www.holz-speckmann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:47:af:28:13:a6:b0:eb:fe:60:56:c7:0e:76:ec:8b:ad was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holz-speckmann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:47:af:28:13:a6:b0:eb:fe:60:56:c7:0e:76:ec:8b:ad
Serial Number (int): 312134215119004851248586651405208844536749
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:5e:eb:1f:34:50:6f:5b:b4:89:40:31:a9:55:55:24:97:d3:44:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:8a:b0:9c:71:47:69:77:d1:16:a5:9f:39:d5:57:18:ad:b6:20:06
Fingerprint (sha256): 2a:1b:a4:65:c3:c2:a5:c4:d5:be:44:85:49:8a:f6:b5:6f:76:da:0c:f9:c5:32:c0:32:ae:d6:18:a9:5f:01:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holz-speckmann.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holz-speckmann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holz-speckmann.de
www.holz-speckmann.de

Other certificates including the domain name holz-speckmann.de

(limited to 100 certificates)
www.holz-speckmann.de
kiosk.greater.sydney
magazine.landroverusa.com
www.hochseescheinkurs.online
mx.holz-speckmann.de
lemagazine.landrover.com
epaper.treffpunkt-bau.eu
publikationen.kreis-goerlitz.de
magazin.zibibbo.de
online-katalog.baude.com
magazine.landrover.com.cn
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
kiosk.greater.sydney
shop.holz-speckmann.de
holz-speckmann.de
berliner-kurier.kiosk.plus
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
online-katalog.baude.com
epaper.treffpunkt-bau.eu
blaetterkatalog.rp-media.de
katalog.ud-shop.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
terrassen.holz-speckmann.de
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.holz-speckmann.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
kiosk.greater.sydney
medien.koinno-bmwi.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
www.holz-speckmann.de
bibliothek.bregenzerfestspiele.com
katalog.unzerbrechbar.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
kataloge.fuerholz.de
epaper.treffpunkt-bau.eu
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
online-katalog.baude.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
online.hansestyle.hamburg
webkiosk.sossenheimer-wochenblatt.de
medien.koinno-bmwi.de
holz-speckmann.de
berliner-kurier.kiosk.plus
magazin.em-chiemgau.de
www.magazine-kraftquelle-bgl.de
online-katalog.baude.com
www.hochseescheinkurs.online
online-katalog.baude.com
polsteraktuell.mediaflip.de
webkiosk.holz-speckmann.de
online-katalog.baude.com
kataloge.fuerholz.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kataloge.fuerholz.de
kiosk.greater.sydney
epaper.netzwoche.ch
medien.koinno-bmwi.de
epaper.transgourmet.ch
epaper.pt-magazin.de
epaper.transgourmet.ch
epaper.netzwoche.ch
cf.completesportsnigeria.com
magazin.tourismus.li
epaper.transgourmet.ch
www.holz-speckmann.de
kurier.leimbacherdruck.ch
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
revista.landrover.com
epapers.gleitz-online.de
magazin.fon-times.ch
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
holz-speckmann.de
kataloge.fuerholz.de
www.magazine-kraftquelle-bgl.de
berliner-kurier.kiosk.plus
magazin.jaguar.com
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
hochglanzmagazine.buendnermedienverlag.ch
online.hansestyle.hamburg
prospekte.lokale-rabatte.de
berliner-kurier.kiosk.plus
www.hochseescheinkurs.online

Certificate

The complete raw certificate details for www.holz-speckmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312134215119004851248586651405208844536749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 08:38:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 08:38:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holz-speckmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741023733285371934803362865259908136660976085387254091585603938351826361268527650057781150727124131860187782857519642830047560351734165538207064760915239857258872136579957809293169253753129145235904431125947479741400893714701928379016217544592887049614157583044925485652466967018733150796672851275138023119680414687468677558358899488716897621057612257824380227367402080423039501501472610491511639138843307150717189674761505157857470445864639377461090927522748620947551925036855049569193724141425062410114654061332843948614347289676959187638316706593967561522720179036621394250462399875527684072947174225884427643648490884806226021750175608710712224387150313270228492317849917033657948377060192308233106533836046842223882261337066757251680801172323884577481317653333082021221138232215051604636355098300231557550288622754667282014663527321803382894490722908277838965315198261804844748052517314835052734328929904948971973418164279064140573925837316349009559551173559807257588273826687826955458149445838331429821520646428104561128596255891164983626461899647634999111575828671945023469768723799576958314394302458663711348418460264036074481932049962715856662178279061923715322244169666041885437586843663543674299611335389389771459616404169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c5eeb1f34506f5bb4894031a955552497d344c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holz-speckmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holz-speckmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001641c8efd3d000004030047304502206c26f4ffcc649e85d049cb87c20f4adb70bbe035bfc77e2be8694888cbdd2f9c02210087d1e68a33df4f8cf3db1c0d029eee385dc3ffb072b64ed468665eb4c9950a10007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641c8efd4e0000040300483046022100ec4d23eacae37ea5a9dfa82dbc742cd421a95e90e424a717524b8e5660c7acc002210092afae30adf1e6f8b7f32b047314fb827007995cdc60bfc6082bd9315908e3b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045e8889152fad60cbe2ad7583e83692faf24cbb9fb726efa81835bb18fc3a9c89c98d9377062fc81a96b1cd0516aea3bcc984b1250eb5f032a4f6bd7edbb95efb2efbe120546972b67b7b9b0695d3a3e636d9b093ac11d074febaf172072dc512a99d0b8b34c970de7a18429da150e9d3e637048de09e495d62be8c87c07d504a627edd6ef58888ef5333a2dc921e62fe2e0c432025dddff7e9ef104e22d086a4fe6ac1efa4638b6d79de173b439456064c3cbd75798b1027d051cb4da6302ba3281bf00de06624c9fd0a20c065be9837045225d6ef4e7d38c40f387525f2fb87b654fe2ce0bdb7a83ee2459265472e556259e096923aef639902fb467ccd4e9