csu-eschenbach.de

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:e2:3b:09:48:0a:65:02:67:66:65:88:23:6f:5a:ca:5f was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=csu-eschenbach.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9e:e2:3b:09:48:0a:65:02:67:66:65:88:23:6f:5a:ca:5f
Serial Number (int): 315402183829600392806041416885800128924255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:04:b6:ca:85:9d:e5:5b:02:3f:ca:4a:b4:d1:7f:80:08:5e:c4:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:a4:ed:dd:ff:a1:a9:6b:e6:16:c8:70:ca:03:08:d6:45:45:32:fa
Fingerprint (sha256): 2c:39:57:97:df:69:3a:98:63:de:82:a0:c3:55:3c:c1:a3:4f:0b:fe:d8:21:47:53:42:50:6a:16:e9:79:f3:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate csu-eschenbach.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csu-eschenbach.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csu-eschenbach.de

Other certificates including the domain name csu-eschenbach.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for csu-eschenbach.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISA57iOwlICmUCZ2ZliCNvWspfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDIxNzE1MzdaFw0yNDA3MzExNzE1MzZaMBwxGjAYBgNVBAMT
EWNzdS1lc2NoZW5iYWNoLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAzzHGmxlyzNZeJG15ylDC0AWI+mZr76VCHNtFM8/9mK6swFDLHPesKbvLNAaY
zeaoC8+BcZB66r6D51Y+1vPwJwkVYRPA4yziSAJcNqV2mkR19QHkmwZCd4RuzYGj
3magNO4YTvnOqYijAugQOnO12KHke/YU6jpsWobfSN10i/9f+lR2A60gx3gLWV2W
wxWCXeDVMQvSM/uFm7Hunpq7Gx02+q8vFbdc3Ckhs1KIR3dQlPXjR2anN4xxzJcn
aOb86o5i4QrypBqlMFGAM92lyzWvw+yqWOtYU5MRwV1MVf3I9S7Xp9/5yPOOet3K
2MIdNEOmyC64UlUMn19tjcRvbZfD9OpNe0GESq1WhSsOoWBeC4Kk4Lw2w+HuEEhu
PP8RFePXfr9aw4TOhXoTchddc2VC6DLgDlMWQEJyvopjT/m854D0XIFsEeuXgFo4
GHWR4vxPAkA7O/USo3+hBBCZ4RJvsPIUJIgLw4SIVAugzP2ZLB/8lyYDz97T9ILa
Ht5VGYYHl4sP9CnD+3OoKivxg7x5rk3GImg0Dlbf6jV6majY/Z4jPV+/Yb3dhkQW
dxu0itf7GW0GVSMQn33+kWA/9y4ecbUnnf9dj9Qd00VZmcNFcyZoRcSOpy9qwoC7
oveOjwtG9bnXILNO/lhizYSjjdI1OX7+k+bsGRgsixKajRkCAwEAAaOCAhIwggIO
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIQS2yoWd5VsCP8pKtNF/gAhexA0wHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRY3N1LWVzY2hlbmJhY2gu
ZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY86hOCGAAAEAwBG
MEQCIEjZf3MwiEZKcmX2/rG01dxIbBtzGmNLM+DfJOlap6KeAiBCpdJQdAdjVMsO
bNI9GxuzBN4zvz71xI8ErBcCr9NyQQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABjzqE4DcAAAQDAEcwRQIgDfXdcG6X4vyck5JCVmhKeuxezsj6
LHmltLzXQArCqHACIQDNNOEWj7c3NSJRVxQ6sHjKvHOMvZgDQhHcDX1QmyyMzDAN
BgkqhkiG9w0BAQsFAAOCAQEAm7NUCe2mCDjSfqlDbv3MfSTapaCEbSlzKFeTHBn4
H67JlA8gZhczbRiXyJFXJBDIGaDArCc5RbB4UVDtW8H2NLBiCtzHxPyVG3kxnZ3D
gzzU0uJH4t2iIKJMj0tbcf9ZcQpDCmZbuurQ26h58X9KQW0VsUhojuRIr4l9YTY3
jLnqQeS9WVYYe55r1sWKUCVrL+Uf/E/t8BWhC1eA8IsXJrB7bLGkVu6DbIzn2CE+
DSSWV0EcuEm8pdaNKWCLLthZVW7ltPB9tntlnszrjlaMEy7ln0IaUOvH4PcBp+Ro
A9BZlzD/agPwqYWWYz6t2E2Qvz6j3iR+AgRJplJnRA2w1g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315402183829600392806041416885800128924255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 17:15:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 17:15:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csu-eschenbach.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845279554752222603922642069849190347151744070366974178797631328778530500172270803169040596441277757190734096840517039687352145702961253044405669448986657565410295370330740914843490169301601631276676781659215954363448010396077275299536727560434912901083332420722671181334519859337073563065587032434710951474592759918606913757983005519457276349768159044660975830092681532037855673265337843669558317309825271782471711794848457069643719134976727278281890475258845314519289069433132941988847193564125670685676414876444854099368038734578395447719906134659998638053860387030867764454385322297291702988108988114057416932368844163093359425181234959292597304036578134032731035918623585481486271357029294344941210039648321029720829405278839204443190427248763650245635961760767388951719034867714858127475150890450231656953100329507114285984214016179304570829910221636513577689065014631964436753556180604066560864239874551071363641915965406550983043162361509047953348960787942949061284293483732335599614844301401032690893955520424647019320129729725351820383531141516207978501230501362628736087957982034156167411152735988815353203270715576957257179953059263873883222575279240840407131092286215214920261841157146157224420333460034232439377015508249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2104b6ca859de55b023fca4ab4d17f80085ec40d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csu-eschenbach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f3a84e0860000040300463044022048d97f733088464a7265f6feb1b4d5dc486c1b731a634b33e0df24e95aa7a29e022042a5d25074076354cb0e6cd23d1b1bb304de33bf3ef5c48f04ac1702afd3724100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f3a84e037000004030047304502200df5dd706e97e2fc9c93924256684a7aec5ecec8fa2c79a5b4bcd7400ac2a870022100cd34e1168fb73735225157143ab078cabc738cbd98034211dc0d7d509b2c8ccc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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