web2.ro72.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:4e:54:a0:54:1d:7b:92:26:33:56:5a:8c:ea:6e:13:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web2.ro72.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:4e:54:a0:54:1d:7b:92:26:33:56:5a:8c:ea:6e:13:b1
Serial Number (int): 302955425748092399534806979939941005267889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:84:13:79:55:3b:84:4f:3e:25:0a:32:a9:41:a2:4a:21:59:c3:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:05:20:51:15:41:e8:c0:64:f4:79:da:04:ed:55:28:a6:ea:2f:98
Fingerprint (sha256): 3f:ef:14:eb:bb:5e:7b:07:db:21:bd:b9:ab:cf:45:d8:77:1f:f2:15:5d:47:b1:c3:7b:24:60:ed:1c:83:92:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web2.ro72.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web2.ro72.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web2.ro72.de

Other certificates including the domain name ro72.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for web2.ro72.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302955425748092399534806979939941005267889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 09:00:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 09:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web2.ro72.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641259707206017042027092764682621552892682910605518612393236205652277300074912411823091754723754711016998762016113386483603012035547274240405781086030631236933734376091993453814158581300344006163203226071793055381090788519652907448666588330195169142196769049157586193848307511818467209423585477104759979720846315917625595169505478263517861455989850816573045031079885692050705365494271073887489513665634529497952549043747864961828885498767559541665348606835283715155184579802654766719577098687522644617227334332419152455853087471651678779622141865259314002604860302226401440697541771035148177358552200898180539286175908224222894906946068869425053772271914535150003155164461250742700095237445173404397723750969565938790027000306155178182522562497801865189671534149210669089186405132447797573839339866557522513761780239155934619916304199668364600999251053238714973710948405109428105356479816898333451652285475498627679671098609454630673312215533198558142406947975131315123595344708332816239178652055488604985158423875314519006494345004002581741772575220823502818650629508359084119902193926914595996415900787473489874226367730796193490016467409214478980636758459243280959213200866615717558400193994494466128339833635325053171171476915801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e841379553b844f3e250a32a941a24a2159c3a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.ro72.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ee4f3df01000004030047304502200147755fa27f9172f6d160c360a3cc8bd1f118cb9c00aa0bce4f966a58e4d8ad022100b58e14695e8b7a676623627ef20a7e4a90b6a4cd646b18d9739eecc2b80c97a400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee4f3df050000040300473045022100a823e5a137e5ff6052b3cbc56ec3b638fdfb7edbc142a8c2d25de0cea49b881d02203867fd03a020b9113a69c96a6778aae9f5f36e603eccfe28b7da470f2ae7a1f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00792f367784d150ca81b22d9003ce81f463e3b787e10429a00c052262535ce9ce1fa30af1662083e937dec2b3d69e3b4d18a3a5e84fad2be5772cded156d000970c87715299d4d27df2f745f4209259892a6b75c69fee80aa06ac65e5ede4e977838d0c8d857d1b987229f0e9a8404513de972e2d5ddc80f60020beac3377266888f78e8889a65970b274bcc287f9ea935dc0f63e837d22be15d07bbafdb8c0442663ed9cff10859363386699a1cdf181a53272c1374a7e58d398881221979c35ce465805064b40acb310ec5e8b5583b0926d1950099177090d20389a3241867b7317054e59a3cd54d16795c880370e9081e85dc968f2658f8dff3adf0ee5e927