www.epiphanias-gospelchor.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:d6:d4:4d:2d:f9:ab:47:da:a0:f8:01:66:23:53:0a:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.epiphanias-gospelchor.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:d6:d4:4d:2d:f9:ab:47:da:a0:f8:01:66:23:53:0a:a5
Serial Number (int): 339887359310516643544108717766567611533989
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:23:99:44:c7:0b:7d:c8:61:36:06:92:bb:51:2a:85:74:e0:4e:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:fd:9c:d8:ba:12:cb:a6:53:7c:9d:5c:b9:33:96:d3:ed:bd:f7:2a
Fingerprint (sha256): 47:4b:5b:2b:6c:fa:18:fb:96:2e:09:87:2d:22:af:47:6b:47:fb:09:9b:e8:0d:2f:a5:f9:f4:a9:61:47:e4:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.epiphanias-gospelchor.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epiphanias-gospelchor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.epiphanias-gospelchor.de

Other certificates including the domain name epiphanias-gospelchor.de

(limited to 100 certificates)
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
www.epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de
epiphanias-gospelchor.de

Certificate

The complete raw certificate details for www.epiphanias-gospelchor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339887359310516643544108717766567611533989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-28 13:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-26 13:19:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epiphanias-gospelchor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627029203299877184623596978807392462106896696107554089189059211195465957875743727680260428547492124614391359404478666522672653005247492263658316106585440681875511949548908693503150274226851843463362728830091147379705405799708956272958857026778170825047405581450127383078894907633526139260606447690709261788812184515114426905596061443604283458586459374280104151254901045406426944743914030576054791638475099439513604723718423701755040981342167660391652844306237224056652300704409266200699635573370994020210362047121826107495918179389617455813976502927400640625635704950570299857366891311902569767664525409682349353503546533397798788685705425725272531936210342134350966204251212311888140993715954621818900815685825199372987152226113473249747353655279878945095524626931297169245442869812698688330887661774644424246938197066008987377747631744609967723504022015739265288619168658620687568390288120306678732150560222394159268269694202602719049619643187575218071332367167706514506420452897032743294610120274248530272177371331413050299378809376104804220748596539103439029168747372992430835247739035734355166013483623177599474864434902035103247100264565264406447326858541221621868289326400113818621471684969527864752457365539086414250579714377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99239944c70b7dc861360692bb512a8574e04ed2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanias-gospelchor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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