12bis3.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:c0:cd:b8:f0:a0:5d:11:eb:85:08:ae:11:a1:83:e2:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=12bis3.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:c0:cd:b8:f0:a0:5d:11:eb:85:08:ae:11:a1:83:e2:7c
Serial Number (int): 331351022961147584628753112307989102191228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:ba:79:bf:1c:62:77:34:c6:b3:0f:99:6f:84:9d:9d:79:dc:5a:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:34:28:ff:29:5d:94:2d:e7:1d:ae:aa:d9:58:6e:77:e0:29:be:bd
Fingerprint (sha256): 3b:96:dd:1c:15:52:77:63:2e:69:52:eb:2e:0f:65:9a:6c:98:ac:de:b8:f1:67:b5:c0:88:42:ab:fc:ff:01:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 12bis3.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 12bis3.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12bis3.de
www.12bis3.de

Other certificates including the domain name 12bis3.de

(limited to 100 certificates)
www.tekom.de
tekom.56.stage.12bis3.de
www.tekom.de
12bis3.de
webmail.12bis3.de
www.tekom.de
12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
live.tekom.12bis3.de
www.kaercher-municipal.com
tekom.56.stage.12bis3.de
12bis3.de
www.kaercher-municipal.com
tekomconferences.72.stage.12bis3.de
12bis3.de
www.tekom.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
webmail.12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
12bis3.de
www.tekom.de
apps.12bis3.de
webmail.12bis3.de
www.tekom.de
www.tekom.de
www.tekom.de
hoeveler.72.stage.12bis3.de
12bis3.de
aussicht.stage.12bis3.de
relaunch.maxholder.12bis3.de
hoeveler.72.stage.12bis3.de
hoeveler.72.stage.12bis3.de
*.12bis3.de
git.12bis3.de
12bis3.de
git.12bis3.de
git.12bis3.de
www.tekom.de
*.12bis3.de
webmail.12bis3.de
git.12bis3.de
webmail.12bis3.de
mail.12bis3.de
webmail.12bis3.de
relaunch.maxholder.12bis3.de
*.12bis3.de
webmail.12bis3.de
webmail.12bis3.de
git.12bis3.de
*.12bis3.de
relaunch.maxholder.12bis3.de
www.tekom.de
www.tekom.de
*.12bis3.de
tekom.56.stage.12bis3.de
www.tekom.de
www.tekom.de
git.12bis3.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
*.12bis3.de
www.kaercher-municipal.com
12bis3.de
relaunch.maxholder.12bis3.de
12bis3.de
www.kaercher-municipal.com
git.12bis3.de
12bis3.de
cloud.12bis3.de
git.12bis3.de
www.tekom.de

Certificate

The complete raw certificate details for 12bis3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331351022961147584628753112307989102191228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 15:50:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 15:50:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12bis3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809488382198187185290247968577590355782943003311053364843548896248174812660406705193893486333045802901526257485425677056923276706662046882818357020683692486349729649308048672458155728623929244432965192682493704516905435070382377042884938355419258241499776470408928281073089677344147097369286129996654727334556007928022716234160978867167731126867105863350845983320814881548980116489334575886806782004109759989416999868378491353563590953577961697107345637050566525709374251686898677716702483270309062886148184917033112552851874961166239980046709622806385618045663450790584161803003519439311556173002826346366861091386532183636143029075541222321423611584560330225777236155865939447958562201043268696742993297255370441002672091500150508933377648919988769797886978378590845505477677670492086100787826395195026632031049865320226665721346410309386684445268386369197821479167060354669746062183879645779325246160999038381177848633308077526627791086261362700273635655943021452517249462718272235433348475098167279655757883984965636787620436862311335941814135677449299263373944400897621531541999941816170918227426093865635476215380767802017685611931657055605278701953178279662071430037925540748790770983841989902054872234235189379655213589419369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45ba79bf1c627734c6b30f996f849d9d79dc5adc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis3.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de4ed4d26000004030046304402205593a12be90f77c8df1390be760ab553d78702b46f42c032e176e63f4fa182bc02204c77ffb95cfe8f9cb8299bdcf59ecf375c1321fc5844f7eb31aa0cfaa93f8074007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de4ed4d180000040300473045022100adbcfbca4450f3dac60dabe4656102645058518cab32a946a78a4348cce6381302206273605df6d621deb3fec50e1b41e4542e375d3be850299b9825a779b7042c72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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