pielmeier24.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:de:4b:71:a5:ad:7d:e9:b0:36:14:6f:74:9b:d7:79:aa:ec was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pielmeier24.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:de:4b:71:a5:ad:7d:e9:b0:36:14:6f:74:9b:d7:79:aa:ecSerial Number (int): 336979825441300986810301757219078357494508
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ef:30:0b:b3:23:9f:a7:4b:e8:e3:b7:1c:07:e3:f1:4b:23:23:27:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 52:f4:f2:b4:64:28:80:a2:bd:c4:62:b5:63:e9:bb:21:91:96:aa:db
Fingerprint (sha256): 42:c1:a3:47:61:f3:7b:ec:00:63:37:69:94:1d:05:88:0f:b1:3f:67:dc:09:29:9b:e4:59:31:1c:10:8c:67:53
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pielmeier24.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pielmeier24.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pielmeier24.de
www.pielmeier24.de
www.pielmeier24.de
Other certificates including the domain name pielmeier24.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for pielmeier24.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISA95LcaWtfemwNhRvdJvXearsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTUxNDA4NThaFw0y MDAyMTMxNDA4NThaMBkxFzAVBgNVBAMTDnBpZWxtZWllcjI0LmRlMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL3+PCJt8CaOHkv5PfuGd3IRuS1DRm8Y lUwCYVm/71yX9W7qbksylV76D6Y/vYqizpWUH22WiJVJoQ3lZYpSBdsB90yqMZC4 UVn71xSVU4AY7W4u7wge4Xmr+5vNEdnjq/q4Emevpgg7+slzYE3qbcUjAa1oP/7T 9JxX8nYy4rNw3xwctmJIMzlxd+DUIvcBQtyo4A5YRHeSneF767ESz2TOYgCH/zGV lqF//AwgSQPhiNfgFozFmp+y5UZhe8PnqJHY+gJ6Sz+KRsGsYgNEv4Ou8xlDTszV R5SVyQILibSgqtz63gIzNhIqMlkDgIH4zgXJPlAStJsdKC2dNFnwJQIDAQABo4IC eDCCAnQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTvMAuzI5+nS+jjtxwH4/FLIyMn 2DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMC0GA1UdEQQmMCSCDnBpZWxtZWllcjI0LmRlghJ3d3cucGllbG1laWVyMjQu ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW5v nDcSAAAEAwBHMEUCIQCgUBaho8obDRxKVRPUGbdOJkVYX4hNadacXt38obxzoAIg ey8DPBWqhQQl+5hezhJ9AnL3TVx9Q4EG2tzfuckZ8xYAdwBvU3asMfAxGdiZAKRR Ff93FRwR2QLBACkGjbIImjfZEwAAAW5vnDe+AAAEAwBIMEYCIQCsgYGLBwL2HbdI rByw8bC0GPBUXCDwMNB7AMgxWxEOsQIhAPFDXRg45M/ToFyrDh+FH7wn0TpgIrUo 9YGQrEo9P2npMA0GCSqGSIb3DQEBCwUAA4IBAQCNyFR15gbgYPWvaVfj/e/YHhW9 vzja83W6konDrlpsKUmjHdgk4v0eSNKeMcq9gYNCyYhxL5ceXoR5ufOhOimsnC0A 0YXZMb//htvl+E3tyxBglmryIEkFp2zbyND/5WLChyDrI73TEMIJ8g/n5K3DV6I8 ky6VawxRawbGOdNyngpvZgVVFDJyDJ/LhbXF1gLhfQbXS5OO/SLpO677johKWKIG g68ivH9Q9PYZOcrvNzwmw0tiGthSsXPBvW/tzO9M65nha8q7Fjvszwh92oOK0C3Q WpgIxoJWLcnqBuW93L/vnTnkWzNBaXIDbwdsZzXeeoaLxOfzbhZ7N6RaYkmQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL3+PCJt8CaOHkv5PfuG d3IRuS1DRm8YlUwCYVm/71yX9W7qbksylV76D6Y/vYqizpWUH22WiJVJoQ3lZYpS BdsB90yqMZC4UVn71xSVU4AY7W4u7wge4Xmr+5vNEdnjq/q4Emevpgg7+slzYE3q bcUjAa1oP/7T9JxX8nYy4rNw3xwctmJIMzlxd+DUIvcBQtyo4A5YRHeSneF767ES z2TOYgCH/zGVlqF//AwgSQPhiNfgFozFmp+y5UZhe8PnqJHY+gJ6Sz+KRsGsYgNE v4Ou8xlDTszVR5SVyQILibSgqtz63gIzNhIqMlkDgIH4zgXJPlAStJsdKC2dNFnw JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336979825441300986810301757219078357494508 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 14:08:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 14:08:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pielmeier24.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24836396865302467188559430788113173941385472317471877813853141442893384499215278339056972380376899109265946389212549571464097580830208393161127163996588596096461882193446023132195850779740208432908112548866327083925698459728040528803424823676288670281627974672098629484533123861239747196567872708841602507855888875432891339393305687420927375341382004306948662722285693298189883365093435743743236453943372163887892370625567899242123058257447144740707847124298868746748338011374715444872887323180660605116924908306530240338044964727746815828903583208036616353256242797428033204400150867585754145975409544376410856615973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ef300bb3239fa74be8e3b71c07e3f14b232327d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pielmeier24.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pielmeier24.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e6f9c37120000040300473045022100a05016a1a3ca1b0d1c4a5513d419b74e2645585f884d69d69c5eddfca1bc73a002207b2f033c15aa850425fb985ece127d0272f74d5c7d438106dadcdfb9c919f3160077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e6f9c37be0000040300483046022100ac81818b0702f61db748ac1cb0f1b0b418f0545c20f030d07b00c8315b110eb1022100f1435d1838e4cfd3a05cab0e1f851fbc27d13a6022b528f58190ac4a3d3f69e9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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