seafile.digital-eastside.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:08:78:64:90:af:c1:ea:5b:4b:f4:07:53:9e:4c:d4:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=seafile.digital-eastside.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:08:78:64:90:af:c1:ea:5b:4b:f4:07:53:9e:4c:d4:45
Serial Number (int): 312390471772715023039017455466765410423877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:eb:30:53:1e:9b:78:74:86:24:f5:7e:60:85:14:7d:49:aa:34:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:73:74:69:9b:bc:52:2d:88:b1:ab:72:69:93:0e:e7:3d:74:ff:87
Fingerprint (sha256): 2e:9c:88:b6:06:34:66:b4:63:ab:f4:ec:53:c7:9e:04:1f:87:98:a3:6c:90:fd:10:e3:54:74:84:76:98:03:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate seafile.digital-eastside.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seafile.digital-eastside.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seafile.digital-eastside.de

Other certificates including the domain name digital-eastside.de

(limited to 100 certificates)
seafile.nasec.de
digital-eastside.de
seafile.nasec.de
seafile.digital-eastside.de
outbox24.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
seafile.digital-eastside.de
www.digital-eastside.de
secure.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.digital-eastside.de
digital-eastside.de
buerger-fuer-schmoelln.de
digital-eastside.de
outbox24.de
outbox24.de
www.digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
mail.digital-eastside.de
seafile.nasec.de
digital-eastside.de
support.unistor.de
outbox24.de
digital-eastside.de
seafile.nasec.de
outbox24.de
support.unistor.de
seafile.nasec.de
icinga.digital-eastside.de
digital-eastside.de
seafile.nasec.de
seafile.nasec.de
outbox24.de
digital-eastside.de
outbox24.de
seafile.digital-eastside.de
seafile.digital-eastside.de
seafile.nasec.de
digital-eastside.de
digital-eastside.de
mon.digital-eastside.de
digital-eastside.de
digital-eastside.de
digital-eastside.de
seafile.nasec.de
digital-eastside.de
mail.digital-eastside.de
support.unistor.de
outbox24.de
www.digital-eastside.de
outbox24.de
seafile.nasec.de
support.unistor.de
seafile.nasec.de
seafile.nasec.de
digital-eastside.de
seafile.digital-eastside.de

Certificate

The complete raw certificate details for seafile.digital-eastside.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgISA5YIeGSQr8HqW0v0B1OeTNRFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDEwODQyNDJaFw0x
OTA2MzAwODQyNDJaMCYxJDAiBgNVBAMTG3NlYWZpbGUuZGlnaXRhbC1lYXN0c2lk
ZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMgZglKgEl0QsIHU
VNNUxXDcK85D8Y4hZpiAA+shLiQ8oz65DNcIltm6bcbJuOvSAOZUm+iK+J07FHu/
JKG7KItB/njZkcBFStyfDQinePBnggVH7G76/OOCMKeYlrEssFv9FiDNgZ8T4pB8
paHZAPcyhbPilX7kFDahkneSnlsRoHd8d8Yd0e5Z89TPUYtXP/9wjccwgUxGV7XL
BEnrPSFUrFTSWwMeaaGMzJfKDklgfIybnSsL81AKRDD3nA05UjywElRVMO3b4dDe
pitMX9tfBgOsnQ3xeNjeH0/99FjcZ5UCdH/B7P9/KWWiOEZe9vRNYfjw3fr7Sdny
5ttrASbOWCHquYukyiEQVQOqfbfyfgYcWpnkqOv5THFhCrgUBye96SJpzOj2N3vl
URmuPRylUB0f+AyX2zZJnFwc87MjhiAgRDZKQqgt6Zs8xgzzRXjhXzYTLaTOljZZ
gdsczz0XcY7lFU7oQs5sDRKVo+Tbgd+lVnX23KQCNCNHuLVMbqsBzYKtHn18yWnu
bkVW4tNijv1sWzaTE0YyIgQle7AQFxTmIwoPu4g7biCLv+TLel7pT197DqR2s6aZ
fGxw4XYC4Znu0OeSDVxr29WOIWFNbUyq12koBIMxtKuAZyv2sfcdpMKxOyX1zz21
n8/NEH4wGMhy3AAA/8LT8+MeMoy5AgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFI7rMFMem3h0hiT1fmCFFH1JqjSxMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbc2Vh
ZmlsZS5kaWdpdGFsLWVhc3RzaWRlLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9C
cMK//V5CIAjGNzV55hB7zFYAAAFp2EeRYQAABAMARzBFAiA2+uR6S8PkReiqfMMQ
aS6/gvJGUnc9Fr5HL+JXPG800AIhAIdgvS1UQsNVqI6JK+dB5NCcYmdA/gWAQRGV
7u3HUBwdAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFp2EeR
4QAABAMARzBFAiEAqCp4ef6quE2CcnMg5b2c8Qn1yOUaMintsna7Zb3TZZ4CIAqH
rOty74kvHviugTd1QaWLDc1l7NJfDaApMyEM22XxMA0GCSqGSIb3DQEBCwUAA4IB
AQAGqw6+dyvXV3afj2wvS8q3+rfIhawpww5pkI+RLqC+AB+4s8LhziOlpFeDS5+8
Ui/oDLFE3yBGYY9QrfVXI+OD+hJgqHW21cSIeTZOtr48p7qQTpHQF+ZFLG/u/OYS
T+p/a/oCl0p2nIcMyLiy8y8NJ55SGjMkPaAG6yHDqNWjOkFWbF4Ps3/hIfLgS5sy
g6qSB6Pd7GsFfVXh9jtKRECZyvS09lBRXDQtsE2gEPNxGAD/soD9P4Z9Vc/k7FO4
tKmre8ElaRGzhZnArmDHAIxyBzhD+5tDao/VcaexyVQ9No9B2xuXRVx6oZrYsXcp
KclxFFP2Zy52vwdkL+k0L3HY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312390471772715023039017455466765410423877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 08:42:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 08:42:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seafile.digital-eastside.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816335328992356936914748855109929620548128314430037582480076727747242721380531570016549179164665271104022216039051015220507675123540203996674066093310995308000742721273409255744962345898628749889032699965530901939533598909948698363525468233779553163853501187564493745798258947267996568276748400005818860620132980947988646369914840015595427552618928519508641160270191330306593973659277193490541648911275692140195166143947139431626401731572644545909807282988964381948001323748672897743999251886279278085015289259510478586815225310277580031296651576809817584583068896946651553563498264652510227378226224661146453779674001108842943586448502228576772167791755650970662538078343747701418349867422266076660783123414642153303595921500192020617363026327976532911089375967121942260423859969444198546404914774276521202984548657751336587872616340709518171715948254395986485097612051077544337820224620360339777448525124475909185317395976248430726250282595393879395564721062348605571677232816360003132422356618542530501077448851306674816344787066277305688352753956126204221525091832005681970459675968871649308250193860980141587860121845348057266587364639314077349292550960703103195946404877441533879770131887142107663091643675267888286707815189689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8eeb30531e9b78748624f57e6085147d49aa34b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafile.digital-eastside.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169d84791610000040300473045022036fae47a4bc3e445e8aa7cc310692ebf82f24652773d16be472fe2573c6f34d00221008760bd2d5442c355a88e892be741e4d09c626740fe0580411195eeedc7501c1d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169d84791e10000040300473045022100a82a7879feaab84d82727320e5bd9cf109f5c8e51a3229edb276bb65bdd3659e02200a87aceb72ef892f1ef8ae81377541a58b0dcd65ecd25f0da02933210cdb65f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006ab0ebe772bd757769f8f6c2f4bcab7fab7c885ac29c30e69908f912ea0be001fb8b3c2e1ce23a5a457834b9fbc522fe80cb144df2046618f50adf55723e383fa1260a875b6d5c48879364eb6be3ca7ba904e91d017e6452c6feefce6124fea7f6bfa02974a769c870cc8b8b2f32f0d279e521a33243da006eb21c3a8d5a33a41566c5e0fb37fe121f2e04b9b3283aa9207a3ddec6b057d55e1f63b4a444099caf4b4f650515c342db04da010f3711800ffb280fd3f867d55cfe4ec53b8b4a9ab7bc1256911b38599c0ae60c7008c72073843fb9b436a8fd571a7b1c9543d368f41db1b97455c7aa19ad8b1772929c9711453f6672e76bf07642fe9342f71d8