kellnerweg.de

Issued by R3

About this certificate

This digital certificate with serial number 03:e4:ef:cd:ad:d2:8c:a5:a7:56:12:37:d6:d3:fe:03:d2:40 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kellnerweg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:ef:cd:ad:d2:8c:a5:a7:56:12:37:d6:d3:fe:03:d2:40
Serial Number (int): 339239990890641607866901621985741791023680
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:32:19:0c:68:43:b8:ad:63:9d:e7:45:f6:f9:f2:c1:8b:40:00:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:5f:56:fd:93:c3:1f:da:9e:d8:5a:0b:77:a6:2e:b1:71:13:ae:1f
Fingerprint (sha256): 3c:6a:4f:88:a8:21:f9:84:ae:1e:ba:b9:25:82:b8:71:31:42:dc:2a:cc:af:d2:7f:aa:d4:bb:fc:83:32:de:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kellnerweg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kellnerweg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kellnerweg.de
www.kellnerweg.de

Other certificates including the domain name kellnerweg.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kellnerweg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwbf8Hu4lpll2oITACe8E
iTfAUV34t5PfwwauaDI8UUyxcEA7E7mCBVdZbF67LcoPlDf2YPK3GYlEhHpzRuWV
lypNX/Ev/Fd1TjMT+XASbsp0/QFrGMuwpHTDGLSsIwC2XZTxePLdUSCOAmcmc82j
kJk786HjOz+uX25SJoAu5guQ+GYhK23asnrslJNUrCk4ghZuSyr+AGUKrZWCCu0f
Rbmmpa84qJcrHB6NuSeCWzD3jveoMBDEODT6SIUtmaOrXoF3KO4VNUoGHxn8wpSc
JAZWve6fJjdTEl7tsm4gYkIDR2g/yHWKAkvtRMQBH/w/acVFsEzCtEQHZ8jC7IVE
iLXOdZDF9HAbIPw5xzc7a5r7dqUcT9H0T6ZOWE9xiEENhKnbAuhR+rezbr2Qx604
BVU5QNiitwVcGR4AeUZi52VgQR9kAzmRWHuO5elEVQXiWurJSaIVitqKRvaAekIU
a8//LQ4CL4woIZbZbYFVtVTBZ3heH2q8uE/sTbKhAiVNL47CIDFnCrFuz6Ha599M
XC5MWIT9fSlJpnheTb9e/pUNMIXaQ1XZ3/9680u+WKiS8SVmWg+f3i+EVfOyADon
kGTTwktLP/emmzVCxC0eItEzR9yXlJ7yKf3C2//9RrDoscb37enTdstFBb/6oEnj
1uR+JEpOASs2C8DMgFA2KYUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339239990890641607866901621985741791023680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:12:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:12:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kellnerweg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790303307821240742889260080753812461256845319060701945753639178071178969287772711727211394706898927461004864900483353022435633545280469475619600698208991979971346463237087366158760321737758562959125427554218358246999811582309774705817739659129464116684195822504325007069869081794225279314183493376504541960079377586053044636452864837447397014777341790865622227858016170200838361375443218141842873319973476679462916791572526163413450366155688534973649917703425716998224039209414353793881724760424582225746952198307279459265507318305037295371607111457809910090316557510119514941496471540282281608202942383339189003030659152741899623602373563070353617359943477445409028108492533390244496592204606136685043985833611899895742413899384144428326711480779807438998575984469050665337279487346496765553542548345670268993033520612657133965318371263794464533876283269428664721314128591157501032024700717940344007476218126748220604938666444623590465684491081479947223150406731237597812196181574069557995362163839422436866929673783122616716803654119235137634993581529666064399624906100202929066692361902197639217296275780510176373667154724850358141743145218945330317470725912090289733533426630108486974296238972727840857477608667029273435388127621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9132190c6843b8ad639de745f6f9f2c18b400038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellnerweg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellnerweg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c84c806390000040300473045022011b310b4e34b6ce0976463002890bcbe8fe2eb205abca3f7b54ab44c42d6ce61022100a87db764113957f820941c0822aa576f4f00b79451610c58a91579036d3a62e60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c84c806300000040300473045022000b5e894dbbcbbf8b6f6c456a8d01c00502ba0c319395fa20e7a54685f4d020e022100dc73d48d96e23932036d5db32473128866f5a63c6a26284d47f46a0000db54d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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