kreuzfahrten.fti.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ce:93:03:75:38:0b:b4:aa:9c:b5:e4:52:51:aa:0d:0e:0f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kreuzfahrten.fti.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:93:03:75:38:0b:b4:aa:9c:b5:e4:52:51:aa:0d:0e:0f
Serial Number (int): 331630439850747345126619521658631347834383
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:52:e8:08:12:2b:0c:50:9b:3b:f1:34:83:8f:71:1e:bb:3e:4e:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:6a:56:1e:52:68:5e:1a:42:a2:58:cf:f1:2c:20:6e:6a:28:e2:01
Fingerprint (sha256): 35:f6:0a:3f:74:9b:5f:14:a7:cf:c0:ec:41:32:e0:24:28:92:5f:f1:fe:08:03:bc:80:94:1e:cf:09:2a:c4:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kreuzfahrten.fti.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kreuzfahrten.fti.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kreuzfahrten.fti.de

Other certificates including the domain name fti.de

(limited to 100 certificates)
www.fahrkarten.fti.de
roadbooks.fti.de
hotelbeschreibung.fti.de
www.tonsoffuntravel.net
rueckverguetung.fti.de
news.fti.de
qa.www.campings.com
rueckverguetung.fti.de
qa.www.campings.com
www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
roadbooks.fti.de
staging.hotelbeschreibung.fti.de
oneqa.erauqsh.com
gutscheine.fti.de
news.fti.de
blfkmp.fti.de
gutscheine.fti.de
staging.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
esta-rueckverguetung.fti.de
s.camping.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
fahrkarten.fti.de
staging-fahrkarten.fti.de
staging-rueckverguetung.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
rueckverguetung.fti.de
designtitles.com
qa.www.campings.com
kilpailu.lofbergs.fi
www.fti.de
news.fti.de
handbuch.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
qa.www.campings.com
ath.atheer.io
www.fahrkarten.fti.de
qa.www.campings.com
links.aip.ibraph.app
fti.de
booking.fti.de
staging.fti.de
www.fahrkarten.fti.de
fti.de
www.fti.de
handbuch.fti.de
agenturverwaltung.fti.de
icn.ziggu.app
www.rueckverguetung.fti.de
cdn-prd.book.fti.de
news.fti.de
gm.fti.de
esta-rueckverguetung.fti.de
fti.de
kreuzfahrten.fti.de
handbuch.fti.de
fti.de
fti.de
blog.fti.de
staging.fti.de
www.rueckverguetung.fti.de
qa.www.campings.com
fti.de
highschool.pk
travelmag.fti.de
gm.fti.de
gm-api.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
fti.de
www.campings.com
www.rueckverguetung.fti.de
hotelbeschreibung.fti.de
cm1.fti.de
www.fti.de
www.campings.com
ads2.fti.de
gm-log.fti.de
handbuch.fti.de
www.campings.com
hotelbeschreibung.fti.de
www.olympictinhochvtc.com
handbuch.fti.de
siteminder.soap.fti.de
www.fahrkarten.fti.de
www.campings.com
handbuch.fti.de
camping.fti.de
drivefti.fti.de
kreuzfahrten.fti.de
handbuch.fti.de
www.campings.com
handbuch.fti.de

Certificate

The complete raw certificate details for kreuzfahrten.fti.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331630439850747345126619521658631347834383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 14:10:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 14:10:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kreuzfahrten.fti.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3969653260459178011587591364797660384486531635491176693178914111927981043669401495108273441766507883742067382092769615742760618550374863462373090456351790519737953711897093386616063278670886993530772037490043965398381342422372160665629050376060136841263375045400126154950614435610822416424061071938742386702823504636981348075401260127674838377544960645486492815004953068509151775110662036699870828079542616789497468519002759945562968597421009716321011084546184452412976768923813813506626735027206444032088582175611724888725120322495781569280674340668483501261284165432504141719808226197129875494106891491388016277863909413651871736599302838278292790643634428767618243910612574216701736598170098001575367299267345994242485912127066554655563748501673015943675462788807220723094549750256545433077267327946238516234067317977614099785762964458428564498835994482507919371940065723730998176959528513200657122218163424803257117484649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b52e808122b0c509b3bf134838f711ebb3e4ebd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreuzfahrten.fti.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fa9c16a450000040300483046022100949c362dfe0d915cf720dd6f427ad455f36566241c3fa75eccb2aa9f01e16280022100ed5c5f97d61cbd9d6ea785ca7ca1f626a050ac6b7fe8153dafe570a0edd96f7f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa9c16a310000040300483046022100be02fc9d0e1571b2988a98962dd33ba3403061c78ff10e259855a4571c9687e2022100befd5a4ee21261a2ff1b9d72b5c569483e404380e5abf55287e5ecac92524c59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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