bitwarden.aumio.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:79:7b:f6:13:a8:de:30:48:c7:f9:8b:51:69:5d:34:85:f9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bitwarden.aumio.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:7b:f6:13:a8:de:30:48:c7:f9:8b:51:69:5d:34:85:f9
Serial Number (int): 389788082871728162701624809550789358159353
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:d6:56:aa:ca:87:77:49:19:28:d9:fb:40:ad:e9:20:a0:6e:2f:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:61:b7:50:9d:ac:cd:f2:2a:c3:7d:c4:0a:c8:94:13:a0:06:20:67
Fingerprint (sha256): 36:f5:59:19:2a:84:b0:bf:81:ae:b8:31:0c:93:44:0d:17:2f:84:03:ca:d2:02:1e:bf:25:de:7a:52:ed:b4:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bitwarden.aumio.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bitwarden.aumio.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitwarden.aumio.de

Other certificates including the domain name aumio.de

(limited to 100 certificates)
gitlab.aumio.de
aumio.de
wp-staging.aumio.de
bitwarden.aumio.de
www.aumio.de
aumio.de
www.aumio.de
aumio.de
aumio.de
aumio.com
www.aumio.de
cdn.aumio.de
aumio.de
link.aumio.de
bitwarden.aumio.de
aumio.de
www.sigastudio.com
aumio.de
www.aumio.de
aumio.de
wp-staging.aumio.de
gitlab.aumio.de
app.aumio.de
preparedhouston.com
aumio.de
bitwarden.aumio.de
aumio.de
aumio.de
aumio.de
aumio.de
www.aumio.de
staging.aumio.de
hostpress.aumio.de
aumio.de
aumio.de
aumio.de
viro.kurowasi.com
aumio.de
aumio.de
gitlab.aumio.de
aumio.de
cdn.aumio.de
aumio.de
aumio.de
aumio.de
sentry.service.aws.aumio.de
gitlab.aumio.de
aumio.de
gitlab.aumio.de

Certificate

The complete raw certificate details for bitwarden.aumio.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389788082871728162701624809550789358159353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 06:26:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 06:26:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bitwarden.aumio.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716264791048067517270929862678288856163705878316015025985869588102570718587541800859686659667124740108410336139431099197294593634918421270505610964875688078702795721149260885415613718719755275605107498913719994822242913701906145186705521956018729677105415691887029965087779022685438261022524451695937905924999438991910992880550611262762844593101551454771069245399065834928119700817157589828374446450926460349622240296622726262126898671341101127936513902503179990219725305784158304214956442562860090843240815613529965794977065776730678938951907049557136113197638440185371838826509280398798705922121787394275648967699532502048451242552517794713420654975691395800671536773677911955264683436571174887869644362912583684980379614468613200901988844796202572375500752739407224512991018004710108770164662323917683870138101392601192805800968870752579606392865947060836751029768371307330255849350150449491698034398378862933443859609266442879682482299524004867663793068224447102207317998198953868021027493710031550067159089659769219379826373653757228775728523730878436671763400148484271544765794281426608003988255393771567491313854370267290916601963368108683812330624908926298910938083993693617298338903122937353469478969454777983916289078285983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24d656aaca8777491928d9fb40ade920a06e2fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitwarden.aumio.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e87b43d120000040300463044022043598bf809669adee8d144fea2a5405c5401a259e1d9ded388f58a5b1199927402203a81f596c8510b8c20f282e51f978c69b02483b7efdc13c80b0e2b6d93ce50a1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e87b43d090000040300483046022100f6eca3a2b553a6161b45c873b354bd9c023763bc9a8bf364c301be6c78188f6c022100eadb1dd7bc8def7fdd7e3d1bd2f41eed55a96dae00b423c7e9e6a0048a9da2ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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