fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:17:be:db:b9:65:52:84:f1:f7:a6:67:d3:b8:9b:d4:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:17:be:db:b9:65:52:84:f1:f7:a6:67:d3:b8:9b:d4:4b
Serial Number (int): 298459199026505478150285514750426617730123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:61:4e:ab:0e:64:20:62:4f:3a:71:3b:04:15:6f:65:71:97:6d:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:eb:e2:19:be:d1:3e:9c:b4:c4:d1:f8:02:55:24:57:a5:7c:3b:48
Fingerprint (sha256): 35:5b:cf:c9:f1:ff:6a:b3:a2:1a:a1:f9:b0:29:c3:ab:24:b1:27:18:53:f8:c7:01:88:ab:a9:22:81:24:a6:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298459199026505478150285514750426617730123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 15:33:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 15:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909961967597053019917736023460607306479119423070377328657132341740035624383354026200093329930817881299464129729731197147438635975245538272583958147105166962524897387383137938408131449052771835284825659603075470378290623228983100648715674496533707055865655191667120221202611092386132736756524614369445504965766597278078644069213406943072782274212972776650208140322042112270514384690666354506730957727322488980199393677590840503220103259150750131266324090880265366293503457344330632533343977646846764342723805413438708057653888862419145716627491079295179269059530965036262877911170917712943105735534836012708168816621027252695615548543776727357306710207389844478133775520525864077624809363427201654169180203338634366405167034267319423663490273654975284413380217257790111257355261573089691529944787151006694036269310105095219326071908554003769780941433141200970810600971595825969886947082766845181239756654857435113068978784402225672240881581429770210193232542659350585325080107944636963952615625449146069832630401746073146514147050726985152972045223289255661438254439118734284034276174294360628341560746599579347876436377035192245470517775468140633042102845389016515047778186187274937687611691446842730544585265559832188897066647400253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09614eab0e6420624f3a713b04156f6571976dcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001713171459b00000403004730450221008faf19c88c326f5d1d50ae9d9b447c0ae92dd558da310bb653d3c2afe2e16a83022060e399497ef122ff934f2c57135f1aae807d09ad1331fecbebee955f4abd10c200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171317145c40000040300483046022100d0fb7e75b5e05d7d3635eacb439ea242c039f916357f8bac6a3c2f25353d871a022100b013326c593b84414a88535d41e70e90168a77c843b80799abde807d788a9283
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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