komischlila.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:74:9e:25:4c:5b:7f:ff:1e:f0:30:1a:5a:2b:72:12:26 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=komischlila.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:74:9e:25:4c:5b:7f:ff:1e:f0:30:1a:5a:2b:72:12:26
Serial Number (int): 309131400751125637129209184604088232448550
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:51:c3:d2:5c:ff:f6:ae:17:93:7f:8a:4a:49:15:0e:23:a6:2e:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:82:a9:61:3b:3d:61:51:5c:90:b0:3f:45:0d:17:9b:17:17:b9:96
Fingerprint (sha256): 29:43:b9:13:e7:6e:0f:4e:22:42:af:da:31:cd:54:68:c1:79:75:16:4f:12:74:6c:35:25:9a:19:b1:70:3c:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate komischlila.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for komischlila.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

komischlila.de
sql.komischlila.de
stats.komischlila.de
webmail.komischlila.de
www.komischlila.de

Other certificates including the domain name komischlila.de

(limited to 100 certificates)
www.wulkau.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de

Certificate

The complete raw certificate details for komischlila.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt9yJxzEYKLVazqV3fOVQ
5x2v5VidziWOKWxcumrLiRt+4NAapChBH52/bkq7vYXLSSJ3CXu4kAmzqW0X9v8r
oQ+jKnbCa+l3vIcqBe/KupHYQdbLwHgwewi7Du3cMGodyXCjG9csTEKXLSJNCgtT
AXaHDvkPZyYQA8KqFFNCxIm9ItuL8dVWhXwDEXAfTNm8pVgDTt7FOFR2UZG8h+H3
wyPix+3aBZYtnGnwbhApyNV/nbLcFliuQ+8yHH5CtdWeV9j4w5yORyZyYWL8kfGi
i4ID0m4hEbOXgKqSTKR4OQ2pOaFOn1YUmZg9XOtu+hY8MaIymSrWEB6emQKR8Day
sOhGaWLeXHjR3bICAYg7lfqnbsg7YE5qTHHQ8ypeRyiLXQeOo2mVzOt2nE+NXxDM
P2RmQEbs5DZZX5H1XZgCvBvbt3z825RVijDLM6/uR90ZMk99FJj6+S0tn7aujaQD
jmEmhTuaBOQ+tNSmU3Gf0zisXOOXaW8JmHr4dNNK3NMR/zDmrzJ5uL7pJaxKwqYs
GmRV5nkIE3D0hEqlY9Pu4mGRGEXg5ttEWGwnJ890Wh9ynfwmJBe11cgwdVKqlnR9
PEqZuiq7Omh4SiPtnjDl0mHegY4kQfmdEmMIfAHIpuR6S55xYAjklkzmKNaAV1la
MoQuX/3j4U6xaAZ3AfScQcUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309131400751125637129209184604088232448550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 02:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 02:00:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'komischlila.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750089385313927384544358455428612325010322212693482306625778412208302086559757085406835494898339613564248304542905477432067629422944453034870835365261954914867125009898663105368528075172781388050849817635371430406284743969690393789503456371183511317550569154941975043720187356390781511142232788854235722920756836160533195604925635658879933844349089516481824063612183001074611278824253787431853984659475963925906073449662003608056514671767999973645354320229702386723932619259310031786848776003169183925036700745271955581198578480616525404632376697063553575244132934397090459710033059599535027747145218508355716672659038123575055935213468344367267078943745689992526083016076796394615353100312784722987414877390235623671173589404043811446593127921645362358938504256382065926254328209515205457329962131623180799205970991738889649740626149204232528270352780569303568700035035796720618728578179989397383629565000728347547779595523835526953992437726018349834156516789839801017143605713745407313831765816617759101044599997953737707495830724138125234643474914984201708723523551525313730642123911761879965157404492998003472647710179244002794957259411609969425265384020357877238655604680569513273073429222032204806243625437637775737071345615301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4851c3d25cfff6ae17937f8a4a49150e23a62e55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sql.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komischlila.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d8a69b9020000040300463044022072c12bef63dcb1733567388b72e7d29550805f5931d6fa6e97119b141c4a150e0220650cd319e69d93c9e12e81878261f5c604804f27f6a9c58a1264e64bf6d33ecd00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d8a69b91400000403004830460221008e7eaf54023a8d0fa2a13fa3b6eb9cd5f2b9020008b746505d94bbae2a05a43d022100b299cd8a6b0acdd42d2dab1959f7ec6d66de5ea036aa3d07b951f317fdb6f4c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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