skr.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:1b:dc:ae:4c:2f:c9:d2:e2:08:40:b4:23:78:d1:42:d7 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skr.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:1b:dc:ae:4c:2f:c9:d2:e2:08:40:b4:23:78:d1:42:d7
Serial Number (int): 285533940843037842408310584554197882061527
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:64:af:3e:ef:7a:7d:f1:c5:62:87:1e:ac:c4:4f:92:92:a1:6c:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:06:7e:9f:ec:82:ae:ff:05:4a:ac:a8:31:4f:b4:e5:91:e0:c3:15
Fingerprint (sha256): 2e:16:ac:27:ca:f2:91:4a:8f:e4:bd:7a:14:47:f8:8e:ad:95:c2:37:d1:16:84:79:c7:68:44:cd:d7:c5:e9:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skr.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skr.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skr.de
wiki.skr.de
www.skr.de

Other certificates including the domain name skr.de

(limited to 100 certificates)
survey.mobinergy.com
survey.artyplan.com
feedback.zweihorn.org
vragenlijst.teambuildr.nl
survey.thesocialelement.agency
smkynb.skr.de
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
survey.slttours.co.uk
skr.de
service.skr.de
encuestas.heel.es
vragen.sp.nl
skr.de
survey.epsight.fr
survey.artyplan.com
www.skr.de
ankieta.quantumplanet.pl
skr.de
survey.skr.de
umfrage.samtoa.de
survey.ncauk.org
service.skr.de
rdp.skr.de
smkynb.skr.de
feedback.zweihorn.org
skr.de
umfrage.samtoa.de
service.skr.de
feedback.zweihorn.org
skr.de
survey.skr.de
feedback.zweihorn.org
umfragen.drholldorf.de
owa.skr.de
mail.skr.de
survey.hhm.nl
skr.de
skr.de
surveys.breakthroughcomms.co.uk
ankieta.quantumplanet.pl
survey.skr.de
skr.de
survey.contis.de
survey.accelapps.cz
skr.de
skr.de
survey.gotbit.io
survey.gravestonestories.co.uk
skr.de
encuestas.impargrupo.com
umfragen.advectum.de
survey.slttours.co.uk
feedback.cetas-healthcare.com
clientes.prosinergias.com
info.colegiomontessori.com
feedback.zweihorn.org
umfragen.advectum.de
skr.de
encuestas.mengual.com
mail.skr.de
meet.bastioncraft.com
umfrage.samtoa.de
ankieta.quantumplanet.pl
survey.generation-y.net
survey.diamondpigs.com
survey.avondata.co.uk
ankieta.quantumplanet.pl
survey.gotbit.io
owa.skr.de
survey.swiss-as.com
skr.de
feedback.topinsure.ie
survey.micheledicosmo.com
feedback.cetas-healthcare.com
feedback.zweihorn.org
survey.gravestonestories.co.uk
www.skr.de
survey.koffre.io
skr.de
skr.de
ankieta.quantumplanet.pl
ankieta.quantumplanet.pl
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
questionnaire.isabelle-mathieu.com
vragen.sp.nl
feedback.zweihorn.org
questionnaire.isabelle-mathieu.com
skr.de
ankieta.quantumplanet.pl
forms.bizzymaid.co.uk
skr.de
skr.de
survey.matrixbooking.com
survey.hrsmartsolutions.co.uk
feedback.cetas-healthcare.com
owa.skr.de
service.skr.de
mail.skr.de

Certificate

The complete raw certificate details for skr.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285533940843037842408310584554197882061527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 22:30:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 22:30:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skr.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811277831234721057873187955536703290218232808142907756089124021638108096835685540055172207751297999241242058833476580772518513677680284322782706012420668161267731860220868223550915751631388645487909770580081033079747693734839929254966733648249256633577916674648423216765713847783540444944894753483886889615596360643839635575890302752447350775926954965708802294238865920816170827005454778914809889315657563113462065512328096481350583888029847938643522254760734045353059351063606053316799395211234324111827295042445076299549861738701681355409235683714738985851538017925412676917364032181757889174468240452306717572448444803671484517716014876123690779191924326798023594635183457009229493510578563416991875237988896619076823394301823135439369099400928075162604786955588963840819047833069982768423602791540403514408710923726844792888818805649703380257965473943299597528173813968900233458733810501822823924106547060107993776630912659149581944659866839316023601225769365862563746713076325183322278116335825099776259697643270239433551708854426064460142995375744352431529875148502453710499713874841966716391755581255135536467186123829547619407967231319920475300396717482602807822673400272986560461922768073420168104170144971911134739024457051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc64af3eef7a7df1c562871eacc44f9292a16c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.skr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f780c0ca0000004030047304502204ce9fc732489d01e070d2145cfcddda82ec906e50cbbfd49bb1d55b3b95f8d70022100e07d635f88faa0f86ecbf1a5737aab41ce0b2c1db12904d818b7752cf25cadf3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f780c0ca800000403004630440220792b6ad577b6bb5d533bc6a7bb3b6b02a506e2469d12a7e060c4b70037fed68c022042f071065c8303975a4be6bbfb9a85331966431d74a1b67f7cb199e78caf3367
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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