khaffee.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:51:95:43:e9:3a:af:79:54:e9:48:67:03:75:a7:1b:ad:41 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=khaffee.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:51:95:43:e9:3a:af:79:54:e9:48:67:03:75:a7:1b:ad:41Serial Number (int): 376210423033349454059934262197353482792257
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e4:7c:9f:dc:fb:d8:c1:37:d8:05:16:24:31:ef:63:f7:b4:80:d4:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c1:83:b6:fc:2a:e9:91:58:78:02:1d:08:ca:59:2d:e3:14:0e:80:47
Fingerprint (sha256): 29:41:f7:f1:28:8e:37:d4:94:c5:a4:14:be:53:68:f0:5f:22:4c:9c:3b:29:24:5f:d5:d7:9e:07:b1:5d:9b:37
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate khaffee.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for khaffee.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
khaffee.de
Other certificates including the domain name khaffee.de
(limited to 100 certificates)
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
securetest.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
securetest.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
khaffee.de
www.khaffee.de
www.khaffee.de
www.khaffee.de
khaffee.de
khaffee.de
Certificate
The complete raw certificate details for khaffee.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISBFGVQ+k6r3lU6UhnA3WnG61BMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTIxMzIxMjZaFw0x OTA3MTExMzIxMjZaMBUxEzARBgNVBAMTCmtoYWZmZWUuZGUwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC3zUR6jzj4dixdiXYVd5pwQHPB2VQdTCJs4Kn8 R2Tocct8+euTa5JK+M3w9NjsdimOZKwF35Jr0jnyPIPvkG5p3sD8r4EYLuMa9UoE anVM+TfLx5JSTHZ9kRARz/gdSUVW8a5j+Oas6MgPglv9jspFyW3uWy4OI5jtO2d0 z3o7bgKtQRzoUKJ0xPBykFD0BVaDRVA4sKp1PQ3sLYX2YWkxfjeESkyt/cOriPRH IRpmtOUB8FFacFpwdyerb4R3sJQBbFlKptl/TY0zSKTrcKg32TfI4O8TWEAO7Ufc 5cH6ylWRNNIwe3lDtmSiehXPcJMItTGUueAPWCe2VgIGVFNTAgMBAAGjggJgMIIC XDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOR8n9z72ME32AUWJDHvY/e0gNTYMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w FQYDVR0RBA4wDIIKa2hhZmZlZS5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AG9Tdqwx8DEZ2JkApFEV/3cV HBHZAsEAKQaNsgiaN9kTAAABahHsuBYAAAQDAEgwRgIhAO8VriPvDrHs5iRMfM5Q adUTnDwTjEPopKsFft85ncw5AiEAgGRZSe58UeETHLYuj2jUTACkSX0byxG0RyLU f9wtzcwAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWoR7LhX AAAEAwBHMEUCIQCekwlSWxelo4S+aGYe0dbuu4XvA7gCTe18nSYS7F4rZQIgEigd FlOlKJs4cWq1VrJVHn1YFapb0dPLCMLJEqTLsOwwDQYJKoZIhvcNAQELBQADggEB AByNG1LEtokLTrc41Pu5hWUVgzncaOR+nX4Dqbqk8LtoMLJmACYRAR50aDAiq8AZ /wHHjnUOfuPoeXa9k9O67Ve8jGUWciE2iVrjQaLp5jgf/7JDouMH9jFml7SSKbbp KPfAWQUmk+Rh8KwCACF+EZKuKWsHWamuUgylIkqroT4fJYyjq0J4MPtv32x8Uv3e 1/mywh4Bq3euWKx3+LBPuDYGn5+Hz1jLA+PI/Bp2Dl27w+xbcfbM8Fy1Ii62eaay DOFCSmNfNcX9vnlA/NfRhowTuJMJyktUYB7pfEqEhQrASQcVgqGZtgvoGW2ZjmC/ 1oN86JVEiMgDZ5BkwKpQ5co= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt81Eeo84+HYsXYl2FXea cEBzwdlUHUwibOCp/Edk6HHLfPnrk2uSSvjN8PTY7HYpjmSsBd+Sa9I58jyD75Bu ad7A/K+BGC7jGvVKBGp1TPk3y8eSUkx2fZEQEc/4HUlFVvGuY/jmrOjID4Jb/Y7K Rclt7lsuDiOY7TtndM96O24CrUEc6FCidMTwcpBQ9AVWg0VQOLCqdT0N7C2F9mFp MX43hEpMrf3Dq4j0RyEaZrTlAfBRWnBacHcnq2+Ed7CUAWxZSqbZf02NM0ik63Co N9k3yODvE1hADu1H3OXB+spVkTTSMHt5Q7ZkonoVz3CTCLUxlLngD1gntlYCBlRT UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 376210423033349454059934262197353482792257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 13:21:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 13:21:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khaffee.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23202830983191806669760723533643489744932729018799229591303534523464192867135552367087918558858194827212972078535098949705959880388263692929496869656373505071482024291603035916481363273996483100543195260621945972030029027489988429244781264902849051868426070520565297953832989949223028542752680372433667237606798368846826295507209724187061530220665397027712694055294567631852531544562214397276569669248584934227591462719238768412124825104172224835083063531679049828726954080052100571467839246670055829835899951905939854600898178511253576991181223954354647985406853536884407976453668619880117926199410028166651007226707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e47c9fdcfbd8c137d805162431ef63f7b480d4d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khaffee.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a11ecb8160000040300483046022100ef15ae23ef0eb1ece6244c7cce5069d5139c3c138c43e8a4ab057edf399dcc3902210080645949ee7c51e1131cb62e8f68d44c00a4497d1bcb11b44722d47fdc2dcdcc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a11ecb85700000403004730450221009e9309525b17a5a384be68661ed1d6eebb85ef03b8024ded7c9d2612ec5e2b65022012281d1653a5289b38716ab556b2551e7d5815aa5bd1d3cb08c2c912a4cbb0ec . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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