www.friendsoftea.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:78:e9:a7:4a:15:4b:a8:9e:65:f9:5f:14:f6:49:83:4b:39 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.friendsoftea.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:78:e9:a7:4a:15:4b:a8:9e:65:f9:5f:14:f6:49:83:4b:39Serial Number (int): 302481320564972133576389656185694067051321
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 67:e7:3f:22:f3:5d:a3:45:12:6c:28:32:bf:bf:a0:f6:12:27:54:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:54:e0:8a:97:9e:a7:f9:1a:f2:62:4f:b5:11:18:3e:30:19:ee:47
Fingerprint (sha256): 43:df:57:aa:d2:48:e3:7d:db:34:f3:82:ba:0c:30:e7:b6:ea:2b:26:58:81:9b:ee:38:cb:51:ea:bc:4f:b1:87
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.friendsoftea.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.friendsoftea.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.friendsoftea.de
Other certificates including the domain name friendsoftea.de
(limited to 100 certificates)
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
www.friendsoftea.de
abo.friendsoftea.de
www.friendsoftea.de
blog.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
blog.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
www.friendsoftea.de
abo.friendsoftea.de
www.friendsoftea.de
blog.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
friendsoftea.de
friendsoftea.de
blog.friendsoftea.de
blog.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
www.friendsoftea.de
blog.friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
friendsoftea.de
www.friendsoftea.de
friendsoftea.de
Certificate
The complete raw certificate details for www.friendsoftea.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISA3jpp0oVS6ieZflfFPZJg0s5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAxMTUxODM0MDBaFw0x NzA0MTUxODM0MDBaMB4xHDAaBgNVBAMTE3d3dy5mcmllbmRzb2Z0ZWEuZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpij4yt7ZfsaLW4nU5nOGGJmRI ABgFt925YZcm5kSAT7iM1G3bzIA0AFQs6iqAUZr3eDjVurhXx3Ej4kn7Yid1XZpD j+QvXoIseTv6RN20XTaa8eYg15FqUbU6xusbdEYdtwvHF0Eb9SNyNZjQN3xqxWtl 28onfO2qZ6kbKV4kdYTAFPUarbRH1KnHdmZbulUOzoj4ov3MBRtEIei8ffutAX4h pRJMxUEQGG2e/b1V1UDJ7OohulB6UMqlDnhwW5o7fphlimXLNoYdSED49voTDt1A 1w8hGMiraYbc54ZD4pdXtECMAlU2Yyj9a8BdiM0AN0zDuM0peW2oTAhT7rA5AgMB AAGjggIUMIICEDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGfnPyLzXaNFEmwoMr+/ oPYSJ1QLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUF BwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5mcmllbmRzb2Z0ZWEuZGUwgf4GA1Ud IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y ZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEALlEsXxLRDyFNgm93sxwNr6+V jFhpSNzfkXiOBQpSZMCBOZxVvBo+BFB2HuemjpRk5VgVN2WojPNSoWeC9/tiaBAk 2mhPd55q6U9agAUll8+NXr4FkbZntTuY8DkWWMBQppPgDEfgccT70CwUSRxnrm9p PYD3wFPDs8IprS1/gJg3tLd3Pg/QehT4FDgzvPohMWZ1SzE1CkGZsIs/oqsQIPhn ln9CSi1hPqQWu4YcKv4ZZjvXEzOWVQA9cDJsPupt0Y2ReTrMg5r9g4OmAb7SDSfi jDU6qV2fI+HsvdAw8W9KCl7ca3OAhyNlQBMJboQGqQot0lSKMUvEQfXeBjzHkQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Yo+Mre2X7Gi1uJ1OZzh hiZkSAAYBbfduWGXJuZEgE+4jNRt28yANABULOoqgFGa93g41bq4V8dxI+JJ+2In dV2aQ4/kL16CLHk7+kTdtF02mvHmINeRalG1OsbrG3RGHbcLxxdBG/UjcjWY0Dd8 asVrZdvKJ3ztqmepGyleJHWEwBT1Gq20R9Spx3ZmW7pVDs6I+KL9zAUbRCHovH37 rQF+IaUSTMVBEBhtnv29VdVAyezqIbpQelDKpQ54cFuaO36YZYplyzaGHUhA+Pb6 Ew7dQNcPIRjIq2mG3OeGQ+KXV7RAjAJVNmMo/WvAXYjNADdMw7jNKXltqEwIU+6w OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302481320564972133576389656185694067051321 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-15 18:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-15 18:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.friendsoftea.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29481695202088952016918897677901677046805382515785982554299184049856024027719975256195597565595045371932544116782282901337466599607280615334099898158231046823176312914186987316565654995707972922519674747366549831462654511591824450700589274652219116506021588751057671590441422468195194362401329494380448905072531772386718267961132269273056581258784027370757306137569470223546594616678768807295887792524566465152845105899900452157639628532719056031370446601232332198990903734554855442346381929315559321958824068001893512025633837930342263803528011299077552337013217158947506481000869980863561992502417871078002862764089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67e73f22f35da345126c2832bfbfa0f61227540b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsoftea.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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