findewasbleibt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:86:16:1c:4c:c0:bb:d0:5b:2d:44:a1:0f:25:14:ef:1b:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=findewasbleibt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:16:1c:4c:c0:bb:d0:5b:2d:44:a1:0f:25:14:ef:1b:7b
Serial Number (int): 394076370851399110479208453098854796958587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:86:65:aa:ee:75:2d:b4:8f:46:bb:b2:3e:6c:59:05:a7:9b:86:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:ac:8c:98:8b:a6:07:61:f5:79:22:0f:c7:d2:11:7b:13:2f:70:3b
Fingerprint (sha256): 44:d3:7f:4a:b2:cf:5d:08:39:20:86:f5:c9:cb:67:1c:38:31:37:59:b4:dd:82:ef:8d:4b:81:9a:e7:f0:06:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate findewasbleibt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for findewasbleibt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

findewasbleibt.de
www.findewasbleibt.de

Other certificates including the domain name findewasbleibt.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for findewasbleibt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISBIYWHEzAu9BbLUShDyUU7xt7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MjYwMDU3MDFaFw0yMzA5MjQwMDU3MDBaMBwxGjAYBgNVBAMT
EWZpbmRld2FzYmxlaWJ0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuE4RzsN5Z3iZfsnG5qGPYRNTjz8rzqF5LgQvjoda8m4b0fakNc1w0aj5Yz5i
Roc7Kk2d2+3lJhg5OmEOnI+navKidyjXYmddJCiIpVGA77W7vPcWv1LYh0umq7Oi
DjpsMcFGmFkWtADewdKIUquvLSR3fRNP2Z6QkUnuuaNBM4h0gJScLyKuBDtFPJps
khpgKJdpAUwABe7JA+/JvS6tWE7SzOc0BdKRLLBQHxs2tl6OBEi2ebOeWBGxEl+O
pGmKZAwXN05jRk6ZyeEFGzTisPWqBh3SZvpwE+vwK4f4RKvfySWEZnfPfUQnK9Bp
hd+CTYB0ZcMJM055Gwna7wFnRQIDAQABo4ICKzCCAicwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBRvhmWq7nUttI9Gu7I+bFkFp5uGBzAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzAzBgNVHREELDAqghFmaW5kZXdhc2JsZWlidC5kZYIVd3d3LmZpbmRld2Fz
YmxlaWJ0LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGI9Wss
MwAABAMARzBFAiAhafH8lrAsQRIRyNd13sPhTvP9k6blp5uFowL8+NllbQIhAIqK
kXhhPPXByL+v48uzcwRPM84K8t2GAZabx7KSfNn7AHcA6D7Q2j71BjUy51covIlr
yQPTy9ERa+zraeF3fW0GvW4AAAGI9WssPAAABAMASDBGAiEAxMxIiOG4SUGH1ZgT
XFpTtb+MzgWj3G66EXr9xdYuH0ICIQDukx0nJV9xY9msKfg4E5QYNcLUldezyWYK
DnxD3YzfxDANBgkqhkiG9w0BAQsFAAOCAQEAfBPqBR7l1tM+iDV0bJ1ObmcLluIX
v5JE1maDE0uEBtio6YD1LZACy0eQp0Sj5lqc2HRW0DQDJ5qJ0YhjSCWyEDmTljI1
uj89e5xX1A1TO7ga8pQSjuxo9xLLAvkT3eAg0nqtbPC945brG3gvae9AGwxRKl4a
KL8Vv4gEt3xiZs2y61OE23XgqvHjHCs2AOLlUkYD1SLOG+SoX1xjsI5SDVUGaKSl
VSGTO+Fw7FrALTJ7oRIEcCtnMQJb+5e/GpMQHbunYBhHg77XXRr7bXbBNChMRYSi
2nUezYeKX6ZBeW81K/D0xseSFdJnQNH65XM08BAHwbuFQYvJHoJ0iR2MlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE4RzsN5Z3iZfsnG5qGP
YRNTjz8rzqF5LgQvjoda8m4b0fakNc1w0aj5Yz5iRoc7Kk2d2+3lJhg5OmEOnI+n
avKidyjXYmddJCiIpVGA77W7vPcWv1LYh0umq7OiDjpsMcFGmFkWtADewdKIUquv
LSR3fRNP2Z6QkUnuuaNBM4h0gJScLyKuBDtFPJpskhpgKJdpAUwABe7JA+/JvS6t
WE7SzOc0BdKRLLBQHxs2tl6OBEi2ebOeWBGxEl+OpGmKZAwXN05jRk6ZyeEFGzTi
sPWqBh3SZvpwE+vwK4f4RKvfySWEZnfPfUQnK9Bphd+CTYB0ZcMJM055Gwna7wFn
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394076370851399110479208453098854796958587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:57:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 00:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'findewasbleibt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23266345649211080997641086425795895487526511456367206848866961610832441356149411396588227773226225356077249371868794910043983658774354622410765178309593973857276032555470678403530754503287662211957484100746534360983640906602404323284331891537716828301771318986687102713720686021938023066336012212331909580806660073092966235723264200539547965525108656880669008798932647219710068359847019403783472169947237441357607679617537493807548733920006776006889550434069831630695225453381575691558897477659706965641237900510362803613317503577677248453000022914291279493274962437284591508712348754354876000913620314478502654076741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f8665aaee752db48f46bbb23e6c5905a79b8607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findewasbleibt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findewasbleibt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188f56b2c33000004030047304502202169f1fc96b02c411211c8d775dec3e14ef3fd93a6e5a79b85a302fcf8d9656d0221008a8a9178613cf5c1c8bfafe3cbb373044f33ce0af2dd8601969bc7b2927cd9fb007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188f56b2c3c0000040300483046022100c4cc4888e1b8494187d598135c5a53b5bf8cce05a3dc6eba117afdc5d62e1f42022100ee931d27255f7163d9ac29f83813941835c2d495d7b3c9660a0e7c43dd8cdfc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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