dein-abiball-fotograf.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:f2:64:9e:64:f4:4c:e1:2f:7f:04:71:7a:9a:c7:0d:9e was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dein-abiball-fotograf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:f2:64:9e:64:f4:4c:e1:2f:7f:04:71:7a:9a:c7:0d:9e
Serial Number (int): 307597172946892376543990512702962325196190
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:92:f4:23:1d:07:53:44:e1:c8:01:e6:b7:d3:1e:23:f5:50:5e:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:f4:7e:28:64:03:60:ac:f5:ef:a7:e5:73:d1:4f:83:3c:a8:1b:74
Fingerprint (sha256): 4d:c5:a4:10:6e:5f:56:84:65:42:b6:42:66:8a:f7:4a:97:f7:ec:fa:31:65:54:92:72:f9:c4:18:7f:af:90:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dein-abiball-fotograf.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dein-abiball-fotograf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dein-abiball-fotograf.de
*.deineabibilder.de
*.mainzschmeckt.de
dein-abiball-fotograf.de
deineabibilder.de
mainzschmeckt.de

Other certificates including the domain name dein-abiball-fotograf.de

(limited to 100 certificates)
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de
dein-abiball-fotograf.de

Certificate

The complete raw certificate details for dein-abiball-fotograf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307597172946892376543990512702962325196190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 15:28:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 15:28:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dein-abiball-fotograf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832665223730450752451259697097455114996952953732963407445258054684016843980551650538634881371262658066605205227882622769157213851164811276167446095865642928941047563841747888876662141567037525887193353639146604877383149194190442425374984882063922224165752437873040667147805848062081029825099951956494231771899596397101749824227599467191046028811475035774436832592056074277063321186735713129311245148205423039896862548634725706296086968784913426665771049214494150101592029467832674179217041446041594047614448409016367016159529206981334735438794881913745101981449220555209488253483201061967212496824370363697824418633518081958515456969417434120661074349638552768496475177883101825631624640362232979899401801929714087651997005452036941267871005946616614568555407411191427216066922623276510501891155862085843522173132599676285096710967075167665096476668014706799824749028398097972130494571713403063047222842968295360080751257595093091804089831890885193445679182507064550994731968298331496983772681509497619406944568918334928016273585134459711733485736746311463238437556988552174722349135432798006330972606860940843283953741090164781833400295577030153278140050659223190387346837289852262735088057763055112140133190446409833464284790727061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a92f4231d075344e1c801e6b7d31e23f5505ebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dein-abiball-fotograf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deineabibilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainzschmeckt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dein-abiball-fotograf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deineabibilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainzschmeckt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016def25cafc00000403004630440220623b3ccdf1010247d6f38a40259d6a736ad4d60401430a4207120d972335e5bb022020c01c86fc961df1ff9fc08a5cab8cf5676f8e1020239b77cf60e978c7080b34007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016def25caec0000040300473045022100e238be736d3e570d0ca1a030c4c523ec9e7302f841911dd52e2946f06406b6ae02207ec83c07b9cc252f508916882cfcdeb18bf62bb9569327a72cc713f0e275fb81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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