233322511820936387220575023872896955292644734511789578854015942928991073483114420658625273296303384439820611882780564466362539610352931101997041852768146323828369855507597962624294934735338250208252101410444757897649507044200372477622215632925398490875931884955101620895311152112759225336055794026407676079143599003257275997317884582248369121327248363255070856563032662265893682604573425855216244421329478065800777833269955929603475604878419967279084436811626967389000168451310387344786883538753914143465262172653874813991017868182010930893923582880155888666124530050058001364036279755237260710828629447071501501641433902249594190276296872139182625078252751516059019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e64bacf26670ff0c05a80ce32ea8226326217145
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agatha-grapenthin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.design-touch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designlook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designmeeting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designtouch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangata.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organized-designer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organized-designer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agatha-grapenthin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-touch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designmeeting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtouch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangata.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organized-designer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organized-designer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd7400822000004030047304502200f3381b702d9eb5d83f2ae23776b4f4da53abfa65a8163d6254b8a3900b2f22f022100c5be1c28a8b5073d7ca675cbc00796186726dcfd6a028926f79db8ccfc7ffbe4007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd74008ab0000040300463044022001f1519eb776915b6226f48dd2c0e444cbc4d5c51c8426dc22a104ca8302a678022050142c2b2c61b588ec599aa703b3e63fbbb8dd2ff447bfe3975333283800f20b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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