kirche-owschlag.de

Issued by R3

About this certificate

This digital certificate with serial number 03:cd:02:92:57:f3:5e:9d:1c:26:2a:52:fd:aa:37:31:8c:80 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kirche-owschlag.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:02:92:57:f3:5e:9d:1c:26:2a:52:fd:aa:37:31:8c:80
Serial Number (int): 331098161329257401400311800523533921127552
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:25:d1:68:67:2d:08:02:5b:45:47:11:e0:f5:55:52:4f:1e:25:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:63:51:54:86:6f:0a:fd:bc:d1:e7:30:ae:73:7b:89:63:5f:4b:14
Fingerprint (sha256): 3d:65:dd:ca:47:c6:32:53:88:d0:03:65:90:25:57:01:4e:2e:94:77:c4:77:1b:25:74:eb:c8:f8:ae:95:fc:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kirche-owschlag.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kirche-owschlag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kirche-owschlag.de
www.kirche-owschlag.de

Other certificates including the domain name kirche-owschlag.de

(limited to 100 certificates)
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de
kirche-owschlag.de

Certificate

The complete raw certificate details for kirche-owschlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6++8g4sN+HT2UCTygMct
qREow7gHz9r8Owy3Ju5V4ITWw7KRIufSCiOkb0VYalSjJ1nhzPBEiyf0F/mvhPzN
TRXhRdz/iHoW3Eo43dkX4AMAw+I5vHINt9/+J9/aJjFe/FeXT3gCy3lwImCcTWuv
rE799IvItL8a6HMfobovHEoUPiqEJlRY5F9FIX7MyHplsB/aNG1RcLE0hMfPBmFf
lDRJrgFPcb7tQcoTHQYhXmptjvM4vyfmIm1WmQmWqKnOuZnbrW4RX1hWL8gK++3F
PGWN9hfm5YFXiupUzZDi08Tv9QNopBRhf0n79RF5ZtLMScqYqMeZoMJMF64ifouN
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331098161329257401400311800523533921127552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 20:28:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 20:28:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kirche-owschlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29784220083142208218293778927083651178841053155727827047629031793587004010369509575470073700092307287681056139019618398708900421523814634520307335245556651798856280721980070228919774745636825756077251727141719993955831704372122620494753156757887891926673009617387198027146141328178055661308266122050727401244884311998189638850623464316469973821341040777436305854203565583024826758121258704036145134126678776473670520912943702210795089547737087774129595818289643228908437971450480055213054739404769402214749987130078961380081800427938245446877443750014685359312009865575766607735851484226755248882486422995459136785871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5725d168672d08025b454711e0f555524f1e2536
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirche-owschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirche-owschlag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af24aa6a90000040300463044022030534e9feb517593f3a8ad52d249a15ba4c825d2351da30c88cf96fa54667b48022042cb0e6d7066944392dee8b01d8fda0b4b9879a40dbc0940c77b80b9e6bc9760007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018af24aa690000004030046304402204120485038510b747ad42cd89b4a86792a5a30497d2f4a4662a95170ec0d267802205a2f53021bbf78c9ed6c697558657a38b73ed58dcb7743cf2c547e86e7e450e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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