kellnerweg.de

Issued by R11

About this certificate

This digital certificate with serial number 03:3c:c6:11:3a:fd:dc:3b:17:92:53:8c:85:fd:fb:f8:7c:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kellnerweg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3c:c6:11:3a:fd:dc:3b:17:92:53:8c:85:fd:fb:f8:7c:d8
Serial Number (int): 282017076419241696450582303023116360121560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:86:d8:f5:a6:aa:e2:68:5d:f0:0b:9d:fd:fc:6f:8b:f5:e0:f3:80
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 24:d4:3b:71:92:3f:39:37:3f:22:da:f2:f5:a9:4a:d5:63:10:b8:a2
Fingerprint (sha256): 2e:be:d2:42:89:76:7a:fb:a0:16:ba:b1:ce:b0:21:2a:94:1e:e5:7e:b8:e5:4e:d5:26:ac:0a:34:96:82:f3:54

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate kellnerweg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kellnerweg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kellnerweg.de
www.kellnerweg.de

Other certificates including the domain name kellnerweg.de

(limited to 100 certificates)
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
kellnerweg.de
ip.gwdg.de
kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
ip.gwdg.de
kellnerweg.de
vojel.kellnerweg.de
marihuana.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
matrix.kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
ip.gwdg.de
kellnerweg.de
ip.gwdg.de
matrix.kellnerweg.de
matrix.kellnerweg.de
vojel.kellnerweg.de
vojel.kellnerweg.de
kellnerweg.de
kellnerweg.de
marihuana.kellnerweg.de
kellnerweg.de
beach.kellnerweg.de

Certificate

The complete raw certificate details for kellnerweg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282017076419241696450582303023116360121560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 16:48:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 16:48:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kellnerweg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711887206312649195249039388513350715376710010130750087560861005794349823714240937626901841373935994165432976748283384005556900237074358469502152517818653699909045684106651631240014582353551126095095160002465148104174961061132412854792899642180773300124458204413240494562306031764808817662701023311791473076372674495877432795865204093844224655649152789089609292354483108073576312181947412939836360515719532132250192050724873057405757121672312503345479303940305730016621157278418485347581338974651774775946317686989503503750214368020711732576151650811024819365327013936692326132223317211717317187015148043367901999103884710224630780970098611620002192531728618220000816383238534845694821216874482249898760796002295816123182193689120302650724449838425661203387068452775439609210837754691880166210043395798321200524681761113785657491644295440753391165568057136322513851964766986006453037464851074663042376769824248337325280315574716000168765676301061988577817012982878537188216680079855851699849246372949817362625305385751060322922803229477747973992017030562281783546529905683111982532702205511273142995636609877139606179292214009171214208006516522605767214382945033157359321109785616483776887908348234182353412851024949977409596649682479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d186d8f5a6aae2685df00b9dfdfc6f8bf5e0f380
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellnerweg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellnerweg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001902750bab60000040300463044022039c60c457325a512a3cb01152ebb4f1546de1b6a157f7938c043a9bac777d7bf02205097482da8fb2be1d97df078776dc1fd8c1a2833f0745caca15405c99471f9490077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001902750babd0000040300483046022100bb140aa5e218c6f8f543fa6edc5fff8871ac0afbcb34ab8696d41b30b0ac05c5022100d2e225846f098d391e5c7e1a2a942b19d3ec07269b3fdf0a054ce0e2888bca21
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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