git.timolia.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:85:42:78:99:5b:33:84:48:fd:95:8e:52:00:7c:52:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.timolia.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:85:42:78:99:5b:33:84:48:fd:95:8e:52:00:7c:52:06
Serial Number (int): 329570463640539776460958560598197115048454
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:34:92:17:6f:3b:90:80:d2:34:cc:23:9c:1f:9d:79:b4:51:b3:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:45:87:a7:e3:e2:7d:48:da:62:56:eb:9a:91:f2:04:8f:e1:96:e1
Fingerprint (sha256): 55:e0:68:30:7a:50:bd:3a:10:ea:d8:0f:19:01:69:0d:17:cd:03:b5:78:30:c6:4c:1f:c5:39:69:6d:7a:9b:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.timolia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.timolia.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.timolia.de

Other certificates including the domain name timolia.de

(limited to 100 certificates)
howto.timolia.de
www.timolia.de
www.timolia.de
gitlab.timolia.de
timolia.de
siimonwi.timolia.de
git.timolia.de
forum.timolia.de
wi.timolia.de
forum.timolia.de
dev.wi.timolia.de
wi.timolia.de
www.timolia.de
www.timolia.de
howto.timolia.de
git.timolia.de
dev.forum.timolia.de
piwik.timolia.de
s.timolia.de
wi.timolia.de
wi.timolia.de
forum.timolia.de
api.timolia.de
cmk.timolia.de
forum.timolia.de
siimonwi.timolia.de
haste.timolia.de
haste.timolia.de
haste.timolia.de
www.timolia.de
www.timolia.de
forum.timolia.de
shop.timolia.de
www.timolia.de
forum.timolia.de
git.timolia.de
www.timolia.de
forum.timolia.de
www.timolia.de
wi.timolia.de
howto.timolia.de
forum.timolia.de
timolia.de
git.timolia.de
s.timolia.de
howto.timolia.de
timolia.de
wi.timolia.de
git.timolia.de
vs.timolia.de
timolia.de
forum.timolia.de
forum.timolia.de
forum.timolia.de
www.timolia.de
wi.timolia.de
www.timolia.de
api.timolia.de
howto.timolia.de
git.timolia.de
howto.timolia.de
forum.timolia.de
wi.timolia.de
haste.timolia.de
timolia.de
howto.timolia.de
howto.timolia.de
timolia.de
piwik.timolia.de
www.timolia.de
s.timolia.de
forum.timolia.de
s.timolia.de
piwik.timolia.de
forum.timolia.de
howto.timolia.de
api.timolia.de
api.timolia.de
cmk.timolia.de
www.timolia.de
git.timolia.de
www.timolia.de
howto.timolia.de
timolia.de
www.timolia.de
www.timolia.de
s.timolia.de
bwi.timolia.de
git.timolia.de
haste.timolia.de
forum.timolia.de
www.timolia.de
timolia.de
wi.timolia.de
howto.timolia.de
s.timolia.de
git.timolia.de
timolia.de
wi.timolia.de
git.timolia.de

Certificate

The complete raw certificate details for git.timolia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArda6xnJQCzU9woC1ZLLM
9W+PY9w4SZ11heJPzywWegx87gjBo0OH0pAb7WyiiosG2EN1podSlvpe6s+e19a/
rydiYsSCpZoZMR32lFvEH/nUKkNNmkPJIObOowIp4uCTjujkSrWvzLwnHYscNv+q
6DsnBf0f+0s14Z/tRMYQoAXtM5BVxECAdVkdMHjJLt3BI0pV/pT739xi/NvFij1R
m18/aVWnczFmuT2BlBtqgXe3EZLdd7q3b9ThMe/vcKfnJtO68HbBfKAgAvUNAUkn
XdW1gFOATrF4WcchayA5nckR9lHGbRMyA9o7F0wly20Oh82ZPItNrP6bKL0wVqE4
SguBA+DX3egUu99htf8wG/km4huYM7+Bttqb5OPG6UJ7SjtPLSwfVPG+xgJjoiDT
+PxH4JIWBx2Ey0NEIsOzqWkFFKsQWAHWzDge6NmN+AvhUw1dHnmNpW2dacOT2u69
Kj8NfjERDkcRDkSSp4J1FgIaBbPdbbHQ6NLOjTyAxPJ2e0+YbT8+Z4cEIyFFw+07
KlldPOEMtQJnLEAWAef1wJ/E/M+6kNOOHtdyCy8TwpgcwZO7e7hICBumcxkfDCMN
jfzNARIe2pz8PrhWMyBd+Od0yRBp2H5b+zhtB5qHD1QDGtwLDy/ddhQ7HbSHXefw
HfGSYB22MpTFmAm3VJDx90kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329570463640539776460958560598197115048454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 20:32:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 20:32:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.timolia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709200378065650729141553829792491755475267405379587595149595330665506076034832717803440452743481538709629439897363212546242961552777057719836853907213425575117378491609796524007551376404152047556829185722021077431214159270997783873441093085876463734612344751109679864593498055609815937842811817587567858274457425651994543593470712076280953600754941571010599097353243055042829215864930867198952768143694521384587571702926857432966518097081256517346739312658771907523461855085493633124096810794856518198934968812394827242039564871197849172877089839901752541298751963842380455019383629330455094948376673069354660281136903597314338936964618157073031815640657470704553753310457743318057139403462075650679146886833403384380340631129220075614740581366637155205660080455550262466808983645997246535738548373424274914402483955915857994051428648584350820386096769617541654712963680994325310851795925781469317026870838208688357030888701370392394870417931956412566969832949553892701355706761045786770249838503956937612518666901317706845810303440256113162660346536461369349897196888806301363991929132191828728887186875194537874293738467162985996640193131534481525603666597442759334505857465927228825709662357601823194871103820412254048580233459529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a83492176f3b9080d234cc239c1f9d79b451b3c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.timolia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b7bf4b6d20000040300473045022056adeac67170db59a8b7e23978cd1a3b9586f4991284436c13fe775e9df4499d022100aba72e1683fcfe446585666bebfa7d19559640a3749368d8ff1bc9fc137a1a2e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b7bf4b7f40000040300463044022038e8b4dc1af25e485501099ca86b3423a732fa92a4cb9fd13e9174e936b8e8c2022044688d6d585c7103fe7d234e22428eb5b59dbed13958329e6e276ef2f8098e00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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