mysaneopal.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:aa:03:64:82:57:c0:b9:23:d2:af:5e:29:56:4f:cf:a2:13 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mysaneopal.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:aa:03:64:82:57:c0:b9:23:d2:af:5e:29:56:4f:cf:a2:13Serial Number (int): 319189369729179230514816705424157534298643
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f3:08:27:fa:98:b7:31:4f:90:c3:06:ff:a9:e8:5f:a3:53:8e:2e:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:ca:cf:cf:4a:d8:ae:69:0c:29:1f:2c:fc:bd:58:4c:4a:56:99:9f
Fingerprint (sha256): 2c:ee:90:e7:81:69:b3:b9:f6:7e:72:85:64:05:ad:79:19:b6:9d:c0:c7:5c:8f:77:cb:42:1c:9a:e1:e8:1d:2c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mysaneopal.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mysaneopal.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev.mysaneopal.de
mysaneopal.com
mysaneopal.de
www.mysaneopal.de
mysaneopal.com
mysaneopal.de
www.mysaneopal.de
Other certificates including the domain name mysaneopal.de
(limited to 100 certificates)
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
mysaneopal.de
mysaneopal.de
mysaneopal.de
mysaneopal.com
Certificate
The complete raw certificate details for mysaneopal.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISA6oDZIJXwLkj0q9eKVZPz6ITMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDYyMzMzMTRaFw0y MDAxMDQyMzMzMTRaMBgxFjAUBgNVBAMTDW15c2FuZW9wYWwuZGUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpYv0rjQCvJ+RLQo8WBwO0dRn4hHm0D0p RQcV4zz8uGhqvW/k4ebTA2eR3AaJ2OZfvW6LSP3eU/fD+EXj3YYrAyOtazLEVtX+ DJpN3xkk0ZRhNODPsUjZ24LpmQD4JzgEreJ9VCBQPpbqVfpZHorkRTrQ8RKaX1Pt g5FtHHWr845N+aXaW7j1uDXjDrEp7Uuv9xMC/XC9jyZ5CaAd5cdMoNAopG701htx Ms+0Gv2tY9jniJXvwNUJt9aDtru7cI8VRdbFnQHNX2DhsQcajj62COVkQpwQOkKO A4T+KtNkv5KWN/ffVbMcamOfsyg3Z0DJQTh4glktdJmuRS14RfvjAgMBAAGjggKY MIIClDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPMIJ/qYtzFPkMMG/6noX6NTji43 MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wTgYDVR0RBEcwRYIRZGV2Lm15c2FuZW9wYWwuZGWCDm15c2FuZW9wYWwuY29t gg1teXNhbmVvcGFsLmRlghF3d3cubXlzYW5lb3BhbC5kZTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ACk8UZZU yDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbaOicRUAAAQDAEgwRgIhAPFY nbWFJdHd5LkgjsejAXemvJkUV4OH3wcL2wW6Zcq3AiEAmY2XsQJWaC8nq2Tl6NAF WN/XfTZYD8oP9TZRpxrH87sAdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCo qo6ycwAAAW2jonLiAAAEAwBGMEQCIGY2D56D41amSOXHwYwE3VEhRUM4VHTEt2rC QJ/ZDrdGAiBkOchqhnnHgv/UcPqo8oxUPLPhomzziQ1BIzpn1tJO6zANBgkqhkiG 9w0BAQsFAAOCAQEAOifU0BUErlZmmKn8yUJMpgcpl31yQhGXJBznF6zZlYHvh001 mEuEUScZjJDrtShZj/N5gtq6q37Y2SA6pgH6m40rMlsL+sowLK1zeVljmJRohEUH j6DmqYGI6HlDASaFVDjIM94OsMPEufpW8Fd4CfXE919MX2Nq8UBToR/xCJXCNQUu 60937Kj7lGVgwQBy+AxBynHku/0Gu58PVeEEya6prWJFS6oZ3iMaxFclsIBKXiYG z83sPHjzta0sZ4XfS5dfXnlRsvSVRWMD/oXhi0H2J++69cuXe2Xhl70wb3YaFPmG crCbIjZiu+0bHPFrpGJKByiQEBiZtQfYnA4YAw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKWL9K40AryfkS0KPFgc DtHUZ+IR5tA9KUUHFeM8/Lhoar1v5OHm0wNnkdwGidjmX71ui0j93lP3w/hF492G KwMjrWsyxFbV/gyaTd8ZJNGUYTTgz7FI2duC6ZkA+Cc4BK3ifVQgUD6W6lX6WR6K 5EU60PESml9T7YORbRx1q/OOTfml2lu49bg14w6xKe1Lr/cTAv1wvY8meQmgHeXH TKDQKKRu9NYbcTLPtBr9rWPY54iV78DVCbfWg7a7u3CPFUXWxZ0BzV9g4bEHGo4+ tgjlZEKcEDpCjgOE/irTZL+Sljf331WzHGpjn7MoN2dAyUE4eIJZLXSZrkUteEX7 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319189369729179230514816705424157534298643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 23:33:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 23:33:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mysaneopal.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25329295114650304255411605771296236997225226993263512301315783383383605796830099430066374347791762879364015743310487371801313604903135396264617071932111871766948019492178898782956932537040394703519126843450512946496559887850175597538472252941319227782032002584432671090032378256389163505914715412342555107505499527047506859312927472514649803095957104465911012858058673287366595956055435611495429071142234814046960255045072874706355483151900618850529286418039291480471200946143368475678228639798470071694184313749661523941406827899763809389832601154186167298228888302798955006495963236317192171022863812340258512960483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f30827fa98b7314f90c306ffa9e85fa3538e2e37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mysaneopal.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysaneopal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysaneopal.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysaneopal.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da3a271150000040300483046022100f1589db58525d1dde4b9208ec7a30177a6bc9914578387df070bdb05ba65cab7022100998d97b10256682f27ab64e5e8d00558dfd77d36580fca0ff53651a71ac7f3bb007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016da3a272e20000040300463044022066360f9e83e356a648e5c7c18c04dd51214543385474c4b76ac2409fd90eb74602206439c86a8679c782ffd470faa8f28c543cb3e1a26cf3890d41233a67d6d24eeb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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