kfz.main-echo.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:41:7b:03:33:b0:87:0b:49:1c:4c:da:fc:e1:8a:24:40:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kfz.main-echo.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:7b:03:33:b0:87:0b:49:1c:4c:da:fc:e1:8a:24:40:c0
Serial Number (int): 370731009245662947476975413836356759339200
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:11:6e:70:e5:ea:af:41:8c:df:75:d5:04:04:b4:60:fe:a6:f2:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:65:d8:48:a7:46:0a:fc:b5:c9:18:c8:97:db:28:90:73:94:7f:0f
Fingerprint (sha256): 53:d4:e6:ae:20:0b:5f:77:b7:db:82:de:8f:35:5e:a0:0a:de:4f:4e:29:90:25:75:66:87:45:14:7b:06:1f:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kfz.main-echo.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kfz.main-echo.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kfz.main-echo.de

Other certificates including the domain name main-echo.de

(limited to 100 certificates)
*.main-echo.de
www.main-echo.de
main-echo.de
www.macmasterschool.com
*.main-echo.de
main-echo.de
www.jobs.main-echo.de
mediadaten.main-echo.de
immo.main-echo.de
immo.main-echo.de
sec.optomapp.com
main-echo.de
www.bachgaufest.de


immo.main-echo.de
immo.main-echo.de
medienhaus.main-echo.de
www.main-echo.de
www.main-echo.de
makler.main-echo.de
alpha.main-echo.de
beta.main-echo.de
main-echo.de
main-echo.de
event.main-echo.de
ryanehrenreich.com
www.bachgaufest.de
beta.main-echo.de
beta.main-echo.de
www.alphakangaroo.com
immo.main-echo.de
immo.main-echo.de
beta.main-echo.de
main-echo.de
www.kfz.main-echo.de
www.main-echo.de
www.studioskyfox.com
beta.main-echo.de
makler.main-echo.de
remoteaccess.dev-my.dmc-dxi.com
jobs.main-echo.de
jobs.main-echo.de
admin.unitut.ml
trauer.main-echo.de
makler.main-echo.de
www.main-echo.de
immo.main-echo.de
www.main-echo.de
www.adibhilmihalim.com
api.suburbanswings.com
beta.main-echo.de
moderncannabisconsulting.com
event.main-echo.de
medienhaus.main-echo.de
www.kfz.main-echo.de
trauer.main-echo.de
www.bachgaufest.de
medienhaus.main-echo.de
beta.main-echo.de
trauer.main-echo.de
harryflett.cluboffice.com
main-echo.de
www.jobs.main-echo.de
mediadaten.main-echo.de
trauer.main-echo.de
kfz.main-echo.de
www.main-echo.de
kfz.main-echo.de
www.kfz.main-echo.de
www.jobs.main-echo.de
immo.main-echo.de
jobs.main-echo.de
beta.main-echo.de
immo.main-echo.de
beta.main-echo.de
www.kfz.main-echo.de
immo.main-echo.de
pozyczki.sklep.pl
www.main-echo.de
kfz.main-echo.de
zarafa.main-echo.de
mainecho.de
beta.main-echo.de
kfz.main-echo.de
secure.main-echo.de
secure.main-echo.de
immo.main-echo.de
mediadaten.main-echo.de
webauth.main-echo.de
eloguess.com
www.bachgaufest.de
kfz.main-echo.de
tv.coibanh.tv

main-echo.de
beta.main-echo.de
static.vinicius-stutz.com

app.ia-supplies.com

Certificate

The complete raw certificate details for kfz.main-echo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbiWqA8TFQD6f0inN3n9
g8mOkX5qUDc3vFV71qssN73gNMdjT9k0sDM7wp+kOeZKNsOrRxyI55FgMiS6yn11
CSqC9iBj8Cwl9DCrKAwwamsh9u+548fJ9XMUF5xrDl4rJY8Mrc4tTw9dLKAFDHae
STe4TDEthuaA+OBkzsAHUBU/Xd0a+sIOVgaxG8B6VIRXcHdDBb47QG9evydE/UW8
vVyquFw/FfaeKRTADmpXhi9dWDxcmJp9iDOcgc39UaH5G8JHsMvN8o0rtgNalmey
EIlPk5ttn3CBDiluG8WKCDoZM+TeECg7Em4xjIIZsVla7L6NayPMOq3swbvc5TCU
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370731009245662947476975413836356759339200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 00:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 00:00:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kfz.main-echo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25969876500826914474563633090799630837353773116161089668145167979241393564913828580684167385882226264134038578240471243786838330901952354953925552962493169696181790780095776753623413019179322343477698445192460746315909121338562394788378937489870101733751930962198590731434849441969068395954498723508480258323468503838347661188199453764201445008944588971324093319322926737175956281204933646824135099234495056461150724974932776262785645394893160678811143943177061230258388938994669048558566996000406934334912027889624111992258340648587779700626976334025373504055687269219217426308699595706311683944707222845871912686721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11116e70e5eaaf418cdf75d50404b460fea6f20d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfz.main-echo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a70e885df0000040300473045022100d3bb87f7817a894afccb86ff20d51da854e8a6008c8c4fe54172a5c6bd27ce8f02205b9771cbb50022cd41fee27a7b04162d3c03b1cafcc1a43e790c871add4046c8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a70e885e7000004030047304502204766e083bfaf3f60018b22cff4fca7b315394279f657c21eb3548db73a86012f0221008a0027331642d80182c992257be684735a4ca7af31f26fd10674003d58215d98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003124ec5c7b95f993b60ea7330899c88ce8bfeff1da0a9d515084b078fee9a8b7a2b7ad9ee66f80dab73e33373d1ef7618b51669cd88182c313a69bc357e2696a005d4f4b91754885e4bb3f55d6f5c0972a006c2db41e9d497c6deb353eb781130ca18105e389153689e133e61fd512647dc6b9a03fdc64179388d3d946629cb89dcf6bd56a9933b7b0346a40b51453e6cd928bc484c3bc4264893f5ffabe9641909059cba4c6dfe2b485e9669a871bbdb29cdabc98586ce6b3cadfcf88da5f8e260e9ebffa86c591aa836dd8a7bd9734a844163faba2a8c65db7f05cef6eabc5bdd5283803e61e3410d16e6a6ac8707d9a0c7dcfccfd5b06810c205defe55d5b