stage.h-hesse.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:be:d0:03:59:f2:b2:69:24:6f:94:de:03:90:19:1e:72:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage.h-hesse.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:be:d0:03:59:f2:b2:69:24:6f:94:de:03:90:19:1e:72:5e
Serial Number (int): 413379290266396018245057056260202126275166
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 67:98:ee:e5:5a:a0:16:22:8f:67:35:93:1e:d8:10:cf:71:d8:4b:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:92:8d:34:d8:0a:f4:3f:f4:f7:03:1f:b6:50:e1:ab:a3:a6:87:37
Fingerprint (sha256): 4f:2d:87:37:09:ce:8f:9e:78:45:fa:e5:4e:7c:e2:0f:df:22:cf:91:88:ce:c6:2a:b2:1f:22:1b:74:96:82:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stage.h-hesse.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.h-hesse.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.h-hesse.de

Other certificates including the domain name h-hesse.de

(limited to 100 certificates)
www.europinios.lima-city.de
pewe3737.lima-city.de
www.h-hesse.de
versicherungen-betrieb-kfz.pkwversicherung24.eu
ladyms.lima-city.de
www.h-hesse.de
www.home-updateinfo-com-mail05664302.lima-city.de
www.hhfoto.lima-city.de
tuqroevbtdicbel.knockers-2.at
www.e-trotti.com
gztduypgagsesqf.garagen-schutz.de
h-hesse.de
kittycatcontent.lima-city.de
melavita.lima-city.de
brmvpflporjlegv.execbase.de
forenhosting.net
hannahsophie.de.cool
cloud.h-hesse.de
www.vorosz.lima-city.de
blackbeard-online.de
dev.h-hesse.de
mysql.h-hesse.de
m.h-hesse.de
www.wowdeals.online
www.doerper-faesschen.lima-city.de
phpmyadmin.h-hesse.de
licht2002.lima-city.de
www.auixis.lima-city.de
behindthesun.eu
mx.h-hesse.de
db.h-hesse.de
assistenzhunde.4lima.de
loxkzexbnkftqcy.lima-city.eu
wp.h-hesse.de
rolotov.lima-city.de
rialtoing.h-hesse.de
www.rabeck.lima-city.de
webmail.h-hesse.de
dbadmin.h-hesse.de
music.creativemd.de
www.lxcalflxw.lima-city.de
a070c734f8d9b735.h-hesse.de
hostmaster.gullstop.com
webhostingfinder.de
unterkunft-schwarzheide.lima-city.de
dhk01.lima-city.de
steamtec.lima-city.de
holzmich.lima.zone
wwwssl.h-hesse.de
h-hesse.de
www.jon.nikolic.4lima.de
dev.h-hesse.de
2wwwgateway.hescor.com
www.nruehmann.lima-city.de
m.h-hesse.de
www.storysplinters.com
pwg.wot-clan.de
ruayqvqdggtkerc.abc-marderabwehr.de
www.rottgauer754.lima-city.de
clausreinhardt.lima-city.de
www.h-hesse.de
ssl.h-hesse.de
email.h-hesse.de
neke.lima-city.de
phpmyadmin.hescor.com
www.fakak2015.lima-city.de
www.uragan.lima-city.de
h-hesse.de
store.noobi.eu.org
mail.jugend-welt.de
shop.gamerarmy.de
mail.kevinkoziol.com
h-hesse.de
foo.rc-camp.eu
stage.h-hesse.de
wallet.spindelberger.com
prioknews.2ix.at
hfconservativstatic.h-hesse.de
www.athraxas.lima-city.de
www3support.h-hesse.de
dbadmin.h-hesse.de
db.h-hesse.de
www.h-hesse.de
smtp.h-hesse.de
magento.digistop.de
h-hesse.de
authsmtp.h-hesse.de
www.h-hesse.de
wwwwsupport.h-hesse.de
zt.4lima.de
magento2.h-hesse.de
as-projekt.net
dbadmin.h-hesse.de
www.playboobs.lima-city.de
strab312.lima-city.de
blog.h-hesse.de
www.felixcloud.4lima.de
www.coding4everyone.lima-city.de
correo.kaicolin-ternes.de
www.derblutigepfadgottes2.lima-city.de

Certificate

The complete raw certificate details for stage.h-hesse.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfnPbky6kw55UocxXXMt
+IWje6gA1rYRON5p01jqNB/E++rBpS9UvZ9wCjdPiFQ6/fbiQ7yRePvpEIAS6qRB
QzpHGioQ1ZWFYTZfaSfXJl0YLsJ66OFFbFED6XsTRPE34CpyxivFXIdCXtZNMg3D
4GqkAZCJJiwudKbbxy5GWr50t9fhV6ptsIgQQuuPepiUdatmn2RQYpCRWRnX9q+5
PecLVFUMrQ5Byi3uT5qrmmF7OrXtZqAAUJF12hj0t44iTCKsddSXEQ+rmoPweSnO
WjlBvmDmCTqzoe9taykVwpSoEveXhFL7E3dUa1bht3L+p6cV8kllFdD8n8sHWqi4
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413379290266396018245057056260202126275166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 11:14:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 11:14:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.h-hesse.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26002038556733797006493287619385431216580411730615133506674658754564649392794407804099270268758776600186751975051134588773064471223320871147937449694041855106215080938522941446012029311230497614465208231208361979196916517750090636998093223930960934524196633284061278976005040623245464857639733995810484964963536732829062130671219253088552034202442574332807968062129631294435032280713317412622469937062383547727429536601006526058405667183914529089741426960998804762138797056579752115442649849938546728500296680747038497831484022549623258518547419440405446288391804457945855167731781144294304362381983834502269797709901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6798eee55aa016228f6735931ed810cf71d84bcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.h-hesse.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701545831400000403004630440220084e93b21d6a9684fb4d4aacdff55477a705039c7782a4c6a4c255192cbe7b3302203c23b1b1b8237ea0c603a94e6e6811fc8d39a5e7563f30e9cc7976d38a538a6a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170154583120000040300483046022100d04b4cd6d80665c2ead03922c8f3b4ec6e56e1565e0af56758f7b13e1d0ae63e022100bae27640ecaa28f7d917add378abf540901d63e108827198350b605f90b87f15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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