spd-bebelhof.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:15:4d:7f:10:1b:c6:ae:27:38:3e:6f:d0:26:f3:b5:bc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spd-bebelhof.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:15:4d:7f:10:1b:c6:ae:27:38:3e:6f:d0:26:f3:b5:bc
Serial Number (int): 286886351486262981663666247955541033989564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:7d:52:54:83:cc:e9:94:1e:11:36:d8:83:49:1d:69:1f:8b:1b:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:9f:76:c9:52:c4:60:91:c3:23:be:93:12:f1:e6:c1:47:1c:8b:b0
Fingerprint (sha256): 4d:ff:57:66:11:c5:11:6b:80:ff:60:cf:7d:b3:5a:1b:8a:1d:43:ed:07:d2:70:40:3f:2e:df:cf:b2:51:11:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate spd-bebelhof.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spd-bebelhof.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spd-bebelhof.de
www.spd-bebelhof.de

Other certificates including the domain name spd-bebelhof.de

(limited to 100 certificates)
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bs-innenstadt.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bs-innenstadt.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bebelhof.de
spd-bs-innenstadt.de
spd-bebelhof.de

Certificate

The complete raw certificate details for spd-bebelhof.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286886351486262981663666247955541033989564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 00:40:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 00:40:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spd-bebelhof.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809369933731159033357754969454076763768678996368611157116753367230948081473669411566084534984749661601074262504080042950666046751989933446467018522023702494666847406866412998080261953141154846864025403587511906750021198201079706115741468367568976897366194740170322573284754303836500675539959930758691498375609220133472605483836334042903162480448234165832079859773011865924833730807972794947331149540460208438287531518563263343868730329588995268171143424913457396266236331018322378017352241644958113169484646722988739218876695413286929253254856854360527732486311277121338272999805954042512939441997119819998862909433464813784576536273329021338782075797602653597459318779369689028761518655250221250134101891000699781788997406158247501424088864065424596000799022990230436349815789386139379200722649826069634118773612039831682334212125817638257689230594955029969566703488105754338622460416851283083103631343439418626323656750330966872942661473701162729429290313547585987058449083792119954007134479502720690193422401417297645219643712700287287925390367971817741408660375468687730596153972296735678128354490485647922623967024040118646146654272240560024737437435449917306583704811051079637598128104375185320739764992573008484559545306846271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa7d525483cce9941e1136d883491d691f8b1b62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spd-bebelhof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spd-bebelhof.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001667561c8a80000040300473045022100a42a79460005882a83404473965698e5313c135f1762a75fa57edf8d1233cd3002203e9fc91db12e6e0140b968c4348a88e68b3addef908c41ce231dd7ec2ecca3c5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001667561c90d000004030047304502201a839f67e21cad9023fef8bf99a786358abef0e89a1d8c2572b0cf82048945110221008ab06a242c4be06858987825cbe7ea101486424ef6b6114f2bdc3adf395ea143
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b14a67f0672d87ed6e13537f80ae4f31e948fe3e1e31661b10b536b99559768321ce8900150478b499f17a8e55c2ae5e3d83174ea0fa9191c7b5ab0989bf316b77d750ec71d7730d14bd6bd6691c349f8c792e29024cb18fa8d076303509c81a93b3f66a84ce0276ad4f191350afba1375707ef05f49f014114413fa8c308025dc671472310badc3e3673d75ac493cff252fbf9810f0e47a81a599a437dd3c3161b063e8508772254a4ed2645393fcc2e607e9c288d7a8a62b6827c893875641aa31a8fe5b443eab6867fa417f5d6ad700ff2a84da1ff3ec341bdf14451660bf04cf6b28b1d87828134269f070c8abcba69ae31c9e6fef42a20b5b346d0b188