registration-portal.klett-sprachen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:c7:c8:89:94:55:da:92:35:a9:6e:fc:44:c9:c6:ae:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=registration-portal.klett-sprachen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:c7:c8:89:94:55:da:92:35:a9:6e:fc:44:c9:c6:ae:ab
Serial Number (int): 283380486899196161040270090359999436336811
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:7e:6b:6e:9d:99:13:15:4b:2c:0b:fb:b8:70:c8:ce:8b:56:4d:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:59:51:e9:3f:71:a8:c5:9a:d6:bd:3b:3e:8b:aa:67:7d:e5:14:f5
Fingerprint (sha256): 48:f9:a1:43:ed:78:3a:5c:b7:30:60:92:cf:c2:36:69:47:37:57:ee:a7:af:35:18:4c:b4:52:d0:e6:10:52:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate registration-portal.klett-sprachen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registration-portal.klett-sprachen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registration-portal.klett-sprachen.de

Other certificates including the domain name klett-sprachen.de

(limited to 100 certificates)
euq.klett-sprachen.de
webapp.klett-sprachen.de
sixcms.klett-sprachen.de
moodle-demo.klett-sprachen.de
moodle.klett-sprachen.de
moodle.klett-sprachen.de
moodle-demo.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
www.klett-sprachen.de
moodle.klett-sprachen.de
registration-portal.klett-sprachen.de
registration-portal.klett-sprachen.de
sixcms.klett-sprachen.de
moodle.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
registration-portal.klett-sprachen.de
mail.klett-sprachen.de
international.klett-sprachen.de
webapp.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
*.klett-sprachen.de
moodle.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
moodle.klett-sprachen.de
mam.klett-sprachen.de
mam.klett-sprachen.de
pim.klett-sprachen.de
elt.deltapublishing.co.uk
mail.klett-sprachen.de
www.klett-sprachen.de
mail.klett-sprachen.de
pim.klett-sprachen.de
newsletter.klett-sprachen.de
lizenz-portal.klett-sprachen.de
sixcms.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
mail.klett-sprachen.de

Certificate

The complete raw certificate details for registration-portal.klett-sprachen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgISA0DHyImUVdqSNalu/ETJxq6rMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEyMTIzMzhaFw0y
MDA1MjEyMTIzMzhaMDAxLjAsBgNVBAMTJXJlZ2lzdHJhdGlvbi1wb3J0YWwua2xl
dHQtc3ByYWNoZW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDl
cqdg7QoVWBz+GauFdB/aQ+sxzbBCZffRQZDnlB40TKSf4wNTtLJf6arLhzUuOPCC
AsSNWP4eM3YA8etT4qt+99BahKSbABe2bUM4dNiU1ZODeZ0l2zlRRq2qxtYidteN
xKptwv+OtbDvtJPXj7QlJ0137OstKqv8T5aXiX/5wpAlfCFg3wSxqZjvMvbUWfRf
hHyiBbW/nYJHa9Z+7xQd9WT1hzLiaeOgKHH45g4GVR0rEdypTr5brGXBjZcS3KHa
oQMLp/iY6B5nT9oibzkfvCxYGOSmY936t463+ei2cZopwhVkMXNgmfYo6AugnSGF
vt2YZbKt29S9L6vyNvo/7ol/3yE4geZOJxlaPNAp7cwdiBMDOSyjqM9XAU+uzL3B
I1Mgi5HwS93xBbLCFSvTfPnwIROGmcnzG4apHnMHNmtCEhioBEWXCSVwZX2O4b09
HRgg7RC/sjJ7GIajr0UPtEZDu5BTFN88AjVx3CFRo65uj4IJO1GF6X6MoAThW75f
7YEEWYP7odyKeoy2WEfMmSQda4SR5j/1gmnl7vWfr/iJgK5olntY1EYstZ3Dk6OY
Cw5dSPl1CANku3T/S0B9pzYOnyPYRiIBIrJKbTIbkEE5/HJtJn3b61W9EiHDrg82
ISgHro01oulxmIIMSZfr0SFE9W8rLIrhnO0dSrXzZQIDAQABo4ICezCCAncwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBTFfmtunZkTFUssC/u4cMjOi1ZNBTAfBgNVHSME
GDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYB
BQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYB
BQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDAGA1Ud
EQQpMCeCJXJlZ2lzdHJhdGlvbi1wb3J0YWwua2xldHQtc3ByYWNoZW4uZGUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXBp2V/tAAAE
AwBIMEYCIQC8cE+loJiSNU+WQ6Mvdxb4KyePHRBzSYyn2dwzk0T3OAIhAJhcwvGw
ZwpWyx5eC15QZaPnKTGvXc0Bd6uJcXrx/i7CAHYAb1N2rDHwMRnYmQCkURX/dxUc
EdkCwQApBo2yCJo32RMAAAFwadlgrAAABAMARzBFAiAJbsZdDPHrf25yasPtuLsx
Eoh5+9q/IYSuZJgq41KhwwIhAL+hqVM01Rok9u+MvRV+rmbqs0w4Snnj95vOvI98
0hfPMA0GCSqGSIb3DQEBCwUAA4IBAQABqdqjaUSv+ycbp4eVmPQhP8ov13N5N8Lq
h7GZhm9JT9hutehu+HrvA1en9Axf2gXIcYiduEeGfQaHol3vy0ozYkOcOdJbyDcs
DrFZP2e3bHbHu5Kb0Mn+hH6xuM8/PVk3Z74YV/oA2iCM7kzqQ48zJuylkRVGJsSc
AWnHTmczVzI7+3QggiTRW04foi9j96GazzlSCOuJ+0y952Ip/UpbC9D+UEVuqOdk
6AwTfhsD3Iukcxs6V7hOFqUy6b4oq44fwMh33Rz02HIA7MxA+zS9nvBt9hahMzoi
CfLX8LJVz6BCaKowhTb3SVXZN+pGJo9jh2QoDmU25vixO8Zb+pO4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283380486899196161040270090359999436336811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 21:23:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 21:23:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registration-portal.klett-sprachen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936065627466239017358425297599937742990320529076325669495869065484640748318871689728866821561051272695991188593577018482733924454704328819800065922172815907758167642006912060528986668283318414489330941519104841031932311271453588604906549955575738801828066613100795099124591720002833739966122753650196750228550365339798089060046190618703447347112114406951293086705745143686494253299179308268950018369262926775293830144204276615948445690666812402745847145528677814888549031816369195696093534972372131660360194826014604001766057075508362783975024886546782573509001205970200131190600576263174624248201489599467506063318481353119997463851480761866458090047560528230647490122658495248259286446651868474668089408816387438187476233231492045358128305726534260480305895274329054361984993080712581293111142940743983033694015148080915462710629377711019395291065238610585069964474321814061055998004658254493556443593719036088031186638580098175886495922887461889545716462906071285536149178810320142031774964578998422285141943975336598518877553129137794400765194713488906149954244259593181095497039547277301166297169802846769406511591817525265971086125579538161621751006482934384547619063021108593258991737923691144078112898412563366712064951579493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c57e6b6e9d9913154b2c0bfbb870c8ce8b564d05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration-portal.klett-sprachen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017069d95fed0000040300483046022100bc704fa5a09892354f9643a32f7716f82b278f1d1073498ca7d9dc339344f738022100985cc2f1b0670a56cb1e5e0b5e5065a3e72931af5dcd0177ab89717af1fe2ec20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017069d960ac00000403004730450220096ec65d0cf1eb7f6e726ac3edb8bb31128879fbdabf2184ae64982ae352a1c3022100bfa1a95334d51a24f6ef8cbd157eae66eab34c384a79e3f79bcebc8f7cd217cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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