www.lektion3.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:ae:5e:46:f5:08:98:23:4b:5a:08:53:bc:5a:48:bd:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lektion3.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:ae:5e:46:f5:08:98:23:4b:5a:08:53:bc:5a:48:bd:20
Serial Number (int): 306826187782119065091270530395374556331296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:d4:14:a2:1d:94:9f:60:af:3a:48:3c:a1:4a:c8:21:39:d9:1c:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:d1:76:d6:16:1d:b1:d3:4b:4b:9b:c0:1e:a4:9c:47:b2:ae:61:d2
Fingerprint (sha256): 36:41:cd:a0:0c:e0:60:1d:b5:41:dd:e3:55:eb:64:41:9a:18:22:e8:aa:7d:68:97:a1:f7:06:83:29:b3:4a:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lektion3.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lektion3.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lektion3.de

Other certificates including the domain name lektion3.de

(limited to 100 certificates)
gambling.zenwort.de
lektion3.de
schluesseldienstesslingen.de
www.boltenhagen-ostsee-fewo.de
www.lektion3.de
www.wortkultour.de
lektion3.de
www.wortkultour.de
www.wortkultour.de
www.juergen-mans.lima-city.de
www.wortkultour.de
www.cb-fc.de
www.lektion3.de
www.wortkultour.de
lektion3.de
www.xn--khlschrank-kaufen-22b.com
kinderbuchexpertin.de
www.wortkultour.de
www.wortkultour.de
familie-nitsche.de
dozententeamsuedbaden.de
lektion3.de
nasenbaer112.lima-city.de
www.lektion3.de
www.wortkultour.de
image.okan.at

Certificate

The complete raw certificate details for www.lektion3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq85QPOZ+xHLQQnjSqJ4A
K/Elyf6ouZRtMZpg070riM4HkS1S2FLcr4y87hcP+AxFv0YvnsGvKoYgnkvOMktY
O5RXji6rCT1XM4uQrtpxFF8czI6+SJtv2GU9swMzco6qgIrSKZ37kAZpHwqQMEd6
z4bSOFb/j5qgJc28Jj8G+dVC6/MThgKE4jjaKOIkUcgf1jYvjbC9bDyJYknLcf1i
EGXc+IKwkhZQor0Yhfq6wvj1icmA99yzGCsmNwazpI43sdqmyyhoNUOwLXIinJ/2
bE+7iVwBXHBDqr43TD1qHknAnMNf8bU1VGyJsHtAmM4+Kx/uky7q6x5GqkhGSjbW
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306826187782119065091270530395374556331296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 21:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 21:04:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lektion3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21688487092954874034680795116703499783823228250829056357821185541723899523237472490952264057974269227645204560866382017810426783740410245395601201611026522534767342044754267393263998365159092778011838181379623349121608354463825425192592758801579677895984622463223229519111776118070325761308976944575785817615453990135053623104310593113539138996328896067976486480649363508261558150892958511427708455635554303616602504308693524061962624496661481930502747345544441276836340684450239216357045823717732765756867550843811264359552971269545454650440776217207419335131256947290877054797274580311322969261085462861365986645681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1d414a21d949f60af3a483ca14ac82139d91cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lektion3.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e334c68230000040300483046022100c9aa064cc7d829a2b569e4689c72558a6fd60291bba4bbc56032bf790076afde022100ef04f7ba2c27eaee741167187304f861c9616d2d66485c6820a2d6b451333b83007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e334c681b0000040300483046022100905ed4443172dd1fd307b6777b54f35babb6080bbf47d36570da1895c1b2a651022100d967963b3202b55a9a434527113a9d6f11ecece850c574ff253914e339dc9191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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