www.iqdigital.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:08:e1:12:66:d7:8c:8b:e6:f9:9a:98:2e:0b:f2:a1:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.iqdigital.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:08:e1:12:66:d7:8c:8b:e6:f9:9a:98:2e:0b:f2:a1:e0
Serial Number (int): 273939107835346267380797252215401295815136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:90:b2:01:af:c8:9c:46:72:fa:a2:b1:ac:b0:7a:19:e8:b7:cd:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:59:5f:dc:6b:1f:e2:d9:75:e5:80:1b:b5:69:4e:24:d4:a9:c4:f3
Fingerprint (sha256): 55:20:3d:5f:f5:7a:2c:f0:80:77:20:21:3c:5c:91:be:a4:a7:fd:d8:3b:3c:2b:b1:d4:65:5a:a5:44:0d:0e:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.iqdigital.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iqdigital.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.iqdigital.de

Other certificates including the domain name iqdigital.de

(limited to 100 certificates)
cmp.channelpartner.de
consent.iqdigital.de
zcz.cmk-dev.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
cmk.iqdigital.de
iqdigital.de
mum.cmk-stage.iqdigital.de
arr.cmk-dev.iqdigital.de
emo.cmk-dev.iqdigital.de
consent.iqdigital.de
iqdigital.de
tag.cmk-dev.iqdigital.de
zol.cmk-stage.iqdigital.de
faz.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
mms.sp-prod.net
cmp.channelpartner.de
tep.cmk-stage.iqdigital.de
cmk.iqdigital.de
default.cmk-stage.iqdigital.de
sz.cmk-dev.iqdigital.de
cmk.iqdigital.de
tep.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
jet.cmk-dev.iqdigital.de
*.cmk.iqdigital.de
btc.cmk-dev.iqdigital.de
zol.cmk-dev.iqdigital.de
www.iqdigital.de
cmk.iqdigital.de
fuw.cmk-stage.iqdigital.de
zcz.cmk-stage.iqdigital.de
www.iqdigital.de
tag.cmk-dev.iqdigital.de
ccz.cmk-dev.iqdigital.de
consent.iqdigital.de
wis.cmk-stage.iqdigital.de
wis.cmk-stage.iqdigital.de
zmz.cmk-dev.iqdigital.de
sci.cmk-dev.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
cmp.academics.at
default.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
fuw.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
datenschutz.iqdigital.de
byron-dev.iqdigital.de
sz.cmk-dev.iqdigital.de
jet.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
zol.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
cmp.academics.at
cmk.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
www.iqdigital.de
mms.sp-prod.net
ccz.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
sz.cmk-dev.iqdigital.de
admin.qa.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
iqdigital.de
default.cmk-dev.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
wisd.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
iqdigital.de
cmp.academics.at
arr.cmk-dev.iqdigital.de
wisd.cmk-dev.iqdigital.de
ccz.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
cmp.channelpartner.de
www.iqdigital.de
mum.cmk-dev.iqdigital.de
www.iqdigital.de
hb.cmk-dev.iqdigital.de
consent.iqdigital.de
www.iqdigital.de
cmp.channelpartner.de
zmz.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
cmp.channelpartner.de
wis.cmk-stage.iqdigital.de
consent.iqdigital.de
zmz.cmk-stage.iqdigital.de

Certificate

The complete raw certificate details for www.iqdigital.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wfV83O3UMkIskesSJtv
cBwNTaSUK6r+tApJoNRaY43vsN1TM7/YbA8Jdzyv6yufvI7ZfalbYQpuQwm4LXny
2h8yjKXDxluNflcQFP0iFCpxITqWdZftvPCv0aTh97RZu4PIuGn2g1KWCuDVLa/G
6T60ixmLrfQpeBbIFfDStqqL8O79PpqVzWMApRDCA1tmkbO6ekJADv0+1JV87gRy
kbrUaAg+NiqhYvsmKt373GGBSf5jAZat9u/7Gw1lQhExnQjYZqVM98/VhFtbdDOe
we6M2HtB+8M4um5ZNanMZTyU3j8I5Pl8xayPLWz6Xhu2U1YdcB+Noj77moGD8OAo
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273939107835346267380797252215401295815136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 22:53:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 22:53:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iqdigital.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27145099518082858135743248115842141821524950330907596231599666829152408037685667891358120653241196829350170613128555929461866023271994098825701023787560272856068280012733265423874960593005119892170121456752538400934451325878169589169620593662849388660987570659738251591183142006266046509446929961127192318079516033928430106205542464426438668018159974558914806621636355196999056902121608452155518931119103219456318098877527265844448519297727803497749953300176812920225826459471019262789227035378860842041626373839909361513782140552095228962347543936457317816795527820102600115709493982460186926529357652507059044755519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d090b201afc89c4672faa2b1acb07a19e8b7cd25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqdigital.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff8df96a80000040300473045022027a2fa541b0e3c583bccc3f611cc1a35715dd1c19fc219e858fabe7cb763bf37022100f8c98b3ac92b93a9a9b5710196b56151333d37a00e36cba24ff9b0ba2db1c7bb00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff8df9696000004030047304502205fac5fbb8c4e2eea9bf79b33536a1e134c19bacd0e68d84eb8dc2951f6012600022100cc405e955fdc0d260cd5ce65d6dd68651793aa5f2129696f5322fe4445d1211d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00730f4233cd580220623226723e04c628ed62ccb1fc1845d4a95d57dd870010fdea45a0959c5458e256948f0ce453e64800eb02d85b72f59b3d0fb6d25fe861b952b7862864d25e4d8f25ede292f57f664f87fdde5d5d36c00fd3cfd2b057eb3a080635f595b677719744ab6894875f4d544ba4b4216c07c8ca5e296a52147d0668ef7c965969909b5578c4a7e3c3a9e6aa40ce9c01d40a6bab0880d7e6453db918e58c18a8693ef4149deb0ce2c9ff994f9c390de0c23baa153f5cd60a64ebea84af2baebda57b6b3dda848ede3ccc77effc5715399f238274f6de609bba9195ead4ec388335931633a8ef85d61a35e0677ce1b26f9e656c333d7e7ffe4ff7d4