kosmetik-unger.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:7f:c3:fc:98:f1:5e:1f:d1:7d:be:42:8b:5d:f1:37:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kosmetik-unger.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:7f:c3:fc:98:f1:5e:1f:d1:7d:be:42:8b:5d:f1:37:51
Serial Number (int): 308465654007006947004104646595283858306897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:4b:f3:2c:9a:2e:50:2c:1d:19:f6:80:05:e7:b8:38:ec:e8:a0:f6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:a7:92:9d:d8:2a:58:e2:12:16:58:61:8d:ce:41:d3:43:15:55:00
Fingerprint (sha256): 46:51:b0:d2:47:de:76:73:e2:98:b1:f5:d1:96:5a:fd:f1:42:62:63:d3:f4:b1:69:b8:0e:ee:56:26:a0:01:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kosmetik-unger.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kosmetik-unger.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kosmetik-unger.de
www.kosmetik-unger.de

Other certificates including the domain name kosmetik-unger.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kosmetik-unger.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgISA4p/w/yY8V4f0X2+Qotd8TdRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MDQwNTQxMDBaFw0x
NzExMDIwNTQxMDBaMBwxGjAYBgNVBAMTEWtvc21ldGlrLXVuZ2VyLmRlMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3xOfSrd0Yt4/BoUbzchJrVI0CB85
mLchUV+TPSbCYbHJifKuJuhaDO0oQcTxslA1Dr7iMG6qwKrWC9H99VfiDelA1s0i
M8lTSurCvBQTg51FD3LQhksRjAWP7HrzkPoeHoozHR9RQBI1sBR3lDlMoF+g16Xt
JlB1Uiyce2IA4xFoav7nGy9AygaUwxuuAGTXYwYZAxPmYoJhtIpzWzqH0kE3YQ00
1aqYZXaU4xBfhZl4Fxc5FCRsflatITaRsoMwCio3qQlMxzjexKqLW8IYiluGYAat
B/QeScN0fGLj75Ri1llwSQIA1Q0zdFsyrI9gExkwdlXZD61MmCcOXlj3qIBBB9DA
56HKd2Snm9xssKNEarmN/yndLOUd4rsZWXv1T/9FoXzfzSOIJWtpQ31t/1WajquQ
0a0wZu6IEu2VpNub9OS4tVkCtrhoHNc262euQAM/ukJhH+nd6f8VSg9SDXf1POMz
ybgP5XAw7A3IvCVq6iK7bNZiKyrSwC3WEN0tJKtInR5GBbmJlV93xCd/22D6sDtL
1Fs+aYTIHWsoy+pbO3fLvPaNyvCS8MFlAyspAOAW3VCxsr1QhHzbiHeBDhF5467U
DH92L1ZWqo3thXZ2bMqi7A62g0WE5/pkd+l8FdafkWOZqbijo6Zs4b2fHnj18dDo
eDlJviUguGH7zqUCAwEAAaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
DEvzLJouUCwdGfaABee4OOzooPYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAzBgNVHREELDAqghFrb3NtZXRpay11bmdl
ci5kZYIVd3d3Lmtvc21ldGlrLXVuZ2VyLmRlMIH+BgNVHSAEgfYwgfMwCAYGZ4EM
AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0
ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k
IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg
Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ
KoZIhvcNAQELBQADggEBAJVYA3SKAiYF0Tn7wwPiBK3uLboBQ74YxeqvSQZEgpae
8pXzjxBP1AQ4LzXGIx5yj9GsduOOk5q97/HCVtBi1o27yFN/uHkJFf2w5Rzh1qH0
LlUQuHfrd4NKN1FYWFH4r/Kajdko6FtwJowRgKe8Z8DMQtt2CRkLIVaeJLlwU+69
yEF7paTYG1g7h+3WbMm+mDJOv1uFfguQ3l2TpV5zHGq/8CyZNsnMSVVRdXlp1wM6
KKphOTi0dBvzqKIyYZ5s0HodizhfbVP+9MKrp8AmU78uFxVTbQvXgWuS6SB1n8Bd
DVJLy4TrFH7O3eo3K/Q/ABGjn4K4epfh8JGklHTOkUU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3xOfSrd0Yt4/BoUbzchJ
rVI0CB85mLchUV+TPSbCYbHJifKuJuhaDO0oQcTxslA1Dr7iMG6qwKrWC9H99Vfi
DelA1s0iM8lTSurCvBQTg51FD3LQhksRjAWP7HrzkPoeHoozHR9RQBI1sBR3lDlM
oF+g16XtJlB1Uiyce2IA4xFoav7nGy9AygaUwxuuAGTXYwYZAxPmYoJhtIpzWzqH
0kE3YQ001aqYZXaU4xBfhZl4Fxc5FCRsflatITaRsoMwCio3qQlMxzjexKqLW8IY
iluGYAatB/QeScN0fGLj75Ri1llwSQIA1Q0zdFsyrI9gExkwdlXZD61MmCcOXlj3
qIBBB9DA56HKd2Snm9xssKNEarmN/yndLOUd4rsZWXv1T/9FoXzfzSOIJWtpQ31t
/1WajquQ0a0wZu6IEu2VpNub9OS4tVkCtrhoHNc262euQAM/ukJhH+nd6f8VSg9S
DXf1POMzybgP5XAw7A3IvCVq6iK7bNZiKyrSwC3WEN0tJKtInR5GBbmJlV93xCd/
22D6sDtL1Fs+aYTIHWsoy+pbO3fLvPaNyvCS8MFlAyspAOAW3VCxsr1QhHzbiHeB
DhF5467UDH92L1ZWqo3thXZ2bMqi7A62g0WE5/pkd+l8FdafkWOZqbijo6Zs4b2f
Hnj18dDoeDlJviUguGH7zqUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308465654007006947004104646595283858306897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-04 05:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 05:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kosmetik-unger.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910073329238280614085390407103721724244602527990657038488575175631049539167740807626260340022051338397655133131822766762284400137179594590974913677930900344881097230243731167188832799203854435893904544380156359432663817661315898141489479561404559843185864337345855681881269697148431716526227250576700342791326396511201735807336309909090364461076367601402972737930011568482982449709805068527009626565942017531881514269790336313001766335732535998826899268491815267388428916820451342790610773922272108586020780781978325604977366938196724465802015138420728997659389667640982980672775539534032666052328086942660862383323558698664934173823602934761558236825157721246053233503433564591441942320705765272288680566047365241244810699645832659415113144069229843808980830754228254023943501766749194312153591297886954888218561454690492936255824984663469021477798482319346893439784707180945800536473457202896528651589792294427768736986850260337176587846369055005359508438049153241242346347272469270024309764778153047435341923625666669782331266195005168287599417424814788900236026998703365078576455999287847238318892281082900673939354359731255651908696426363718455043782834006560287979579319311766721365671024688647828430595462583250465409562562213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c4bf32c9a2e502c1d19f68005e7b838ece8a0f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmetik-unger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosmetik-unger.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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