aktiver-emt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:94:d8:d5:06:e4:b6:49:6c:dc:7f:b7:86:45:a0:2f:40:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aktiver-emt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:d8:d5:06:e4:b6:49:6c:dc:7f:b7:86:45:a0:2f:40:49
Serial Number (int): 399099153377475182638524814234355151880265
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:1d:dd:70:87:f1:bf:dc:bc:85:92:9d:ea:21:6f:fc:3c:12:13:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:1f:d7:ea:dc:8c:d0:95:9f:27:bc:ec:35:25:b3:ea:66:5b:07:8b
Fingerprint (sha256): 3a:a4:1c:bc:75:98:dd:cc:0e:59:07:22:ed:3e:c1:28:03:aa:82:47:d9:fe:3f:0f:1f:bc:fb:cc:2f:8d:3d:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aktiver-emt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aktiver-emt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aktiver-emt.de
www.aktiver-emt.de

Other certificates including the domain name aktiver-emt.de

(limited to 100 certificates)
comet.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
bochum.aktiver-emt.de
bochum.aktiver-emt.de
www.aktiver-emt.de
bochum.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
bochum.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
bochum.aktiver-emt.de
multiplexer01.aktiver-emt.de
comet.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
bochum.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
comet.aktiver-emt.de
multiplexer01.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
bochum.aktiver-emt.de
ext-nagios-01.aktiver-emt.de
bochum.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
smartoptimo.aktiver-emt.de
aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
bochum.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
multiplexer01.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
comet.aktiver-emt.de
igrids.aktiver-emt.de
bochum.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
aktiver-emt.de
igrids.aktiver-emt.de
bochum.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
www.aktiver-emt.de
igrids.aktiver-emt.de
bochum.aktiver-emt.de
bochum.aktiver-emt.de

Certificate

The complete raw certificate details for aktiver-emt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399099153377475182638524814234355151880265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 22:58:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 22:58:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aktiver-emt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846387625526662648490714266596130351059206902492419633010678749619870362618082057778859460964273623720329794364545299603347616548959444037488368072161122958956157987726884743502430574487514098610204450410993216267628999069879238117517515664778279372851789076347495943371382188935037702131117202132019231671005568248063087454691425741577355039709493791779402730140237283465155057143622531964681118902508892445218163212907230909081517601350616726210623681521867036235325126596880716853902554011426900336818017298050300104209494406603593250440066971990478536772480558955310885367569560833367798370184363529225816247499328197548201103344652853014640331479159870224338929206333971094008218224337486767935243341338055233970674506987508154173005281322178681798737964191548498311855126174648629876025326738781884333281422006875797837230348532031265690943131140064477350181131295221840592694505836368129055306103034378844017277211762288477389422855691292738404389931341522699705957528794244738855388170039061466290055201073800639588541384712601781756739586824358207662862377542057889837374941333972404169071180854304548145925820214243173726683858469104366730453457859583020266249271408295340335048002284295390091360224964114385726277126216859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f21ddd7087f1bfdcbc85929dea216ffc3c121367
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktiver-emt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aktiver-emt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c321e3fa6000004030047304502201688e5285c488c4ab41debc5bb34ca44cb7e3a09fe6b4e8f3f469536b36144ab0221008223bf5b36da351d9bba41b90af49f2c7ff9640567c399325731fd7c53b765a6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c321e4009000004030046304402207a57e5d34bf4431dcf6357d15b72ddc4d5beeb8bfa0364db63417cec4c0406ba02200d1f6896f5f6966d3999e9c40dc92ad3eb1926c8c5f15b162a015d461497c613
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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