wgg-hgw.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:a8:f9:74:ca:fa:8f:94:15:f3:aa:47:87:e5:26:09:25 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wgg-hgw.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:a8:f9:74:ca:fa:8f:94:15:f3:aa:47:87:e5:26:09:25
Serial Number (int): 323152571762021390545107731678392951900453
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:74:26:11:d6:26:c1:ff:05:cd:29:8c:f4:a7:6b:58:a6:88:89:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:ff:b5:9f:c6:5e:8d:33:67:f9:69:86:9c:d8:c8:d6:ef:76:22:1d
Fingerprint (sha256): 34:fb:78:2d:0f:7f:bd:f0:97:df:76:69:a1:42:ec:5c:63:22:89:35:6b:88:d8:26:fc:af:46:56:c9:6a:69:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wgg-hgw.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wgg-hgw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wgg-hgw.de
wgg-hgw.de.snailsites.com
www.wgg-hgw.de

Other certificates including the domain name wgg-hgw.de

(limited to 100 certificates)
wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
www.wgg-hgw.de
wgg-hgw.de
mail.wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
www.wgg-hgw.de
mail.wgg-hgw.de
mail.wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
wgg-hgw.de
www.wgg-hgw.de
wgg-hgw.de

Certificate

The complete raw certificate details for wgg-hgw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323152571762021390545107731678392951900453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 10:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 10:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wgg-hgw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876569619032470346041963723619050873464246913901754768847695044825229778063568219653812477101121660206917519306309989595576988296619651482648991817063971275754598430473462221981939776262996432648908217790414319674190153743517602815663257649402145149748259685721743554950812463451134347733348168462378576302905392194375457432650896452517485031559621841795049229076986563368134432060316410156598785200053283978795063309393636402242642429290004129049890131448471363093036152759952018592421950056301498525313496452487684689302823997086917933091393208387814587718270730029103319062990910763399788093430690845129347183279125291343864941663446669788571858053533674177500111218401649833480457584092647007395400832504921600484732328289270416678729582870599106983169363511045543969848440981645692325223503944590398793931505371802775701539639765763482269847136124127277860412072440605274112781634044188485344400123188568992839325432491205381863085627485440121969060866657034557423596418846855206784239530641202793684932804550976572611194964685053899557462676285122606118509584800983752142502036255223246759576427462158331961368476957916923147754936829607805001534083632419256549167956522304926559794772638513837449607214207052211202365739580489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69742611d626c1ff05cd298cf4a76b58a688899e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgg-hgw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgg-hgw.de.snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wgg-hgw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168324a32aa0000040300483046022100ff53c85e61894c206f0bc0e0b01f3dd99eb1cd941afe7d9fc919b101388942d1022100ac8ba94c62b034ef90764888c5cb43345f73ad716d33d12b1f3c0b7bababb3b3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168324a322d00000403004730450221009808d06787ac8c55d011410505d9fc343cd28cd7d6b1ea77568adc6f3d8808df02203b35b85098af4146c466b7e37f5cc8d1e0eebde4cea9d902b19d6dfdfa5a47d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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