*.fam-cz.de

Issued by R3

About this certificate

This digital certificate with serial number 03:33:93:e6:56:fe:1a:d2:e6:32:a6:24:ca:1f:c2:16:45:da was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.fam-cz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:93:e6:56:fe:1a:d2:e6:32:a6:24:ca:1f:c2:16:45:da
Serial Number (int): 278887851016325927984598097570423486432730
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:e7:42:ac:89:98:f7:f4:ea:a6:91:73:64:d4:ed:88:95:f5:7f:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:af:e2:70:69:b2:85:33:59:56:7c:9b:63:ee:1a:2f:31:91:e0:5a
Fingerprint (sha256): 45:bd:b2:a9:52:a4:2f:90:97:86:96:6d:4d:df:80:c3:cd:a0:18:a8:a0:1b:12:69:ae:71:73:c2:35:c8:5b:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.fam-cz.de

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fam-cz.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aundm-services.com
*.dielichtkrieger.de
*.fam-cz.de
*.germaniachiamaitalia.com
*.inment.gmbh
*.kfz-gutachtenzentrale-hannover.de
*.kr-systems.com
*.mones-happy-feets.de
*.pal-optikum.de
*.penz.pro
*.regenbogen-immowelt.de
*.rmr-killers.com
*.social-media-webdesign.de
aundm-services.com
dev2.woeschka.com
dielichtkrieger.de
event.lcmdigital.com
ex.visagistylist.ch
fam-cz.de
germaniachiamaitalia.com
hub.rallyefokus.de
inment.gmbh
kfz-gutachtenzentrale-hannover.de
kr-systems.com
localhost.3d-look.eu
mail01.visagistylist.ch
mail3.visagistylist.ch
mailhost.visagistylist.ch
mones-happy-feets.de
mx.visagistylist.ch
mx0.visagistylist.ch
mx01.visagistylist.ch
owa.visagistylist.ch
pal-optikum.de
penz.pro
pi.rallyefokus.de
posta.visagistylist.ch
rauchmelder.cc
regenbogen-immowelt.de
rmr-killers.com
social-media-webdesign.de
w1.enjoi-sailing.com
wap.enjoi-sailing.com
www.breitsprecher.net
www.rauchmelder.cc

Other certificates including the domain name fam-cz.de

(limited to 100 certificates)
*.fam-cz.de
hr.rotglut.net

Certificate

The complete raw certificate details for *.fam-cz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEwE2Eb75zqoVIAfIveYGdO5Ihu7DU
xpx1ZWiVVeSbNC8QE/ynX0C6DH6kRddS3Q+4Q53QDE8qnZNqtOWZfh2CZw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278887851016325927984598097570423486432730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 09:01:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 09:01:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fam-cz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c04d846fbe73aa854801f22f79819d3b9221bbb0d4c69c7565689555e49b342f1013fca75f40ba0c7ea445d752dd0fb8439dd00c4f2a9d936ab4e5997e1d8267
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44e742ac8998f7f4eaa6917364d4ed8895f57fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (959 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aundm-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dielichtkrieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fam-cz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.germaniachiamaitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inment.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfz-gutachtenzentrale-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kr-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mones-happy-feets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pal-optikum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penz.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regenbogen-immowelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmr-killers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.social-media-webdesign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aundm-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dielichtkrieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.lcmdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fam-cz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germaniachiamaitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.rallyefokus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inment.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfz-gutachtenzentrale-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhost.3d-look.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail01.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail3.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mones-happy-feets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx0.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx01.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pal-optikum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penz.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.rallyefokus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posta.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauchmelder.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenbogen-immowelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmr-killers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-media-webdesign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w1.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breitsprecher.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rauchmelder.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c29fa33a90000040300483046022100b2588dca4c8e971b0fc0f222966b676fc8f27cf5a255e7c3ffda59d7bcd7c562022100f92c77a78bec95085f6538c9b585f83478952feee4f0819749dd6a34eb22535b0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c29fa33b10000040300483046022100d42489642400ddad06d69de7b62d4f6372ab1fc7ee0a5589d482ad1627fc47be022100825bbf0f1cf70e564e902acb0b55f59cbe9e8f6e706a141976a2d28b45813884
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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