lebenmitkulturgut.de

Issued by R3

About this certificate

This digital certificate with serial number 04:2a:a2:9e:04:db:a9:73:00:11:2e:b3:27:ab:60:f3:59:63 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lebenmitkulturgut.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2a:a2:9e:04:db:a9:73:00:11:2e:b3:27:ab:60:f3:59:63
Serial Number (int): 362957158554474254924809650438411713206627
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:ee:df:ee:d2:08:c5:a0:73:59:bf:e2:9b:f6:3b:20:ea:cb:0a:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:7c:4a:8a:aa:ab:29:b1:53:a9:c6:b6:32:1b:f1:db:6b:b2:e2:af
Fingerprint (sha256): 39:1d:74:98:68:5b:5f:9c:3f:be:d2:d4:22:dc:41:98:05:aa:81:dc:fa:2a:85:49:39:77:43:f5:c8:24:e3:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lebenmitkulturgut.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lebenmitkulturgut.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lebenmitkulturgut.de
www.lebenmitkulturgut.de

Other certificates including the domain name lebenmitkulturgut.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for lebenmitkulturgut.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyWa+ALEGzBTRtxTNbLQI
mkUN7UPHnGJnv5BkjdQK4OfTJ+NHN4HxLA/RRjINR5kPpWw7vLv3z9yOfCnHLxy3
Yt97lbvtLLDUP+aYxPSW7ZjvLOqc89UCn3PrAU88FLX7pLx8rZLc89vyiot56lms
JHU5dcAXXYjXUeWF/62PiHM26+8+RCQ8C154NUS+tWGYiBBE2MmyFGnK4I4t7mVh
pO4Bx2wVbiYAdPMvj4kJt/333bIjxQ46PonCMoX/QA6Qc6gprCfy3xsATJzwlg62
/pnfldrnGXEQMIQcDlL/WLkavUkY6xAWpRa8kvEkppxlTMk+d7ekgNQcWUxXoZ+a
Ry6wFY1gnor40oJndytYdTrMmHe4ljxZdKs9iK8zEtXyC1u3uCxWHytDNqCigdfJ
Tvbuuuks4MMloH1x1SGsEodxPaLhbwvgh72WRKFU0ht6LcBfTW9c6RZkcJtPFFLD
UoEN6gITH1J++twYulI0jY0qbXBkOaXzurWMICqX7+oQ0JWet51DymjFXu4IJd9z
sc/sXiIcCERMH0vDeiZOuDo4e1InXE8eElNZIGh85/6h1DWfbnF5FMNZbUv6wvBC
MV09JC+JLXKi+w6SpaQDW4igLHu76t6rR7R3D6nYWSJetn4VHSSc77BeidTCO5Ep
u80wABOfObqKq80VCNOBfKcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362957158554474254924809650438411713206627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 17:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 17:10:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lebenmitkulturgut.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821645768604922781597342212869989865874114043452728008744929450088670847719073731060290595063099033277855194896572781274833238274171427937370608922798115508485758186396996906883386785200157968741610988426046924318788880945132390292353076253840023082497978649164827236822678788656201092831339121157843532170675431505707517848908516598796946721166733517126299056290103767427223723621306448404711213167312582852111727402938131928126180294093363082208558380931410145603432225498520136063750877244117368748841685478539722682067664108731143958123770577827983546389226045841766656066326151542485458365363771019714697857341397819883273015149041666617268352087306407868849225622000312992404491788569568893608251291969165755202778773965175618078513162238166193577261740791486730476417108124054813580086569755259875332213919534027457762629150905965257878068770487470885330111217536068906899184505070011659231933181567121375898444209640630451596927213863816058699070431645813712282591596893171957234615070530675328474254745972119092806430696101732738844668242073324989798722845202767626847371073997301863763519209203391991257537965809826089708023026609364112485643818380490811036748961768368914932587166378063172932153044127230592209880543755431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5feedfeed208c5a07359bfe29bf63b20eacb0abb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lebenmitkulturgut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lebenmitkulturgut.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189033325a80000040300483046022100b8947a3017f13525dca9e3c56aaf01b83308c7048de3681b5e21b473716be64d022100942ccf7297010d76c83846cd8fbcb9c4668c0fb8c604bff1480252b85db2d63e007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189033325ca000004030046304402206923087db861751ab491153dd31a71d453a2274f31bd7c1ec382eb1374bf36cd02200259a2ea09e662ee02b69aad52792f449f818bb783e6cb773cfc4bd7c7844dbc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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