karl-ahlborn.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:ab:53:da:20:d2:95:f7:99:4b:d0:44:33:26:bb:5d:f3 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=karl-ahlborn.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:ab:53:da:20:d2:95:f7:99:4b:d0:44:33:26:bb:5d:f3
Serial Number (int): 322134852479292033389094649990043827658227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:ff:d7:77:60:6f:6c:4d:27:80:fe:bb:91:24:eb:d9:7d:23:02:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:df:fb:60:fe:b2:85:c2:55:d3:02:73:79:ec:93:06:20:f9:6c:bb
Fingerprint (sha256): 3f:0d:99:20:f6:5b:73:5b:8d:bf:9b:ed:a1:f5:11:8d:b6:6a:80:46:af:eb:05:d2:37:75:bd:47:b3:dc:d8:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate karl-ahlborn.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karl-ahlborn.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karl-ahlborn.de
karl-ahlborn.de.srv02.24933.serviceprovider.de
www.karl-ahlborn.de
www.karl-ahlborn.de.srv02.24933.serviceprovider.de

Other certificates including the domain name karl-ahlborn.de

(limited to 100 certificates)
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de
karl-ahlborn.de

Certificate

The complete raw certificate details for karl-ahlborn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8TCI8WUCt4i9wo5Rzqu
2jXfZK/yEJiJVsl348kK/DFlIdkhDHuscQrq4IuYEZ4eXjGPoMVpEX8Tm4++xM3B
SxR5rNf4JBXBOkNZphpa5tB6ho0NtdyXPXQE/Ht3T3v9M+xiNF0F4yC43WFjRmm2
sz4bvVV4z1OAj8Qhn4HEmYNVwWL8OlS9csFIg1AgtgCZn106JbLfmEM1Ph6BkNvE
f0kpZKZeEh5134wRvDOO0Sq/e/agqWvReeZdysQIlB7ZM19bm6tH6BNTYjUpi0ft
i9kFPwtZ/roCDnJFxLd8H+4Ju5b5IbNBrihYERZt7T5VCcrEE4s0KoM4qc2B1zgE
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322134852479292033389094649990043827658227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 06:57:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 06:57:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karl-ahlborn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24208541411189126195054462252364514655694753265856780408531282170170466961789207913140145943276137502293577672762270235973754040365673129362247324291366841815360286415309641048893547443598790660173406960306183189127145031611843710214458102765974922245947767025239373799919079024057641565927679367660247733375253218151865658265004385768038494251259709212844727411725413761023794239306566190930735652589235630711625322693724703902511129718162537268393194134655708539294461082373764958626702550425505115669448961462291206448709919530413611809369116218807645730416457538761446000638498251897742783976012293748434664948989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12ffd777606f6c4d2780febb9124ebd97d2302d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karl-ahlborn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karl-ahlborn.de.srv02.24933.serviceprovider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karl-ahlborn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karl-ahlborn.de.srv02.24933.serviceprovider.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166ddba8101000004030047304502201004e3b01b84732ced5822dbadbb5f7fa4c2268962101bef5d954df49052a303022100d1af179776b4e6152f76e880061e913534b6610bcbbe269fcc77e2c5cecf5735007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166ddba811f0000040300483046022100f33e85757dab93507fcc64989f3c5d9a1ac8ed7b071093ec58def826d5803b1f022100bdc8e4625df416f137eda2d149bc92bdc15635076e89c393130e2ec959621539
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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