netclue.de

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:f6:d6:f1:63:3c:d6:fa:34:e9:13:f0:db:d3:aa:89:c8 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=netclue.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:f6:d6:f1:63:3c:d6:fa:34:e9:13:f0:db:d3:aa:89:c8
Serial Number (int): 428063041354033595892555789874097879157192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b4:a8:5a:e5:67:ba:1f:35:51:82:6a:0f:2e:00:95:62:56:0c:5a:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:43:6b:ea:ce:6f:12:e1:6c:02:83:0b:a3:c5:57:95:23:02:b1:62
Fingerprint (sha256): 42:d5:03:ee:54:62:84:c5:58:ca:b7:a1:6b:e0:d6:12:4b:27:31:bb:7e:c5:c8:8e:61:56:b0:54:a9:29:0b:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate netclue.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netclue.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netclue.de
stats.netclue.de
techclue.de
unfug.org
www.netclue.de
www.techclue.de
www.unfug.org

Other certificates including the domain name netclue.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for netclue.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISBOn21vFjPNb6NOkT8NvTqonIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MDExMzU5MjNaFw0yMzA5MjkxMzU5MjJaMBUxEzARBgNVBAMT
Cm5ldGNsdWUuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fn/5
Ue5R9wr4EHD8zvbFkWGYNCIdlUruDLlCzOVJwt4sGiuHfOlaI0mbFmTuXFc2at3m
5ozVkP6Sw9fImnUFu65BRoze9VxuLJu1tsB4A2dDHwCib8Vq7+Kcd+UfXdk3sXnS
jo2dPevFY4Jr+NL8pFQ0JtUVn3sq/hHMphTPR4wr1JJNQthDU0y7V1TVKGW+CdfG
aiEyT3SS1kNhvH56aqoNMB5hDehnF4ITuw4bnCRdddwriu91vs4t/IwKXPeyFD/W
K8+0KEgXOTgmRdYHt9opYbpGzAEdnAsESuLyfB4PadjCqRoyPw2Zu76cBnR3OYlD
C2G20K4PG1wwt+8/AgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FLSoWuVnuh81UYJqDy4AlWJWDFpmMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMG8G
A1UdEQRoMGaCCm5ldGNsdWUuZGWCEHN0YXRzLm5ldGNsdWUuZGWCC3RlY2hjbHVl
LmRlggl1bmZ1Zy5vcmeCDnd3dy5uZXRjbHVlLmRlgg93d3cudGVjaGNsdWUuZGWC
DXd3dy51bmZ1Zy5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAA
AYkR90FlAAAEAwBGMEQCHzE4giwNLtUOG2evDC62M11KdbPSiIY8jxZEJmiI8wgC
IQDyuF+VsIx60S0Zruw5134JnLs0Fle1Yv9j9UREa1u/SgB2AOg+0No+9QY1MudX
KLyJa8kD08vREWvs62nhd31tBr1uAAABiRH3QW0AAAQDAEcwRQIhALqjl5xQJS+L
sa/X366TbkapoIQmeP7J6TnmYzOA8o/gAiAtb1F36tVkgjJJOwUIaEmxIL79X3aJ
hkxQFgRfAZqO8jANBgkqhkiG9w0BAQsFAAOCAQEAUTLGac3dacAzumFYegQZYKzl
wugaAAuUlt4fQVma337rYgIwQIoKcrH7ItHgVXvWPEJt8SmQk2CCRCQI57VqFTAs
XeLgFhi3iJwwgR+Hf9P/DTmBqvE9rBhelESldUwsfgqRFAn6plfLkKbh6Qg1ky0w
y0WZTlsom54v6H8eRXIVHCiCACIZW12gw5fyR234v2XBsfI2V7Xk1lw42q+NLVTH
BpPw4GRlEgJfmorjZn83SLSp74/qMHILtDHhq9SKg49FbiuxY7jjKsVxVlQ2u4zq
hjaHVXbYkCFbUbIBBASyk6FHVgOkVI5VWkbBEgjA2ZeDWgSZAwe7zHFNrrJWcw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv35/+VHuUfcK+BBw/M72
xZFhmDQiHZVK7gy5QszlScLeLBorh3zpWiNJmxZk7lxXNmrd5uaM1ZD+ksPXyJp1
BbuuQUaM3vVcbiybtbbAeANnQx8Aom/Fau/inHflH13ZN7F50o6NnT3rxWOCa/jS
/KRUNCbVFZ97Kv4RzKYUz0eMK9SSTULYQ1NMu1dU1ShlvgnXxmohMk90ktZDYbx+
emqqDTAeYQ3oZxeCE7sOG5wkXXXcK4rvdb7OLfyMClz3shQ/1ivPtChIFzk4JkXW
B7faKWG6RswBHZwLBEri8nweD2nYwqkaMj8Nmbu+nAZ0dzmJQwthttCuDxtcMLfv
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428063041354033595892555789874097879157192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 13:59:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 13:59:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netclue.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24173895673169466473454057546230267920205301615189083424917877440737306026727177001924783687255498012142911421367757852880838618665468381581159362077461532465833288716701571160108226268524134227258289167113566437622932995220287324019748928925381274628511031756782775424849252730352085679678853968267962478736738142147977614954831076163468361914614588225440644587360711835149440998291086671217926820267311186022741442835486204956570575877455712355388830297625158211605518393668324031898216105367580941004517655789585720734990601139095123579954271360978455164021243891146497823045765258052616417367697659202252662370111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4a85ae567ba1f3551826a0f2e009562560c5a66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netclue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.netclue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techclue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfug.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netclue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techclue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unfug.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018911f741650000040300463044021f3138822c0d2ed50e1b67af0c2eb6335d4a75b3d288863c8f1644266888f308022100f2b85f95b08c7ad12d19aeec39d77e099cbb341657b562ff63f544446b5bbf4a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018911f7416d0000040300473045022100baa3979c50252f8bb1afd7dfae936e46a9a0842678fec9e939e6633380f28fe002202d6f5177ead5648232493b05086849b120befd5f7689864c5016045f019a8ef2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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