checkmk.nasec.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:01:6a:e8:88:bf:45:a1:91:b2:19:c4:ca:6e:90:30:ef was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=checkmk.nasec.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:01:6a:e8:88:bf:45:a1:91:b2:19:c4:ca:6e:90:30:ef
Serial Number (int): 345388486752568583987800288306627326521583
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:55:82:c1:b2:84:5a:59:0a:3b:1d:13:eb:38:fc:10:44:42:83:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:68:b0:a4:1e:67:2c:f1:d0:dd:67:ab:9e:68:18:58:d4:68:91:60
Fingerprint (sha256): 47:4c:04:82:dd:6c:42:98:55:a3:9e:e2:e5:45:71:96:79:2d:7b:c8:7e:35:b9:c1:f8:4a:8c:48:89:b9:87:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate checkmk.nasec.de

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkmk.nasec.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkmk.nasec.de
desktop.nasec.de
doc.thinking-machines.de
easyjob.seaside-productions.de
files.seaside-productions.de
ftp.seaside-productions.de
mail.web2desk.de
monitor.unistor.de
nasec.de
playground.aic-consult.de
s-t-e.com
task.nasec.de
tipico.seaside-productions.de
unistor.de
unistor.nasec.de
webmail.nasec.de
wiki.unistor.de
www.nasec.de
www.s-t-e.com
www.unistor.de
www.web2desk.de

Other certificates including the domain name nasec.de

(limited to 100 certificates)
seafile.nasec.de
seafile.nasec.de
desktop.nasec.de
unistor.de
unistor.de
checkmk.nasec.de
homewiki.nasec.de
srv05.nasec.de
outbox24.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
www.nasec.de
unistor.de
unistor.de
www.desktop.nasec.de
outbox24.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
unistor.de
wiki.unistor.de
checkmk.nasec.de
unistor.de
v22018102995674690.bestsrv.de
unistor.de
wiki.unistor.de
v22018102995674690.bestsrv.de
unistor.de
checkmk.nasec.de
unistor.de
digital-eastside.de
seafile.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
support.unistor.de
unistor.de
www.klopapierkrise.de
webmail.nasec.de
seafile.nasec.de
support.unistor.de
monitor.nasec.de
outbox24.de
checkmk.nasec.de
digital-eastside.de
seafile.nasec.de
wiki.nasec.de
outbox24.de
support.unistor.de
seafile.nasec.de
wiki.nasec.de
v22018102995674690.bestsrv.de
ssl.nasec.de
digital-eastside.de
unistor.de
unistor.de
files.stephi-engert.de
mail.s-t-e.com
seafile.nasec.de
wiki.unistor.de
srv05.nasec.de
seafile.nasec.de
outbox24.de
outbox24.de
wiki.nasec.de
desktop.nasec.de
unistor.de
v22018102995674690.bestsrv.de
seafile.nasec.de
desktop.nasec.de
vz.nasec.de
wiki.unistor.de
digital-eastside.de
seafile.nasec.de
unistor.de
v22018102995674690.bestsrv.de
digital-eastside.de
www.nasec.de
support.unistor.de
outbox24.de
outbox24.de
unistor.de
checkmk.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
www.nasec.de
seafile.nasec.de
wiki.unistor.de
support.unistor.de
files.stephi-engert.de
v22018102995674690.bestsrv.de
srv05.nasec.de
checkmk.nasec.de
seafile.nasec.de
webmail.nasec.de
seafile.nasec.de

Certificate

The complete raw certificate details for checkmk.nasec.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345388486752568583987800288306627326521583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 03:19:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 03:19:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkmk.nasec.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733514667727649630052981970897472663898683367720938859910206265951985620311894012385972204190349236070943377697909650594281220390217056616363613672685004053346086903855510692402749813799024842207454072258663677918154659952408901299082811933755516139898926519910074218231836770877133902000997284643450842632703893895064458961640478043767774755999424743962109694244767432068435145118840289172786495325696986665639430328678373114379399174170933653382446940125668225695913569736972543183121049640203446087645227378678791277706936909053886897508111807610625259546545491693176713730640759090721428516388821613293415226917527541774926299324089142041401350044206245092829585913847991682617810163069292763945433522626638180291679708135601019547925509162288359990400145263582129727906998667018165226450638968808291733835477302451346400805616196151275049255757900165278398302802186768666117956723196322555925958569491893032767758869723501159561428492704581462929926564569612731852683122622458328622346056465486787179515972650058523621011501097562398574028846591097565439133408243728319261789272817683154910733930527896431582894419290531171418075606937803086925995809906346981677351975048983440585363370035585623144902892655826421142432510518643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e5582c1b2845a590a3b1d13eb38fc1044428307
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmk.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.thinking-machines.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyjob.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.aic-consult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'task.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipico.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web2desk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163f75f25940000040300483046022100b4dd2666fe9f6ab9282510a941cf05ed84128a020f46543727c1613374f7bcf1022100d9c8276847ef7e48c11e3edaacb1063a77d5c9ad157ea8773753459f59f91677007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163f75f25890000040300473045022100bccb4ac448da2de21ec8cd9a6eb8c7d168d9cbbc9536b63126dce9e82e1c918f02206a3268ed19a92db38845bae35643aab3e3d2d858a1a1af0ed16101a54efcbee8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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