praktikum.sparkasse-rhein-nahe.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:f6:76:58:1f:ad:ae:66:1f:05:9c:d5:52:77:69:e1:9a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=praktikum.sparkasse-rhein-nahe.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:f6:76:58:1f:ad:ae:66:1f:05:9c:d5:52:77:69:e1:9a
Serial Number (int): 334825171248636775900226274407553258086810
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:b2:6b:cb:9f:e9:99:e1:aa:55:ba:d0:df:0c:2a:1c:24:f1:44:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:82:a6:d3:5d:d6:44:08:d1:61:24:91:3d:fa:60:65:5a:b4:bd:4b
Fingerprint (sha256): 30:f7:31:75:30:23:e7:fb:10:78:bf:64:fb:c0:ef:23:dc:76:1e:c9:e4:aa:7b:68:10:10:81:81:c8:fd:73:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate praktikum.sparkasse-rhein-nahe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for praktikum.sparkasse-rhein-nahe.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

praktikum.sparkasse-rhein-nahe.de

Other certificates including the domain name sparkasse-rhein-nahe.de

(limited to 100 certificates)
giropay.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de

Certificate

The complete raw certificate details for praktikum.sparkasse-rhein-nahe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334825171248636775900226274407553258086810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 01:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 01:07:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'praktikum.sparkasse-rhein-nahe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784687914229654450724453685254010793375281183858962680118405690347342082340924183403016396681605024092317113897412627057856600537685645516470479282542596738922769127356404962353962138413114147123478368017935117701092158723622365987764797127584132487774597208085674374720909126697058566078212632965102621763731228979453295018799783439931916567586390251838370629553210792590403125261688345194396323184154385616063123170263142318442277503253656035393567759043707106056950017302544978822796582946363924378365382277528211418432603248173715340074821089087335175455861658970593540853688537754719986285437426092756373964204911038606744582879558835589470199837134563532247526779141587769386213650069736757725405845787476142833612067919480228222610743914875829740825918178848910719531371338774541398558286609936066416344423887004195661120351955169306279482086820247194111803448371226697194611774124050684882300999311520814410614429398891048854015651286972239968249715370522453696379791884803353677327611815794371763302227659382975017441694157760278367002094466609204124115925590889808487582956613641697074478236154733751261344560122900655555755146417012879044935643694751783711731533569183443785116195359830731820267927511213005366772891682319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efb26bcb9fe999e1aa55bad0df0c2a1c24f144d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praktikum.sparkasse-rhein-nahe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f7374dad9000004030046304402204532f8120277294c21c3344ea5d3b5b53af4ff4b12742be756441f56f9fb521502202352b0c5515dd416e02c4613090d3c407f0dfe86f453e04789a58ebfe513ceab007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7374daca000004030046304402201c695018395fcf5915e4b1cc117334a7024357d9e32c93b486450bb1bd922cff022078e9b70bdc1d98a4bddd4e5beb91d24de0d14fe54664f945c2148981d1c5a01e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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