2021.saechsische-staatsbaeder.de

Issued by R3

About this certificate

This digital certificate with serial number 03:22:07:d1:58:82:3a:93:72:48:e4:fd:34:a9:7e:d6:35:27 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2021.saechsische-staatsbaeder.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:07:d1:58:82:3a:93:72:48:e4:fd:34:a9:7e:d6:35:27
Serial Number (int): 272916849851776410518272052265385400349991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:13:1a:ca:5c:9f:7c:28:41:9f:0e:97:04:b2:f2:d2:b3:92:cd:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:63:cb:25:01:81:33:82:13:bc:88:02:89:a8:0d:68:52:ce:12:8a
Fingerprint (sha256): 4c:a3:b9:c7:97:2a:dc:f0:b7:fc:af:47:85:6a:39:53:c7:a9:03:f6:63:80:43:37:f9:32:a2:8f:6e:98:12:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 2021.saechsische-staatsbaeder.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2021.saechsische-staatsbaeder.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021.saechsische-staatsbaeder.de
beta.saechsische-staatsbaeder.de
old.saechsische-staatsbaeder.de
old.saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de

Other certificates including the domain name saechsische-staatsbaeder.de

(limited to 100 certificates)
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
2021.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de
soletherme.saechsische-staatsbaeder.de
2021.saechsische-staatsbaeder.de
2021.saechsische-staatsbaeder.de
soletherme.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
2021.saechsische-staatsbaeder.de
www.saechsische-staatsbaeder.de
saechsische-staatsbaeder.web.mageprofis.de
saechsische-staatsbaeder.web.mageprofis.de

Certificate

The complete raw certificate details for 2021.saechsische-staatsbaeder.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCxj+Wf67Q3MnkLDF9fz
aQ+IaJ6WvnkJzZkfJpzoPH14PmV97E3R7Ao2nQEOKxJQ+eP19VCI3tkvc8banF7L
t/7WwC4+HQf40SZo63bUvCdTKf9vQTZ1TdIwJzSnigEyKHeQwI3CyI3DUxen8NRU
2bq0RrOLd+oTPW2AUavt3bX4EQongZTXZYuWhMT4LC47l4B1c+JcMhqe1jK/k5Wv
gWU9OBF+ZvLtXeHwSRVagEKRR3afNsPqVF4XV1LvjjbAp35ZoMygBxt4Ub4UesB/
5eax9vDh9Ge0T3vGIsYT7aQ80OHgwQXj6mcRZbAZjjgJGV9mD0u/MQOEsXL6yi0a
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272916849851776410518272052265385400349991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 00:01:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 00:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2021.saechsische-staatsbaeder.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19715065358123370191847077497271559760113083288913549024828105928684458797267325412219952644406258598440980361864690912869922037681541835145516307303267881212808203918616861589984748825897845856996878516710616183323800872950408045459230937760304901702102238848945361913997138238421637694586382733511260153598224006383545184178240145539741148707962489665239419705563314510743034831893567465283372723156728964207674857867102166120751419144681720013708334850666939809928728556177687886979337018730622555208781448020865549862574374035449642934799859091033777748353878032088810266546513017790824680926717521133575368153757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2131aca5c9f7c28419f0e9704b2f2d2b392cd07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.saechsische-staatsbaeder.web.mageprofis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saechsische-staatsbaeder.web.mageprofis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soletherme.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saechsische-staatsbaeder.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001865296df580000040300483046022100f0bc1062532fbf5892750d6d206dd336fad1c3a95925eb6b0fb068f4842239af022100877b7777c18ab02e9c04dbfe9d121f6f65624482d78909c2f3bc16fb031d7d26007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001865296df7b0000040300473045022009c2a8464f2190d4ad668b61609c12edb52f24fabc3c779b3720c0fa95edaeee022100aa1ca569b1658e8b126c8b95b7ddd9f1c4a0272d6fbe5a95aa849197d4f979e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026ac709bc096ea7f0292fdc4cadc91fb2a92c351e9ef08ac4f4402e10fee2311f65329767c01925104871df4d245d4e99a5c76d7a56a7004b9e066c0dbf8a406dd7d963013e0ba5ef5444202bf2e34bd682a0b646ea5b08279a45fa9e9482f2bdef0504db64e56f5eb95f332fab75988c0ab20f7cbe9b40cb6abef23cf2af454ec74af39eff2d9f88d141b47fc46c2934e2d7d0162b7d752a58a8528aef60cc896a4b2d822874b573b6bd2cfe99c990d25f30b5c70dc7dd483a0d58ffd51838999779616d5ca7cc33be3a3a104dadd05d9ad531c8501103fe05e6d0a6252d508306a288c22bd4f45470decb7fa6b6cd7229c89291b4ba668761b982317c94efb