www.godbersen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:7c:ff:5f:a6:0e:2b:cd:5d:af:d5:db:6a:54:b3:9b:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.godbersen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:7c:ff:5f:a6:0e:2b:cd:5d:af:d5:db:6a:54:b3:9b:d2
Serial Number (int): 299954915504508215328556035536469003312082
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:ee:13:1b:69:ed:e7:a7:57:57:dc:6f:30:03:26:5e:1c:7c:af:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:79:85:9b:0b:f0:14:46:19:91:a3:c5:00:49:a7:9d:6d:4b:49:01
Fingerprint (sha256): 45:1f:ea:d5:c4:06:5f:be:b2:d9:6d:4f:5d:7e:92:72:4a:7f:02:3c:75:77:24:75:aa:10:69:60:08:99:23:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.godbersen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.godbersen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.godbersen.de

Other certificates including the domain name godbersen.de

(limited to 100 certificates)
mta-sts.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
mta-sts.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
godbersen.de
mta-sts.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
godbersen.de
mta-sts.godbersen.de

Certificate

The complete raw certificate details for www.godbersen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299954915504508215328556035536469003312082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 08:30:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 08:30:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.godbersen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847753908182340382013768459219974133207523791778438563463713170192327127455830814833506810815831904799053396466525102914498891532802794703586059325209819098065827223607883437318471497579911656982578987687260291896597103722963827885059307954265614314359367208436119708106294500350918060062558719816219329003305808506435157378186990332285394491127646450613551397004879017576412117503501188770521554961345454771797469514550646011037534519969683191672779941486639396884777260507424785130105972623913063264360900937736783024724257108617337002371899609319876578125169602722553687785698577931699599526158805716064978253685872131374552197989494004254543518272869087369015358359210729728052898001465955986550453955160461391121513580289045789072597203791826851147653184212368594751370701702615423219204818778754081742071807650064305366083747073425792352534005528234891339824648686372869953229365138189878115917119967079450436979286871375139832606965980085251725748508987994178508893707435742194579753710058967631212414617209270908173297155792173227832125986028246107766585574441537053996004092373008288817294768287621213110063940670421811442101867303260145909895272779440996618049948675555106517415136169659552722094882719084752569575295548041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4ee131b69ede7a75757dc6f3003265e1c7caf53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godbersen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001661536ed3a0000040300483046022100d5600b0d781b3f46489caac52d52fee8682e6d430b7604b18604b9ada535dd9d022100a1fd01d7152f34c6df8403a67827bd4a8dcd72d1fd25348f991d8b0df467e408007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001661536ed3b0000040300483046022100f8cd7cc5f85a3cb51f17ae08eaf3a0aeb53c3d8fd2ff8c08e0d626d1d117d1230221009378a97d5260559323043f2d1d9b6f6470265cf9fe9035bd1ffe36ff12a89f26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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