agatha-grapenthin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:08:e0:b1:30:5c:7a:eb:46:aa:0b:4a:fc:50:58:f0:7f:85 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=agatha-grapenthin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:e0:b1:30:5c:7a:eb:46:aa:0b:4a:fc:50:58:f0:7f:85
Serial Number (int): 264357783819130722996660125024230287900549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:c4:b9:3f:3c:4c:02:38:3b:54:7e:88:d7:86:58:49:d3:77:0e:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:37:f7:47:26:ed:6d:0e:51:e4:69:a8:53:94:a2:af:fc:d3:28:bc
Fingerprint (sha256): 4a:2c:5f:08:e2:02:dd:7e:a8:5c:03:5e:42:85:4a:1b:ab:cd:17:83:b4:f4:ac:2d:96:be:ce:44:1e:0a:05:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate agatha-grapenthin.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agatha-grapenthin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agatha-grapenthin.com
*.design-touch.de
*.designlook.de
*.designmeeting.de
*.designtouch.de
*.mangata.design
*.organized-designer.com
*.organized-designer.de
agatha-grapenthin.com
design-touch.de
designlook.de
designmeeting.de
designtouch.de
mangata.design
organized-designer.com
organized-designer.de

Other certificates including the domain name agatha-grapenthin.com

(limited to 100 certificates)
agatha-grapenthin.com
agatha-grapenthin.com
agatha-grapenthin.com

Certificate

The complete raw certificate details for agatha-grapenthin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264357783819130722996660125024230287900549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 13:59:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 13:59:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agatha-grapenthin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855620408623706771719016450478399166483202307674038106126383400717184876878075476864701434290584195992682625916727627690943375893538551722501487653928405561875917915390984046916374611932470178865882212947982107719626736857778006020081237699859033708347603415939518858831306624775487320716790214956882900208929326374068156647228206473405981463983765073683496451311433955750922089629187629937535498745739990970305913238885142914359170775011724428096351752545856677992545420752342757438289006378179645373894074659363626301818648723204911768123017881256373915086686109491543841118231896811151943257741424852755292859142850248884070195540342074870051896143439417578034248135758600497229933032682946161734399998542864875782876098404009990285871794864987653438373934495734631639592364421596199112911511146587304872575634659479927086535917321444943635275797569779709552019657682683634724640051652405637994094049655408749488358707049066545727640273528724835002996051901976735305606869750404241910441605270234083074679443054771590564008944110593012332679848302782975672051343224592987457078806654230435653992550916060595967883458974238180184855628523248017570498950692191596005535790339037628998659941559903239337736992508246495824223761771319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49c4b93f3c4c02383b547e88d7865849d3770eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agatha-grapenthin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.design-touch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designlook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designmeeting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designtouch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangata.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organized-designer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organized-designer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agatha-grapenthin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-touch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designlook.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designmeeting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtouch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangata.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organized-designer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organized-designer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a189bcd4300000403004630440220385357d4416a67707d85c04e2fb5da0ae0575b3c9b2ceb9b9255a06343de84cc02205238259d59f035c00b15485cdb998caf3d95cd86baa8bc3a961751c08d20c552007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a189bcd7b000004030047304502201bd6774854313beab9bba85816ee90a82d8feb1eb2638cd0892cde36d8b4839c0221009c541aa3840549999b0185c8fc32dd71d02d882e24e714822df1a53c9d8d4ef3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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