www.it-strategien.org.snkb.de

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:32:6d:37:6b:45:49:f7:59:19:cf:eb:f6:1a:eb:93:26 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.it-strategien.org.snkb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4e:32:6d:37:6b:45:49:f7:59:19:cf:eb:f6:1a:eb:93:26
Serial Number (int): 287945910899292151655070421637645487280934
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:f5:63:7a:9d:e3:53:7e:a8:e5:fb:05:3c:9c:27:2f:76:e6:83:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:16:d8:11:5a:d0:7e:a9:43:83:70:63:b3:34:90:ec:d8:b2:ea:45
Fingerprint (sha256): 42:15:1e:4b:fc:e7:de:4e:a2:c0:c9:7b:02:e3:6f:a3:06:6f:0c:84:b4:ac:27:04:b8:59:48:fb:eb:e0:e4:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.it-strategien.org.snkb.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.it-strategien.org.snkb.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.it-strategien.eu
*.it-strategien.org
it-strategien.eu
it-strategien.eu.snkb.de
it-strategien.org
it-strategien.org.snkb.de
www.it-strategien.eu.snkb.de
www.it-strategien.org.snkb.de

Other certificates including the domain name snkb.de

(limited to 100 certificates)
assistenza.rrdl.it
assistenza.rrdl.it
ticket.snkb.de
support.hypeboost.com
support.truviewgps.com
nk3d.de
assistenza.rrdl.it
assistenza.rrdl.it
www.it-strategien.org.snkb.de
kundendienst.snkb.de
assistenza.rrdl.it
assistenza.rrdl.it
meet.verdom.ro
www.namikkara.de.snkb.de
snkb.org.snkb.de
united-technology.de
*.namikkara.de
kundendienst.snkb.de
assistenza.rrdl.it
assistenza.rrdl.it
*.snkb.org
support.weekome.fr
helpdesk.tmradio.online
support.hypeboost.com
assistenza.rrdl.it
assistenza.rrdl.it
www.united-technology.de.snkb.de
assistenza.rrdl.it
support.hypeboost.com
namikkara.de
helpdesk.tmradio.online
support.hypeboost.com
companyhub.io
namikkara.de
deild2.svar.cloud
nk3d.de
assistenza.rrdl.it
*.snkb.de
helpdesk.tmradio.online
deild2.svar.cloud
helpdesk.tmradio.online

Certificate

The complete raw certificate details for www.it-strategien.org.snkb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjb7KZO+IgzdMN49M6YZ
j9hrwNVydN3Fh2ztDn9Mr6NjfJqD2HsHsKxTJMT0tSuNq9YzF5ixzaUamAO8UP4V
PiwpXy3P0xKGKeXDExlDjdfujgazt9j9whhOtlYMWZQGuPlBTVmqIJBM7WT9XCvG
9U3qANuMO0pmkn6b8LgB5soRP/0+f58eWl3i74I557ZmwgH24OK8Zjd5ReAke9jG
iGeUdVq2xx/WPOkZ5oxs15Dwxxvi8xXNOjcRQtd+1G9ii5BoRjl++fG6TyqxrmBJ
MpUHhvneSdJgOSACzHOVWsyx4gBWnWeOqdtLw0jWPshTcB8lpTq7AlObMA2bbITO
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287945910899292151655070421637645487280934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 20:14:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 20:14:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.it-strategien.org.snkb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25527249795600495425511828152931798724029925817463107057602522932150704189204343022587284689128728607756097612373739721786066598654656999402576410391581385414223281978525850399798630297669670959687536160457103199637289473348996517065548471638075211172790002894907508731068780972874643055759767978595375896878442647034795934843492945474553516267177210194902962927759664782278399088639082625478929706483295678385096438951383011353325919708358079112499196309577572252854012649349607564165518654560623434474334574655789169645048243145169254244465309021732797220822086576227530901551474506368377462167929130227714291453637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74f5637a9de3537ea8e5fb053c9c272f76e6830a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-strategien.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-strategien.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-strategien.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-strategien.eu.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-strategien.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-strategien.org.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it-strategien.eu.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it-strategien.org.snkb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ef30fba7a000004030047304502205fae18dfdc5a514f8adf97517b3c18896a898f739c59e4db5608ecb28fe6445c022100fbe3a48d86bb46033899fca115c62d38f0adc919627833ca373204465d29fc0d007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef30fbb490000040300473045022016025effc894911b2ef3ce738d079c00197d9503a04651e2eba32351ff58571d022100d6ba8c94b4e98eb12e5667f8388d6a8e99647f2a6962754adb75354787b4c498
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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