digum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:32:21:94:75:b0:ea:3e:3e:04:43:c8:81:dc:7c:bb:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:32:21:94:75:b0:ea:3e:3e:04:43:c8:81:dc:7c:bb:b6
Serial Number (int): 315168107525495663508959042519318182804406
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:30:7b:14:a9:4f:41:d2:4e:ba:70:bb:b5:22:49:79:02:d9:55:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:0e:03:6f:cd:a5:d6:a1:b0:0a:d9:29:fd:82:8b:ac:d9:09:8b:03
Fingerprint (sha256): 40:3f:ea:df:b1:19:b7:10:c7:18:08:10:8d:66:9b:ee:ec:f6:f4:bb:91:3c:99:b9:5e:0b:73:c2:d9:77:aa:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digum.de

Other certificates including the domain name digum.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for digum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgISA54yIZR1sOo+PgRDyIHcfLu2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgwNTMzMDdaFw0y
MDAxMDYwNTMzMDdaMBMxETAPBgNVBAMTCGRpZ3VtLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA8ntFcZBtZ5mE297Qw5q3dG5qMK02MXy1UFFyPWpT
c81PyQTKEpQOugRB/oPitkDACWha8acmKCL9FZt8PhcVLFwFxx1BgSYbKi+x6zsV
3k5ra8elWthM83XoK8IMfqxRFHTDa+ahRKN+roBGLEY6+0K3QM4ZVlVmHVjV94CY
LuvF60bXPTVUqXSqQMqKHDTPQi9EEzeJae+4DSKG9oT+3VVmwb1Ir/blJXQ2Rt1f
v/tAK2MWrqDfOLowjO0+PjVPmsmgBoz3ilh+ehtS21poYCLnlfpBrgSLk5+UzuTO
sad9myla893byyb+zTdPwNcEqO6Q8HDSt4ZBUa0/rGgLu4WRoAnE1UjafOH8tWRg
myRHHhMNlAG1D+1oJY0RvuG8nB+flBFHYW+HX2fudlZl0qDz0T6UGYUYKhk6/3PS
BFJkSdAxsTb0xNoR8Mk0nUD7G+iYArsuFH2ZwYNgrSwaWmA+4qKsD7cdU/rbpUer
sroVIsWTRvKGQck8PgKZVUZ69GXoFFrDDyQw1wTPOq/MHtLF8RrX0aLs+iVWguY6
ISAo+wwqhZ2Pxma8eMtZqzbQl3tcOXiEEY3cta3qG+UKyjmF81QIoF8V9hTmJHEg
MRqhd5H1emuM/Tpf+uVVGu5/7lfNINqDo7rYyY0n0h0F7rAoz1+9WJ7Zv0BShWwk
HnkCAwEAAaOCAl0wggJZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULzB7FKlPQdJO
unC7tSJJeQLZVd8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghkaWd1bS5kZTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFny
ANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbaoSRwwAAAQDAEcwRQIhAM/e
hU2pyH6mOeYyIWj4ao8Hu7z2fEJQOgXohxnmQkP6AiB6fD82Ap5AV/cIeLjJeXcP
q7TZWITwq06YNzdfxPpf7QB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF
R/R4AAABbaoSRwYAAAQDAEcwRQIhAP5x45jakQOue1aig5TcqAETPuE1Dk8ob2jN
Gb+rpndoAiAMQlIDyE/oFhtskqBbmfX2z5gUuyPbFjAbrMMPGw4uMDANBgkqhkiG
9w0BAQsFAAOCAQEAbAVUUN7b8ZiIL2dzVg57fxwxO13qCEnPJQQGt1jujpmVLfm3
TnrqsgbQZTFG720ByhNA30u57rpSL9X0EtAH8WCNCcxvvxFQUVxq/CBF+wBSEkiE
aGYHPavoJixFtKQ9qeBBBLabVegnqXsCNdXAYWVQXLnTiQ9eLQPQtBXU6lOxhwTg
ZqZzEwSstXG5Xzk2bbpTHg6paUza1NTZ8zZ2/9bg2AmIuajC/cgswkdJR+lsWNtu
RGGC7ftISrjTSjmSCY/g8dKC+sJT+DCXCsIEYfdKWv1a5otktSHZ/KQdmHOIlSP8
HAy0uUIRELqxKDBaxa6q5+viZiHVOZyeFl070g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315168107525495663508959042519318182804406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 05:33:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:33:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989238328841143642960477251503184985277863515419613766157914069660186769176452946753253185518529957595378085366955200281041907505182207396514087345845074699027005117151274512914483131122317914226402050822198506549736685711748757929270566611924573413536694294558597162895065631302285537109636599911096505828908904934984611793421392950796806328300591888211261170493896112289696984905953081115603366395743666889673126856149756827342716423502974411122608030236675398572555679697589512112316711890004339494499359190068935259417949690472647988254430510449661377383877752760214568815204192735198619940775530552976181627106750833887858993369440727121174751026493328674410953076317143427397593704799222448621571916733108575118577547344111698454234533378641727839967599444461374041885913236361842312649427865296290943168271218896260906844552673215251565017231789047657556308942567513989145811812547513744610142785349253054561258271443267741050269157600608593862835097315498665497350714242565861545574802065038809010097977800098173923198845715412008594430184177280138179513084191427846839545126550506428798055281509171482631955256253999096253863507024809563739198730820273250394303735907480258430973937139349277642390943788963797225032621760121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f307b14a94f41d24eba70bbb522497902d955df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daa12470c0000040300473045022100cfde854da9c87ea639e6322168f86a8f07bbbcf67c42503a05e88719e64243fa02207a7c3f36029e4057f70878b8c979770fabb4d95884f0ab4e9837375fc4fa5fed007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016daa1247060000040300473045022100fe71e398da9103ae7b56a28394dca801133ee1350e4f286f68cd19bfaba6776802200c425203c84fe8161b6c92a05b99f5f6cf9814bb23db16301bacc30f1b0e2e30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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