steffentraiteur.lu

Issued by R3

About this certificate

This digital certificate with serial number 04:65:01:1b:98:31:0d:b8:e6:b6:0b:eb:57:47:1c:e0:ea:17 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=steffentraiteur.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:01:1b:98:31:0d:b8:e6:b6:0b:eb:57:47:1c:e0:ea:17
Serial Number (int): 382819135292879423307749108408478244858391
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:16:d7:3d:9d:cd:dc:94:83:1c:24:84:fc:52:bd:9b:97:fa:d8:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:95:26:19:fd:45:7e:a4:31:93:31:9e:b7:a5:c2:60:d6:91:c2:f8
Fingerprint (sha256): 35:fc:3a:dc:29:3d:44:97:f0:23:f1:cd:88:63:c2:4a:c8:9a:e2:13:df:a0:dd:a2:ab:ae:f0:32:86:39:7b:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate steffentraiteur.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for steffentraiteur.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

steffentraiteur.lu
www.steffentraiteur.lu

Other certificates including the domain name steffentraiteur.lu

(limited to 100 certificates)

Certificate

The complete raw certificate details for steffentraiteur.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuyIRlhTTpri8ywtPSgl
mtfdf6SGwfbwUa4gY9fwv2ocKNbLk1T8ikROtIDrJhkN9Rn51Irb/Z3bcl9i+sV0
bGpgc0z/8/7cF573Cm1l2J1hEJgqBMbmFeIGvNEN4gb/n59+AXuBtiFz7bpWDuO6
ecrGbA2cMaabTCegVA4BOeUrc7dkRYm0TUwOdiEeKTaS2c7ZCEh9P2yDIWZ+3OyQ
GC6ldlCC5Rt7jFcfNS4wQx1vOZdItabobBABM9whsKBiacuXtpBMfujDEwkiNVv0
QetsRrl/MnL58yc9szbi/HBsWistzSuQVWEyAdzjOmyRgmLkqXtlUimipSp06fQB
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382819135292879423307749108408478244858391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 12:19:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 12:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'steffentraiteur.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25616776038976476787942113629915430643668674617147198901399790429992107572286980439569353360997452410804460372732982226706800257828547265201990617276512696744649787847177518810342540268056784696013997109546280536676549593228870821940064397301030376552656206499986920917641087130271736759037977286308284374216217222339435152257557050768057019675159447455352819722454645944470463820937282778481013454164125373999647846734698017842772818751465174296316036975384397356881186492437394241100307141387817817713640563617737641763442005139515773733198918432835552022686313873231872259973580191923948372840443405777703701578177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f216d73d9dcddc94831c2484fc52bd9b97fad80c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steffentraiteur.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steffentraiteur.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e235e1a320000040300473045022100b8404dd631e2274ed6133c11996f36614ca3b94f292b48caaecb27399f184f54022019277415eb27062dcda3a0f729e15e96673ec71db342f64eb453efa2abe34c3c00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e235e1a350000040300483046022100e045b914605a745cf9fa59f6dd6ddc4b04798288a55c6e2824e89db806cef65c022100c10a2058e9d5867178fd95d598953c502d77276dd801e413e44a894b6cd0a505
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006bd84dd4eb4c4f024c8d83a662fc4f9003e8adfffc54cd61585718dda472d3614aec20b37817f17b5bc869ec14bdd4cceb1e9cd351df87d46c4784a96928eb2e1d06a84c934cb4319b1edf3678e81f46d1e24164c06d54a34ecad0680c5cf5c4bf94b6e50bd1d2ba5b45acbbb9846f9ea044fb0d2da43335b5fc702c55fd4334ba52337979ecf6844b380d1c5e3bf730599c6f6b1d9bab6acddea1fbe99526c1475a488516ea80430caa0ebbc619a0023cae9fcfa2f7b710b4ab3032660355214fda18c87fdaa964eb543ae4f0c617529c57ca106a0492f4b7341f43ca51d53553edd0c7949c537a3aec845a6ceae1f2129664c17146acc886ba42f755f9d6fa