joerg-borgerding.de

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:15:d9:bb:80:29:34:66:21:8f:6e:7d:a9:b4:a8:c9:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=joerg-borgerding.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:15:d9:bb:80:29:34:66:21:8f:6e:7d:a9:b4:a8:c9:60
Serial Number (int): 337589152304865293963127940380426733406560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:3d:f6:8d:a0:24:5c:c9:78:fa:57:54:78:b2:26:fe:2d:0d:1a:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:67:68:65:9d:48:00:bf:87:cc:f5:47:2d:a5:b8:3d:2e:a2:f8:31
Fingerprint (sha256): 33:a7:b3:98:c9:cf:d2:3d:07:57:3b:88:f8:f5:1e:bd:e2:3d:43:e8:ea:87:62:ac:37:95:cc:88:7d:ef:b4:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate joerg-borgerding.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for joerg-borgerding.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

joerg-borgerding.de

Other certificates including the domain name joerg-borgerding.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for joerg-borgerding.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxq3/eUvhbjXuUFni3nVp
eJylCzXaLOQszOsnLOYn/YNw3latx+axJa0cAN7C6nYRcu1JyfsQzu7YcOUqraM8
Jc/sIHwKYnLMypgKKQzna+0KqpOBWZfNPUqp0H7cJNAiFdR0cxSEi3XSA11QT64w
3msjOpPGiPc2wtg2gPRzQaUx0cUHQfugdnq6GAqBjuR/39GhqBRxDVpaAVJ5tDm0
SeYye92iaakURaKssNOCfA4NBTmH4xSvR8CPwaxdMp8zT/nE/uno78gQ3v2lK3EQ
2NrrOSk2rm8pPU9kxdjoxKOUfHGM89yxOawjPyGBSEGd536dN9C8fhg0COJqQ5+2
Rn5pzSmLbzx1RuTDZUnMGZt5nIR5kUKdQXUXJRrcycCOrJLy3CuBgGDpAQxqQNQq
QwUbJC6QHJ19rpx277K9dYXr1PePi9hkyrS9hmsoPOAOk/QkB5r5eh7rbcp4BYQ6
m91uLDM346pwRzzAon1o+bIv0fm0ODCLtWrLzlCIWSfUZj8jYYnDEAZ0tCbeSgUz
YVTmTA8cxeDTDRfYN9RBUuNr+2bk2kgqOnxtJlDLsTxv7NEqVJFLx6CZy99/DwDo
uANEGiKMsBZY/nGXi56Re08/CUcdZ2P9h7cRMma6jRBoksbDv8MIJ0+VB8mHegxm
P8ysQ/Q1P6iiSHgPl2tM4fsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337589152304865293963127940380426733406560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 10:16:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 10:16:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'joerg-borgerding.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810542375790169683800262149124321204374735925044075757856644670167918820814331025565621400724923465430277307698718695789874427994031136733087890281430668340645305809401993766578268745287960472500298017795204128543057562314752108829714788645547293979739967959003342223215057975521597103272481664192114558326826777598054245102678298139713991457654984866190502031319814545082265259269563774808852755743713158914132417320147315968744387451446868741046787488628657530214624293706697550406954952344041511609633975490818415702077597838231269391029766668158647674824540126955466047042241772584863979838081321109092944962170012651431472076123217015623972931012573647718468449268551500201197312721905758577047334615109457868476860690196338993357184079457249510967361507519994614625607463729445297911256044904172118978228234734242307390279836358717187813327479902532328260951308356613182024146489038775681788497420529464878713877196888717181812331644684339921652828654485577127134344943317295976178210439692473468427734086907922181678777930360661610023536904003023891248521331570154135159130619263407407692536374563586431201319248824342131494107891353308843555526947388552855611598303578761070461431084626054744607058151045086636766357078467067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a3df68da0245cc978fa575478b226fe2d0d1a69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joerg-borgerding.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e0e53f93a0000040300473045022100b3e84a7ebdb9531e2fb813459552c4eaee0db0de87bd49d73b5d9fef1881e44102207ace86c9c1ea54a1cecd9463e18d2f7d8fc6d557eedfcd2bdaa9b322013a9218007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e0e53f94b0000040300473045022043c53b968f84b927b0c563a149860b98bf7e68d638f2c3d4583e613d89838a0402210083e3e84fa585022ebbd6740650897bff1be423c7e29cbd08eab340aab07c49e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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