regioconsult.de

Issued by R3

About this certificate

This digital certificate with serial number 04:82:22:40:93:ff:24:cf:b3:8d:27:35:ed:49:93:ce:7c:c8 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=regioconsult.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:82:22:40:93:ff:24:cf:b3:8d:27:35:ed:49:93:ce:7c:c8
Serial Number (int): 392731380487347405939219856198689073560776
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:01:2d:d8:43:a5:ef:45:c5:10:49:be:45:a5:09:1f:6f:13:23:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:61:ba:d7:bc:d6:8d:b6:dc:33:7e:3a:ed:79:f7:d4:2c:cb:81:6a
Fingerprint (sha256): 38:cb:4f:00:e7:ca:c7:0d:ed:cb:11:db:a9:68:c3:af:a1:20:f5:e4:c6:d2:a2:0e:7e:4c:4d:21:c7:6e:44:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate regioconsult.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regioconsult.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

regioconsult.api.itool4.net
regioconsult.b01.itool4.net
regioconsult.cron.itool4.net
regioconsult.de
regioconsult.f01.itool4.net
www.regioconsult.de

Other certificates including the domain name regioconsult.de

(limited to 100 certificates)
regioconsult.de
regioconsult.de
regioconsult.de
regioconsult.de

Certificate

The complete raw certificate details for regioconsult.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISBIIiQJP/JM+zjSc17UmTznzIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDkwMDE3MTFaFw0yNDA4MDcwMDE3MTBaMBoxGDAWBgNVBAMT
D3JlZ2lvY29uc3VsdC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANjq++DUM3j9IWltjHKLX40mV4EkbcUu20s+prvnZLHrE2rhlnrzJW97ZXlSAfNq
dPyewnx6atVSw/wjhFCdCO/MVCdZUkELIGCgGsHy7Fghte+RWALuowiWOzUp3PPk
ZfQnA/EHADtsrcFQvQ4JXBq5J+o7LbvVO90QQ0FI/aVzEmnVmfbpzOTHEbt17Y8u
teDziZtgQzNnkMwN3aBvY/WrWlY7QnBtKMg087UcV5tm9HLprOL89bEUx8Zb62Oi
kXRojCamC5pqbOUsecMV98AkzrJDMDUzqua07KFoVC6ecc//EQJAExDlkwxam58J
/mp2JoMl+frug7jMUSZSpxUCAwEAAaOCAp0wggKZMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUBQEt2EOl70XFEEm+RaUJH28TI2gwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wgaYGA1UdEQSBnjCBm4IbcmVnaW9jb25zdWx0LmFwaS5pdG9vbDQubmV0ghty
ZWdpb2NvbnN1bHQuYjAxLml0b29sNC5uZXSCHHJlZ2lvY29uc3VsdC5jcm9uLml0
b29sNC5uZXSCD3JlZ2lvY29uc3VsdC5kZYIbcmVnaW9jb25zdWx0LmYwMS5pdG9v
bDQubmV0ghN3d3cucmVnaW9jb25zdWx0LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f
hWrrwb8ohez4ZG4AAAGPWuz8CgAABAMARzBFAiEApP2Dw13d5J4KeqJbDu+ZDEcW
nZvPYe4svr8dVHfzdToCIA9GrUsRmHViZAcntbQw9BIUeEKobUdT1KPeKOWBvrVX
AHUA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+UlwAAAGPWuz8yAAABAMA
RjBEAiBNC2fIQj10TXL/4uAWyVI2hREbIVn8OaF4cqYApCx+DQIgY5zr+Aystn41
xOOiQgKHeO7fShRsKY5GeZcwH/sEPoMwDQYJKoZIhvcNAQELBQADggEBAAyJ2gh/
/1OMY9sEwmSu94krIJmqNdO9qtGW7gOb7jNee8orBpx7iaiypKsmzoBFstKc2dZV
30IUF+wZ45LR0qi5Xm5mKXRUJld0EkpJ/5VX5RpGbR5hQ0CuF4b8Ffq8zA4HcegY
7lwqXO9/MTIBqtBRIBgD70ymR8fGlWVpvYxYGtvubDRow4u+Qx4UUefVh6xHunPr
7nLXWLK87uTr8hZOflviKFk1m/vFiwIaO2xtg+NStaFTAYbcxRnwmZ/JlfdLhbUP
RGIk67PcNIpEo4HmP4gx/IrMz2mF8yxmG26J2doWF9ykkxaYrw/DvK63H1xkdWxj
qHbABTOAmcQKBEc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Or74NQzeP0haW2Mcotf
jSZXgSRtxS7bSz6mu+dksesTauGWevMlb3tleVIB82p0/J7CfHpq1VLD/COEUJ0I
78xUJ1lSQQsgYKAawfLsWCG175FYAu6jCJY7NSnc8+Rl9CcD8QcAO2ytwVC9Dglc
Grkn6jstu9U73RBDQUj9pXMSadWZ9unM5McRu3Xtjy614POJm2BDM2eQzA3doG9j
9ataVjtCcG0oyDTztRxXm2b0cums4vz1sRTHxlvrY6KRdGiMJqYLmmps5Sx5wxX3
wCTOskMwNTOq5rTsoWhULp5xz/8RAkATEOWTDFqbnwn+anYmgyX5+u6DuMxRJlKn
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392731380487347405939219856198689073560776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 00:17:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 00:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regioconsult.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27383348752162391949796491046507529510197768944745232181338852159501130929049816672313339913541314725905267506761335951107612951549342802392709646427189543685947494495011589957902556626621942867147158776279810098655769919019886485569536722371584799085728703963567437552644115930334887677886821245101348681490198992056490746692667231443743472445424373323466460801007549470886559655574887730163836746066562121319516588038398638318764937289384190674513551056970160868167668936039680340190980813643645069292251016269934249224639886610458654046250704740084124219755624634746732878262688540667188559012808691007842348607253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05012dd843a5ef45c51049be45a5091f6f132368
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioconsult.api.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioconsult.b01.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioconsult.cron.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioconsult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioconsult.f01.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regioconsult.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5aecfc0a0000040300473045022100a4fd83c35ddde49e0a7aa25b0eef990c47169d9bcf61ee2cbebf1d5477f3753a02200f46ad4b11987562640727b5b430f412147842a86d4753d4a3de28e581beb557007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f5aecfcc8000004030046304402204d0b67c8423d744d72ffe2e016c9523685111b2159fc39a17872a600a42c7e0d0220639cebf80cacb67e35c4e3a242028778eedf4a146c298e467997301ffb043e83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c89da087fff538c63db04c264aef7892b2099aa35d3bdaad196ee039bee335e7bca2b069c7b89a8b2a4ab26ce8045b2d29cd9d655df421417ec19e392d1d2a8b95e6e66297454265774124a49ff9557e51a466d1e614340ae1786fc15fabccc0e0771e818ee5c2a5cef7f313201aad051201803ef4ca647c7c6956569bd8c581adbee6c3468c38bbe431e1451e7d587ac47ba73ebee72d758b2bceee4ebf2164e7e5be22859359bfbc58b021a3b6c6d83e352b5a1530186dcc519f0999fc995f74b85b50f446224ebb3dc348a44a381e63f8831fc8acccf6985f32c661b6e89d9da1617dca4931698af0fc3bcaeb71f5c64756c63a876c005338099c40a0447