aptmirror.magix-dev.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:7d:e8:7a:9d:03:5f:bd:f1:45:3d:be:ed:36:a6:a7:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aptmirror.magix-dev.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:7d:e8:7a:9d:03:5f:bd:f1:45:3d:be:ed:36:a6:a7:52
Serial Number (int): 319011938404157472189508342207994241918802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:3c:07:bb:3e:55:b2:a7:b1:b1:2c:22:c7:ff:07:e2:1c:ce:3f:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:43:41:0f:1b:55:68:68:76:39:6b:b7:86:a9:98:ce:19:a8:70:5c
Fingerprint (sha256): 34:28:e9:03:13:ec:89:fb:50:fa:93:60:12:7a:14:27:5a:f9:9e:2a:33:3e:d9:44:47:7c:ed:26:2e:46:71:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate aptmirror.magix-dev.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aptmirror.magix-dev.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aptmirror.magix-dev.de

Other certificates including the domain name magix-dev.de

(limited to 100 certificates)
nextcloud.magix-dev.de
versiondb.magix-dev.de
dwh.magix-dev.de
versiondb.magix-dev.de
checklists.magix-dev.de
test.magix-dev.de
webmail.magix-dev.de
test.magix-dev.de
checklists.magix-dev.de
kibana.magix-dev.de
mantis.magix-dev.de
kibana.magix-dev.de
versiondb.magix-dev.de
itsm.magix-dev.de
itsm.magix-dev.de
phpmyadmin.magix-dev.de
inventar.magix-dev.de
devwiki.magix-dev.de
grafana.magix-dev.de
webmail.magix-dev.de
grafana.magix-dev.de
aptmirror.magix-dev.de
checklists.magix-dev.de
es.magix-dev.de
inventar.magix-dev.de
esrestapi.magix-dev.de
checklists.magix-dev.de
versiondb.magix-dev.de
phpmyadmin.magix-dev.de
itsm.magix-dev.de
aptmirror.magix-dev.de
inventar.magix-dev.de
checklists.magix-dev.de
es.magix-dev.de
kibana.magix-dev.de
es.magix-dev.de
dwh.magix-dev.de
checklists.magix-dev.de
phpmyadmin.magix-dev.de
devwiki.magix-dev.de
mantis.magix-dev.de
beta.magix-dev.de
grafana.magix-dev.de
aptmirror.magix-dev.de
kibana.magix-dev.de
itsm.magix-dev.de
nextcloud.magix-dev.de
kibana.magix-dev.de
test.magix-dev.de
phpmyadmin.magix-dev.de
checklists.magix-dev.de
itsm.magix-dev.de
webmail.magix-dev.de
aptmirror.magix-dev.de
es.magix-dev.de
itsm.magix-dev.de
grafana.magix-dev.de
beta.magix-dev.de
esrestapi.magix-dev.de
webmail.magix-dev.de
grafana.magix-dev.de
devwiki.magix-dev.de
*.magix-dev.de
beta.magix-dev.de
phpmyadmin.magix-dev.de
esrestapi.magix-dev.de
artifactory.magix-dev.de
es.magix-dev.de
beta.magix-dev.de
mantis.magix-dev.de
test.magix-dev.de
inventar.magix-dev.de
nextcloud.magix-dev.de
kibana.magix-dev.de
es.magix-dev.de
nextcloud.magix-dev.de
*.magix-dev.de
test.magix-dev.de
kibana.magix-dev.de
camtest.magix-dev.de
esrestapi.magix-dev.de
dwh.magix-dev.de
beta.magix-dev.de
test.magix-dev.de
aptmirror.magix-dev.de
mantis.magix-dev.de
esrestapi.magix-dev.de
test.magix-dev.de
webmail.magix-dev.de
versiondb.magix-dev.de
phpmyadmin.magix-dev.de
aptmirror.magix-dev.de
camtest.magix-dev.de
dwh.magix-dev.de
aptmirror.magix-dev.de
itsm.magix-dev.de
itsm.magix-dev.de
devwiki.magix-dev.de
beta.magix-dev.de
devwiki.magix-dev.de

Certificate

The complete raw certificate details for aptmirror.magix-dev.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319011938404157472189508342207994241918802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-30 21:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-29 21:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aptmirror.magix-dev.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799089844648269361560021774236635333692101809715243369521611690019506502977278781047684132951558529522362507972878604672835498240082848749156440053842389485728099590094244097224153570718995134838288343638104382658512257455158929945149460516223021236434116924547101049478012659882874215080248541445212101555474824537645059312073529469430944357020085754514519832543360510017959123789448022572674532733255442374569739471476415864194323781859120341613377784491572467488771767634635968894489216291255176131445974994183368651981943048783258163617602845622762751021792623384360242391412285816479300049521518657012220278664987893186827505824773455098861201311061961224300037277357662554201043336927957496553246780013755804909222263470795066579341569690397501283288515757197032127545400061222226541082414782957616094804864605931199502520211908171955356647410356665500346612519016029558860303651778601864283304976235772200219863296765846114221771689726663463340040660066703560824976355339242229226641790567518891488527243433572811147419648304739621904793916381127697637147416175314587579313341478904584996571711155125733751989191222236300940738084108020299959192317921534289425101467399205405663002336734121669430172444386459689793619015698033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							723c07bb3e55b2a7b1b12c22c7ff07e21cce3f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptmirror.magix-dev.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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