nas.zer0.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:96:1e:b1:d7:3b:f6:48:3c:5f:ba:de:27:61:bd:15:7f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nas.zer0.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:96:1e:b1:d7:3b:f6:48:3c:5f:ba:de:27:61:bd:15:7f
Serial Number (int): 337759651560883561320799709206430185493887
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:87:b8:e3:00:37:e5:a6:64:6a:ca:b9:a0:c6:ec:53:48:0c:dd:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:b0:68:b4:36:92:d8:79:8c:f2:f5:e0:f8:31:24:01:80:c1:27:c3
Fingerprint (sha256): 2f:0d:ee:2b:ca:2a:30:fb:2d:88:82:bc:f3:b7:07:7b:36:2a:5a:f1:78:69:b3:60:9f:ba:4a:aa:ae:99:c0:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nas.zer0.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nas.zer0.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derryaire.asuscomm.com
nas.zer0.de

Other certificates including the domain name zer0.de

(limited to 100 certificates)
cloud.zer0.de
zer0.de
zer0.de
groupware.zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
zer0.de
idmdev.marum.de
groupware.zer0.de
zer0.de
groupware.zer0.de
nas.zer0.de
zer0.de
nas.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
nas.zer0.de
zer0.de
groupware.zer0.de
www.zer0.de
groupware.zer0.de
groupware.zer0.de
idmdev.marum.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
www.zer0.de
cloud.zer0.de
groupware.zer0.de
zer0.de
imap.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
cloud.zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
groupware.zer0.de
idmdev.marum.de
zer0.de
idmdev.marum.de
idmdev.marum.de
groupware.zer0.de
autoconfig.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
idmdev.marum.de
groupware.zer0.de
autoconfig.zer0.de
zer0.de
groupware.zer0.de
cloud.zer0.de
groupware.zer0.de
zer0.de

Certificate

The complete raw certificate details for nas.zer0.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337759651560883561320799709206430185493887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 21:37:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 21:37:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nas.zer0.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925463568355645440019222857401258061728228889907220967259708025966834829849258312069903781753432121641899245955806932487036298599100606107523384745136269231412841862106579096367402053794830314925959780284383437652357998081644264569458375732200974767660570684769440929797956149385845065288103067892295089387063402975897667059769208462231516557582994725082799283402351088354904894827778241732476987944642343732819774639839736954892544875942968244396618072142346961128986115847634323206254461662484949268600431513571485849529611849923583203703799528947679197768493849842742270128859209673068553924656974956517023862818581287911648988961769263071807981512373591534416405630225895236597347323237318771768415207977613098164040210985690914630957398272158551538917397844138603313530682718613316762799524379696721187675583764127683646784174546645687271849302604519172676124630431097196193382987142828536568987609652710463397901008506719934384651166670845131609396160737823273014513320515582746310348085820509841955929662484769698952499069868657238582631852481362689035589622759436576250324609837054019537417504355990591193532144030313494514546848125956303100757036361302504985263669223402045082773069673545762977046589219843646935222425291731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd87b8e30037e5a6646acab9a0c6ec53480cdddb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryaire.asuscomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.zer0.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4babf70a00000403004730450220543397106ed82acf575502ce4324771a8c843e2c72e306840d0737d736159b9f0221008ed705cbff3b76978ebbed29dfc3e9911e1cf30040283c907ef61294993b7a5f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4babf6f90000040300473045022047ff29e20c1cb63d5d43d676fcec009b499e2b6f60bddc762ca4143641462522022100b112cbc992ad22f787ca41ec1ca51a20e62f1403d769d8fcff0fb2af967d77ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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