yarvis.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6d:bd:13:cd:ed:39:a6:b1:24:df:85:19:62:0b:00:17:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yarvis.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:bd:13:cd:ed:39:a6:b1:24:df:85:19:62:0b:00:17:c8
Serial Number (int): 385791248642955825793965206012365356668872
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:2e:78:30:7c:da:b6:39:99:61:4b:fe:04:13:63:cc:4f:f2:e6:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:84:aa:95:14:b6:31:39:d2:7d:ed:a9:13:79:7f:80:5a:36:aa:56
Fingerprint (sha256): 30:02:91:7b:da:07:bc:63:5c:d0:1f:cf:6c:89:4c:13:b3:12:86:88:a8:4a:1b:8d:5a:0e:6f:4e:ac:3d:4c:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yarvis.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yarvis.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yarvis.de

Other certificates including the domain name yarvis.de

(limited to 100 certificates)
staging.yarvis.de
status.yarvis.de
projects.nexusimprovement.com
recruitment.laveraitalia.it
app.yarvis.de
www.yarvis.de
www.yarvis.de
app.yarvis.de
recruitment.laveraitalia.it
app.yarvis.de
projects.atwell.lu
projects.omerosystems.com
yarvis.de
forms.centimo.nl
halloween.rusgymnasium.at
info.digitalizadores.es
status.yarvis.de
forms.yarvis.de
www.yarvis.de
status.yarvis.de
recruitment.laveraitalia.it
app.yarvis.de
www.yarvis.de
app.yarvis.de
recruitment.laveraitalia.it
yarvis.de
status.yarvis.de
www.yarvis.de
www.yarvis.de
www.yarvis.de
status.yarvis.de
staging.yarvis.de
portal.visionsoft.com.cy
forms.lawplus.co.uk
status.yarvis.de
support.yarvis.de
www.yarvis.de
www.yarvis.de
staging.yarvis.de
staging.yarvis.de
staging.yarvis.de
halloween.rusgymnasium.at
www.yarvis.de
forms.lawplus.co.uk
projects.swish-it.com
staging.yarvis.de
support.yarvis.de
staging.yarvis.de
app.yarvis.de
www.yarvis.de
app.yarvis.de
forms.centimo.nl
status.yarvis.de
forms.nublock.holdings
app.yarvis.de
app.yarvis.de
recruitment.laveraitalia.it
app.yarvis.de
yarvis.de
assistenza.lrsa.it
www.yarvis.de
webinar.just-barcamps.com
status.yarvis.de
staging.yarvis.de
app.yarvis.de
www.yarvis.de
app.yarvis.de
recruitment.laveraitalia.it
app.yarvis.de
www.yarvis.de
app.yarvis.de
app.yarvis.de
helpdesk.evalink.io
meet.carbontool.com
app.yarvis.de
yarvis.de
staging.yarvis.de
projects.atwell.lu
app.yarvis.de
halloween.rusgymnasium.at
staging.yarvis.de
app.yarvis.de
status.yarvis.de
www.yarvis.de
piwik.yarvis.de
projects.samepage.digital
www.yarvis.de
app.yarvis.de
halloween.rusgymnasium.at
app.yarvis.de
www.yarvis.de
recruitment.laveraitalia.it
recruitment.laveraitalia.it
www.yarvis.de
app.yarvis.de
app.yarvis.de
projects.atwell.lu
status.yarvis.de
www.yarvis.de
status.yarvis.de

Certificate

The complete raw certificate details for yarvis.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxGUwgLmmwSWIGzWo7KBp
aVe01Np1Y5gw7mge97/qzFpHNWfeBSZcsblx8vHFbWZam3822UhUhr4Ayd02CpJK
i75paKrFOLEiTcxpNRv7eCxmEDwtn4ValHrAQxxn/bsJBKWTQYJ2EJHqTUyL/HaF
koSxu/SpbRfmYnoPHeIIkQIvgO08VtkduCH+pHT7ZHHZw4VhoROdVeEM+vdq3ub7
/9xsaHMtntJm3okR3mAnv+B3QqZ0fIsDDglmsrl7eJ8LrnaKVCZ9hXu+z/t781En
9fRqDgQ4Unn1DBjkAAmVC0xcplydh5CF/PPIg1TrQ0M8wt/UiLLujocH8X0hoExs
YVE63x+npEdUqhd2VB48B8H+qs6hsO+KhX8V1le30pFHfn+0t6M88T//fZ/YxGUK
4q2XvEyN0owhVkhvtt4In+xeqEXK/NO7ifEjM9PEf+0RXG9lGqL4X9wqospT1K6o
h4QxdAbUYYQQmejsOSG5hrHOp5AOv/LCW2qiFDIteXljlQVPTIks/601cxf2EF+H
Sp8H+i8Ot/kWAETK91zADbHYgfRQUMRkLcV1zRg3SGBJwzjys0/1afKGswswVJfC
6p/1gJAv1ETpD5x3zZQh72Z95I3t7u8F538b1w/LZcrCbtMeOJMedg5nW5GrZ0qd
NsrPJlLa0GrPXk8HLMEpQnECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385791248642955825793965206012365356668872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 16:18:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 16:18:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yarvis.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801222803727771694384089434877627785868443339302110611163957383698881959005520396668211673849380687508924406902851294028164004677651515416911105145120045998237649997813794391830220631534792992496576347763111044733737739207975197962754921800556239155289283950168028295874505577579676187415486746632078186754147463747650892355341010644224236282593096915948257435612131189121426540079519308566398505373014613487057442132323255331347137858706594824682617650015729971244383846251029532793865661035352595729490829360798756638276069467307077579427249503914444174020794843620123026855044666188156934181511432940007120753955765078738487861526470722259939475433229054565630950108429456728979329241250727214577700317113334091400726856913110426928386840486191842401848486184902094667754458614193230860727144006498056431092447075850967508625200029537886766183097872408428281962257331613692317381568285398666564795845322130762907717472519547334773039965051578974476088591716881749943073328995260069248504564288128680535401217934980919151197436599744760621698281946266604409035637291158471203277479091953700199857689557865330529911567473378314364723000077205684530322889164902320841418648020867493004631393858690761893519097802702987535322196820593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32e78307cdab63999614bfe041363cc4ff2e651
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarvis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aa7e74263000004030047304502205466b55181bb2bf59808dcb0b0856c5bea311e0205fc1695cf9414bc56cd44d3022100c7cc06490696f32ede1422fd5f7578cf4b6f908620cbf1a135c4e24f3086d77a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aa7e741ad000004030046304402200132201c579acd945d42abfe52fe0379e1463d3abf89389410d4234c5c1fd64c02200afeab7c460c20a279a179f43086980c7c6fd1558cb6047fca79e6e9cd577b08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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