www.treffpunk.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:07:bd:7d:e2:9f:02:18:2f:cc:2e:05:a1:1b:bb:96:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.treffpunk.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:07:bd:7d:e2:9f:02:18:2f:cc:2e:05:a1:1b:bb:96:ab
Serial Number (int): 295035100613786381149592185204862170666667
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:e5:eb:fe:4a:ea:69:70:ac:3c:e9:f0:d7:dc:18:86:6c:64:e5:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:80:e2:9c:32:ab:b2:74:d8:9b:41:88:d6:21:3d:2f:cf:c6:b6:76
Fingerprint (sha256): 3b:96:17:b4:4a:a8:88:12:81:9f:91:c7:85:5f:a2:e1:4d:72:56:e1:73:a2:57:36:67:10:0c:21:7a:21:e6:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.treffpunk.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.treffpunk.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.treffpunk.me

Other certificates including the domain name treffpunk.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.treffpunk.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295035100613786381149592185204862170666667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 04:43:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 04:43:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.treffpunk.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716362464305153828958091664393062883190833486704098840833861889166710083947857402700283465944422788279137222917261244968365105017407758533316593804674311314291688927283391513301964201927321818195333915477883473403179088655540613997030837078145343699149658876556289160137384680081126351896345609312384696527524880537652026856599593327881710662319673104574437015461303265722973886916943157975093727990945880611449766452281022572037542843974781199593908805213259875436567469283881975681655286496906721059940474220452198855199574831927672878754811595397265509480623151840462102558046455312915972138486402685467767598293770077305972604851821861682267923348262555506287526398684464950859852421588189140764963017670751179357288884835127960217764545024382712828598207816343300139170057532835796541001786332684838066655180989408409765906748863047345837663497941743271028697735674204991653452321153745611989751257761020550676236945587232424718127135511831813655642816833349504862508143270377544125553122946889146632613728053669743878290575760866945017629533554127531171703280396117926645769913295171252227009933740383555362119422669358864849818477551404579885786137804342731265801449151737404304898304841911766385195590921902627459538674285971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42e5ebfe4aea6970ac3ce9f0d7dc18866c64e586
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treffpunk.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec5225b780000040300483046022100ab2d2ccef067bcc07c166e5ef491c82bd46ac37131ac72b22bbf796c8ae72625022100cdbd462b1b5da455112df233efa22002e8c902bef96b4003655f1d6461e01d51007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec5225d5f00000403004630440220430d774865bde5b5ed37a3cfba7d0dd9a46f9c002aa495782c90dda34c4c195a022009719215ff4f211ddf597f5451de2f827d7472d8f24890305c3b3342dde618b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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