www.gesundheitnordost.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5e:af:5c:32:e7:51:f3:89:b3:a2:ff:32:8f:b2:00:17:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gesundheitnordost.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5e:af:5c:32:e7:51:f3:89:b3:a2:ff:32:8f:b2:00:17:06
Serial Number (int): 380668779840630096062379001141136944273158
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:e3:45:19:b6:b5:86:b8:ce:95:57:8b:b5:49:db:7d:dd:3d:fe:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:a0:7a:8a:bb:8b:6d:3e:3a:e8:c8:78:a4:1f:6b:03:46:6b:24:79
Fingerprint (sha256): 30:c8:79:8b:9b:68:c1:cc:7e:0c:48:0c:ad:d2:f1:19:3a:ce:35:65:6c:89:56:dc:f3:f6:80:ae:3e:6f:a7:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gesundheitnordost.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gesundheitnordost.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gesundheitnordost.de

Other certificates including the domain name gesundheitnordost.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gesundheitnordost.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380668779840630096062379001141136944273158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-08 02:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 02:03:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gesundheitnordost.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760330303266243782017686001788078280804172228978382619753280120691410104351034203369377059692518012308485469464005892876313624865036220318276995001853980732676487138437367236304196641076574267154619208389757002295943820474523669633380857820769298971098254876568201797099176001499962631849204956013865574999615270374309068021479005066770444093126919679319524633685736692074000816798276677638681346692004131063857961286666935571195998956751561011827358833968463632024761187535216014795165272226118897231290249341688645931313155725239253897229138807604069393276019247200988485991228533120687976690576091610524629698247239765276834568691727350481490600282979485232714215978390086276790059436747023738891074592237453410707875484709340122788859223259825312445721206547920177044985588274556175567904420149975758498601083389964249594864867680573601592639968009264870930319450976398702192598555921751454426880932714517758919847935919415346862832615466343363552576958007784821359340492445542050485208988942549220288819346636916230603689422664338715119069238298344552305894836782038992481998172333702583694065230286583096958406678488324469223145237825215463137118673711035809445701331774114949665898615693140123902160403619880970359287173470447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2e34519b6b586b8ce95578bb549db7ddd3dfe2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesundheitnordost.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b350a13cf0000040300473045022100ceec76446e415b92bc9e6d7a14cdca43a57a98598e91b7ccc95a189a2dcdd92902201ebd480f22019d814d3410c6ade5e62b8774981edc5bc3f825810517326d1b2f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b350a13ab0000040300463044022029c9adf4940887fe745dccf8a0a916c31c40c5cd2c12d37009c1b3a217fe570e022014afeb3ec744a24fae95b42f0f81f3687ea7277eb31221a9a9e37f037f26b167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006280a3de98c904b7392c3d61f8bbf0ba7408940d88e03ed980e5dd5ffd086ab65b5ffe62e2836b3b9c8b492e9e93cd96f30185c0c5203050714335facf525eb187cf505c68bfbbb06c486c91bcf1029db27e51330ae2e03fb5a3d5cf78c3482488c051dfea579eb434407428e12d561324bc784f938fd9a24bef4e38474330389b093851cd6bb82132b173e85ef3431e79cb19ae857ae5d14baf9f705107cc801556face86e0357b8340f45de2fc357ca68907c393493de9ad45cc94e808e7b00d8a14f204240e7a29842baa927cc29003f58853ea042c93d0f16158051f89213ddb545ccbfe5f3ae45f59c53bebe883f8532cba2233d68eb8e421ea5bf8aef7