www.klassik.s-fahl.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:c3:9d:4c:11:70:61:bc:5f:a9:69:1a:ef:98:43:8d:32:4d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.klassik.s-fahl.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c3:9d:4c:11:70:61:bc:5f:a9:69:1a:ef:98:43:8d:32:4dSerial Number (int): 415013289040228232640231962775275661242957
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6f:89:c6:2a:46:58:c6:d0:fb:0c:ac:e2:16:c6:74:7f:a8:c4:36:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e8:9a:ce:d5:6a:89:f5:17:43:16:d9:e5:ae:19:a9:92:8d:fa:31:ef
Fingerprint (sha256): 4e:b1:5f:c3:6e:08:f3:1e:7a:2a:b1:e6:6c:6d:5a:e6:75:b9:9e:09:6e:26:24:87:90:b4:b0:b1:1c:37:dc:72
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.klassik.s-fahl.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.klassik.s-fahl.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.klassik.s-fahl.de
Other certificates including the domain name s-fahl.de
(limited to 100 certificates)
biografie.s-fahl.de
www.s-fahl.de
www.ohg.s-fahl.de
internet.s-fahl.de
www.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
klassik.s-fahl.de
klassik.s-fahl.de
ohg.s-fahl.de
www.klassik.s-fahl.de
www.s-fahl.de
www.biografie.s-fahl.de
www.s-fahl.de
3d.s-fahl.de
www.s-fahl.de
web.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
portfolio.s-fahl.de
deutsch.s-fahl.de
www.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
www.s-fahl.de
www.ohg.s-fahl.de
internet.s-fahl.de
www.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
klassik.s-fahl.de
klassik.s-fahl.de
ohg.s-fahl.de
www.klassik.s-fahl.de
www.s-fahl.de
www.biografie.s-fahl.de
www.s-fahl.de
3d.s-fahl.de
www.s-fahl.de
web.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
portfolio.s-fahl.de
deutsch.s-fahl.de
www.s-fahl.de
www.s-fahl.de
www.klassik.s-fahl.de
Certificate
The complete raw certificate details for www.klassik.s-fahl.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISBMOdTBFwYbxfqWka75hDjTJNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMDcwOTQ0NDlaFw0x ODA2MDUwOTQ0NDlaMCAxHjAcBgNVBAMTFXd3dy5rbGFzc2lrLnMtZmFobC5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFMe8QlyqBwRDMaxsjvydI2 Yhe0qlPv/cYk0V1cAH5tAKxf94bdR7texLaXeNTtlHXyE5ni3UcaDUsDdtW65VdN q6KaInZlR2EtNk5Q9QiYsId54t84lfHfwS/qxqDas5DkHxSuMtfMLs6o/yfibxO0 f47tQ1mtIluormJuzgvwq4GNW3H5XaaeitcQKxfaHz0lVPedir022pbmVV72kDkt 5bZue3Dk45AKoBQJRGxOzYAjZfrP/SOIVyh/OTCqXReSDSzUBgvsUdr9WwG+10Gg lsMUZR1UWcEZr5pH2UWPBOZ94AgUojG91Y2UWZ6KkQL+AG2pItfrjCOHyLXQvNkC AwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUb4nGKkZYxtD7DKzi FsZ0f6jENmkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghV3d3cua2xhc3Npay5zLWZhaGwuZGUwgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEARZ3WACtCMVKS6oZ4pdCh 8mMOwQyoTsaFSTX9kxpedv3CFkwONONL4wON2COpJT8qg88U5IA7DCvsUkU1Uzp8 p9F4sFn/5UaOI6EdWS+7eyF/GTthk5K3nCLW1JVaSBS3+5CSfDvSSL+6854j2eaA C9ODKq5+/T2fI2hplK5l+2ACmYyjqNOASnPbj6KeVBmKpj8rel+5EaqYrqayKtdX Gc+12wkM+aSJWTzS2uXiEU0kikXdyxoThN3WmlOfDC4HuI1RJrM/RWlrnjGEjhqI ZUGoBfwbS6X+D5T4J1tv2iEx85dpIXTfskW0+2/7SauuU1QsDUI7k8Ul4rCYKzyu hg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ux7xCXKoHBEMxrGyO/J 0jZiF7SqU+/9xiTRXVwAfm0ArF/3ht1Hu17Etpd41O2UdfITmeLdRxoNSwN21brl V02ropoidmVHYS02TlD1CJiwh3ni3ziV8d/BL+rGoNqzkOQfFK4y18wuzqj/J+Jv E7R/ju1DWa0iW6iuYm7OC/CrgY1bcfldpp6K1xArF9ofPSVU952KvTbaluZVXvaQ OS3ltm57cOTjkAqgFAlEbE7NgCNl+s/9I4hXKH85MKpdF5INLNQGC+xR2v1bAb7X QaCWwxRlHVRZwRmvmkfZRY8E5n3gCBSiMb3VjZRZnoqRAv4Abaki1+uMI4fItdC8 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415013289040228232640231962775275661242957 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-07 09:44:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 09:44:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klassik.s-fahl.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26421521138555183318788812562848044263715810049674949812504750148882339739129338060921186610372002539567918298357452480019836651945699984147050655602687383822563131760398747850241316221664633568756893340734164984704557605636022605330370299363132187117591689322788574199422230587121716462030347684807876791267596275469892979415932309352125027068582775494837214116511714139388857605619746509437360800226137393948720103736172607978678872895006290001317428801779380722802001090301255911204639846837825654834733245442621008001840095789759759529939170518474454464713325658937708349637448029014489851117734495632943142190297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f89c62a4658c6d0fb0cace216c6747fa8c43669 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klassik.s-fahl.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00459dd6002b42315292ea8678a5d0a1f2630ec10ca84ec6854935fd931a5e76fdc2164c0e34e34be3038dd823a9253f2a83cf14e4803b0c2bec524535533a7ca7d178b059ffe5468e23a11d592fbb7b217f193b619392b79c22d6d4955a4814b7fb90927c3bd248bfbaf39e23d9e6800bd3832aae7efd3d9f23686994ae65fb6002998ca3a8d3804a73db8fa29e54198aa63f2b7a5fb911aa98aea6b22ad75719cfb5db090cf9a489593cd2dae5e2114d248a45ddcb1a1384ddd69a539f0c2e07b88d5126b33f45696b9e31848e1a886541a805fc1b4ba5fe0f94f8275b6fda2131f397692174dfb245b4fb6ffb49abae53542c0d423b93c525e2b0982b3cae86