dachdecker-schleiz.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9f:b6:42:23:db:b0:2b:94:af:f6:3b:98:9a:ad:b6:2c:71 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dachdecker-schleiz.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9f:b6:42:23:db:b0:2b:94:af:f6:3b:98:9a:ad:b6:2c:71Serial Number (int): 315684017049825299384167554539821603368049
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9f:57:e2:f6:a2:ef:25:2a:5d:45:27:e0:ef:5c:cd:88:e7:fe:16:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7d:81:d2:ec:37:7b:36:bf:61:79:dc:03:d8:a1:b4:33:e0:c3:02:3d
Fingerprint (sha256): 3c:cc:55:7c:49:f3:7c:fb:98:c7:e5:e5:c6:74:e9:bf:59:d5:3d:65:dd:f8:d7:d6:f1:c4:df:89:48:c1:d0:9d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dachdecker-schleiz.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dachdecker-schleiz.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dachdecker-schleiz.de
www.dachdecker-schleiz.de
www.dachdecker-schleiz.de
Other certificates including the domain name dachdecker-schleiz.de
(limited to 100 certificates)
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
dachdecker-schleiz.de
Certificate
The complete raw certificate details for dachdecker-schleiz.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISA5+2QiPbsCuUr/Y7mJqttixxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjcwNTE4MDRaFw0x OTAyMjUwNTE4MDRaMCAxHjAcBgNVBAMTFWRhY2hkZWNrZXItc2NobGVpei5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKX3+LpZEQ3/WkATPFm2G1Fk RS8hzCKm3ywwJzet+eXUA/lf2caZLzxssTNkMS3wwXt+R+dnn2aUlXDsCjbPdsND KL3kHsuEW/JF2N+GL3tjIcEkuafaokvpjKSP7UuHBONm19W2k6BGlq5Rsa8OTd4G gb+SE2/8jt3+R2IrSFK5rI/8uGdEfBW9RQkKuw49NGivUm1Rqrw6TmbtEo8AhQ06 ZCS67dgULxuxNSsW63Er1hD4jZY8AJ0Ok4r2M1CRVOthf2kIw6+Q08DRcYg+QyM3 VOfVciexNTgCgHpSpUdyNkjpxGzitlb3RLfZg61fk7EUBDvm+E7yFFo6Q4g0vYkC AwEAAaOCAoQwggKAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUn1fi9qLvJSpdRSfg 71zNiOf+FjkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA7BgNVHREENDAyghVkYWNoZGVja2VyLXNjaGxlaXouZGWCGXd3 dy5kYWNoZGVja2VyLXNjaGxlaXouZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jw wr/9XkIgCMY3NXnmEHvMVgAAAWdT0UwKAAAEAwBGMEQCIAZFmZK73267wN+E61TU lzpyBIWCnVd/l+qqUWGXbrClAiB8cIFF+DCQLWCPx8mn6vD778FQHw+K7ZpDkfIl nBqk9QB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ1PRTBAA AAQDAEcwRQIhAKC0QU3u4+lNwWnKv8YuIlHa95Tf2tMx5QyjIRhVvH3wAiBtUq19 sXHF3nuNJgAGMxiUMwQJDy0bAi+9gFIlfvXnWTANBgkqhkiG9w0BAQsFAAOCAQEA inglL6g89tF2B0dM1YIpkAK/TeQEtk3MQz1M4kliy203b/QOLe0mZiAKJs85NXKF JNXcYF/54TNhWU40NC8w0C4rw9mnK8QQBktStB0wQ8sye7YRWkx+UviwGfEhxqca /zmSecy4QxSc5YggBOmxDBONo8vgvPusNFh8ra7W5B1y4wGc+Vdeu98txIREWlLd AUDJex5Dq4z7OddhGMXyx43B3rZlCsPuMqFm2ZJICd+1F49Svhj5ncYq3iT5pQPJ ZtrbfZtQTiC69hvlAZ0tuJDqvZH0763jxS9Q0UVvwcW/uhFUTl/zPIt+NI7b3C7m +HSRrpE5cTuV8gJj5guNBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApff4ulkRDf9aQBM8WbYb UWRFLyHMIqbfLDAnN6355dQD+V/ZxpkvPGyxM2QxLfDBe35H52efZpSVcOwKNs92 w0MoveQey4Rb8kXY34Yve2MhwSS5p9qiS+mMpI/tS4cE42bX1baToEaWrlGxrw5N 3gaBv5ITb/yO3f5HYitIUrmsj/y4Z0R8Fb1FCQq7Dj00aK9SbVGqvDpOZu0SjwCF DTpkJLrt2BQvG7E1KxbrcSvWEPiNljwAnQ6TivYzUJFU62F/aQjDr5DTwNFxiD5D IzdU59VyJ7E1OAKAelKlR3I2SOnEbOK2VvdEt9mDrV+TsRQEO+b4TvIUWjpDiDS9 iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315684017049825299384167554539821603368049 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 05:18:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 05:18:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dachdecker-schleiz.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20951599669540478729713706152606281555549387292249299534916730461108785750278820027179223371487454762039845066893225229633830534264625736433755917766867382597303362559952536071059402522775422234708403347030675347007235820297886266706823717439055615887605353946025772131037703290746912733446004577849001154901689082701800984939543154030104294141619535171505572384768669009250061211087217633454910718020231721244682455130505047569601626671323564004201341464733639598290697220023842093275937437928288714893509020412127841459769299588055592857787105771850088303871960346268249227094139780305066971199760872752570776731017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f57e2f6a2ef252a5d4527e0ef5ccd88e7fe1639 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachdecker-schleiz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dachdecker-schleiz.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016753d14c0a0000040300463044022006459992bbdf6ebbc0df84eb54d4973a720485829d577f97eaaa5161976eb0a502207c708145f830902d608fc7c9a7eaf0fbefc1501f0f8aed9a4391f2259c1aa4f500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016753d14c100000040300473045022100a0b4414deee3e94dc169cabfc62e2251daf794dfdad331e50ca3211855bc7df002206d52ad7db171c5de7b8d2600063318943304090f2d1b022fbd8052257ef5e759 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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