earnfromhome.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:6f:75:46:5f:2c:a5:2f:6a:22:32:be:70:e4:11:7c:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=earnfromhome.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:6f:75:46:5f:2c:a5:2f:6a:22:32:be:70:e4:11:7c:3a
Serial Number (int): 318312166304651202306553579753021631462458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:67:0d:b7:a3:d5:e9:6c:5d:2a:65:05:d8:b4:5e:57:0e:d6:7b:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:af:b0:f2:2c:9a:26:8f:c5:4c:d9:16:27:29:50:5c:b9:78:f1:63
Fingerprint (sha256): 2d:b9:b5:c6:f0:42:1a:9e:85:1f:da:d6:cb:15:63:ae:e4:fc:0f:35:d8:fc:4d:5b:1f:a6:c3:93:04:cd:27:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate earnfromhome.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for earnfromhome.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

earnfromhome.de

Other certificates including the domain name earnfromhome.de

(limited to 100 certificates)
earnfromhome.de
www.earnfromhome.de
www.vrnight.com
earnfromhome.de
earnfromhome.de
earnfromhome.de

Certificate

The complete raw certificate details for earnfromhome.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA6dvdUZfLKUvaiIyvnDkEXw6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcyMzMyMzJaFw0x
OTEwMjUyMzMyMzJaMBoxGDAWBgNVBAMTD2Vhcm5mcm9taG9tZS5kZTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKVlPHlu+t5IPHOakhnhNKiKCXpYNULD
SCOZAevc5lY++0e1At2zmDDVDb00ZYyXqnsFzos9BxJgVRUQbxMQQMw5pdTiqAW6
Zpha+I2YavbVDc0FeBthzMJtPex/rveYiaQ48t3RykCTilTzehfdh5Sy4OKUnTty
fmW1eWWyoQiJd0M2deNc2VyTXY+WVniEsQwCBwnOf9fKRUaUiFA1x4TtsWDXkRzl
v3A48ArrRDD4S9huYXSPb8zyOLlv/a6a2la3Jd1fxUhciIZWDT1x262w51QkQNu9
fA9c1YhZR5jHhRZG/v2MGTUzIgsHtHflSowjHbAMbancW08T5+dRphPzSjhvMLhS
W8C4AO09odCdTdTVPChY1ZB+bJdgJz/ZCfLH6yFEf62ZG6HNN6YIfWtlN3dAwiS9
ZfrM9thxWFkXiDj8u4ZFSBaWzyvpxDIbWcFch9nLOX+s4JMSYmcqyvtynxeiRXq0
mNErk6YV9UNSjAu6QSuQaTa7sulY11LSTGXvw2+yBfFjxy7Ipnl/5oEmj7GMCFGx
JVBmRg7vBRbAkFaHLIqvoFEgSTQvs8L26v0DBIw6hDDCQp5oDIi9Oc8oVSWp6Nl/
E9F6bAqmyApQZPuzD0zOgz2AGxiGOO1QcdHeJkrMTWMqXfQGf0OYyaT7go3k4mzj
JYrXtha9poiZAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGhn
Dbej1elsXSplBdi0XlcO1ntqMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPZWFybmZyb21ob21lLmRl
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB
9wSB9ADyAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsNf5I
wQAABAMASDBGAiEArbSs3ovFQnFMkUDZ/de5B0mlrtR/UxqQmCfrPtnmUrcCIQCe
p3EUgzgQOvNK3Zy4+8J6lesJnmeoEbIQbBxWUNgdbwB3ACk8UZZUyDlluqpQ/FgH
1Ldvv1h6KXLcpMMM9OVFR/R4AAABbDX+SOAAAAQDAEgwRgIhAKlSlM08z1Vp1Gn4
dpBTL9W6c3I+BAfe+jam6/tsoRt3AiEAuVApeEhpNUstsEEBOne4AF1NsT/+KC7A
IKMgJ97HeoswDQYJKoZIhvcNAQELBQADggEBABVG8rVickGATvoOg1sDKNdximiK
48isMJ2LA3+TiVurBIi+xkDXBk3t2pD9I9gm4ZTYKKH1fmkI0rabuFB4TEt0ND/Z
7gnov4GByUnYjKnaRJaFwPWAr9D1Q//3WtzY3Qo5X+PwzaXrOu03qQ2ArLNW8aix
UkT9qHGjwNLLJskrkds+J+tsH0rGsIFoJM0UhRsyMLrD+cxqtEgR/Go6LtzrLDRJ
IPTB7wUGFy7poFNE5q90E/zQibLcVSI06VjRldLEIqOGcK+cwL0iFFeMv1WDtWCL
P4/QBFUWD/fkFH514ovp12diZSt8Mfbsuf7TVXW6gTUpII90Rcssp7+nJTw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318312166304651202306553579753021631462458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:32:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:32:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'earnfromhome.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674754582851199153167962633470803972824888314618528188319094513567489703823601875368177047253396809070273554362849733190274198955763055852827529911879180719081482188492261362631224917159579698584113317806618799540589553889423354358524031060193415091508867748097772747450787845379557039088745198150498267121390428228079211420565274353251287260822209623356624838242956743609184801213557126109369219410912056399349061245215479880709359384930057600688701881352146878774103826933717444151673388882844064202026294646065396924589021656869808812684681102578259558069017296013785768854932060384243240740199671203481274056552203264890909710786219823655061065446103886627307527572572095815992418173897216223390478427664895858677768157319272558886890619925231790341506468634841784633975295914021358428704878341287554878060595833267995486088116368299499089351956586973871950964735123553481423594708928684931953971521486509186570645534348840499850094300344873908772105118053934052993420134414986413478070449338394618400515152755701845823104420342779603193919988218494765806596352170249832303277225516343026895006110542762417803549816032624240437401415055799827887315606635562439539933106125927698709934929816854686531767849276015821595354151159961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68670db7a3d5e96c5d2a6505d8b45e570ed67b6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnfromhome.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c35fe48c10000040300483046022100adb4acde8bc542714c9140d9fdd7b90749a5aed47f531a909827eb3ed9e652b70221009ea771148338103af34add9cb8fbc27a95eb099e67a811b2106c1c5650d81d6f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c35fe48e00000040300483046022100a95294cd3ccf5569d469f87690532fd5ba73723e0407defa36a6ebfb6ca11b77022100b95029784869354b2db041013a77b8005d4db13ffe282ec020a32027dec77a8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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