fun-4u.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:1a:7b:94:57:c1:eb:40:94:00:29:6b:0e:72:11:18:2a was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fun-4u.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:1a:7b:94:57:c1:eb:40:94:00:29:6b:0e:72:11:18:2a
Serial Number (int): 322622885430203157448385869915633640085546
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:f4:bb:86:57:b5:0e:93:f4:32:e3:33:44:d7:9d:f9:6d:c9:60:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:e8:08:36:39:91:18:62:6d:01:e8:c6:b0:7c:f1:ef:85:fe:8e:1a
Fingerprint (sha256): 33:f0:92:92:7a:2a:16:6e:93:df:ab:2b:89:9a:21:91:9b:d5:8b:f0:2b:5f:06:9f:30:b4:40:d4:f2:de:fa:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fun-4u.de

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fun-4u.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.fun-4u.de
autodiscover.leon-lindner.de
cpanel.fun-4u.de
cpanel.leon-lindner.de
fun-4u.de
fun-4u.t6a.de
leon-lindner.de
leon-lindner.t6a.de
mail.fun-4u.de
mail.leon-lindner.de
webdisk.fun-4u.de
webdisk.leon-lindner.de
webmail.fun-4u.de
webmail.leon-lindner.de
www.fun-4u.de
www.fun-4u.t6a.de
www.leon-lindner.de
www.leon-lindner.t6a.de

Other certificates including the domain name fun-4u.de

(limited to 100 certificates)
leon-lindner.de
fun-4u.de
fun-4u.de
nach-london.de
fun-4u.de
fun-4u.de
boxspringbettentest.t6a.de
fun-4u.de
fun-4u.de
grossehunderassen.de
fun-4u.de
fun-4u.de
fun-4u.de
fun-4u.de
www.hollis-allerlei.t6a.de
fun-4u.de
fun-4u.de
fun-4u.de
fun-4u.de
haushaltswaren-1a.de
fun-4u.de
fun-4u.de
fun-4u.de
fun-4u.de
fluegel-falter.de
webmail.av100.de
fun-4u.de
kochsupply.t6a.de
fun-4u.de
fun-4u.de
hoverboardskaufen.de
fun-4u.de
fun-4u.de
fun-4u.de
fun-4u.de
essbare-unterwaesche.com

Certificate

The complete raw certificate details for fun-4u.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEA4dLVeGKrGlZYpozc9
XlhOQHdzQaweGIlPdrQ93sQn5ruf6oa4rVEoohqG40F0U4cwZmcchDVJlklnDY0c
Oit5Fgf4/zGI+e+K200luhm2o9zjFPimtnFcaZnJ8yF1P2hWqbvS+YBI9JQy8OGx
NtbAu6fqDyxXn2ntXwvGIhkI6bd8xetv1GyrmzGiF21ZqEDhb7UXmGcvFWO5hpk0
+bFYnLKufpe6gAglAOQ6wvBfIzkbhdVmnKsnhCC0Rk7B3RWHfdYQQFdg//alArur
BPEjW7huInjPb/g/FWsxcuFOPIMA36pvadufYWzoDQirs7m2GKOriPkuavlFISDe
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322622885430203157448385869915633640085546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 23:31:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 23:31:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fun-4u.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19219890678887725508704125965720446967380567309151330491495781489232177876133453693495700462192014777348811687913055613856114909280704669176694431573209332904569402817522180626718126132400728637662608215122066129456941410618522817953286172451893757947616549867037230454441102520605381232286581286010341963421152951163789089608804959677590204963251858987942783060656285811632769006822822215769375876293426945965299910691776064170951766145991875065695129107908178784442050758335227858243340073271016447727965673582588417260411027360075282376083057936713185013377203018067937430356747286807318693847774643417938198060553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adf4bb8657b50e93f432e33344d79df96dc960c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun-4u.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leon-lindner.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fun-4u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fun-4u.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leon-lindner.t6a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bbf8aa4810000040300473045022100c0acc8c07beb221cea0c326c425a59aa57a86df06b9b5c2637027903e88c165802205f7dcbc20b84a77103661893cbe05fd0e856cf90d176961fbb528b511a78351e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bbf8aa4760000040300473045022009827126cf6f3209f21e6b4a7854afe8114cc20dff78577801add069dafcc1fa022100edbb12d404de6d4592e57031c4f311090e3003bd038ad0ad7a5376e5997436e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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