gruener-punkt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:69:57:6b:e2:80:21:83:d7:57:50:23:6c:c3:13:9e:b6:c1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gruener-punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:57:6b:e2:80:21:83:d7:57:50:23:6c:c3:13:9e:b6:c1
Serial Number (int): 384294995259112823776278075825678922462913
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:96:67:20:bd:2e:fb:b8:39:2a:d4:d3:1f:9a:22:e3:57:6b:60:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:89:d3:3e:b7:0a:f1:31:27:9a:74:41:9b:8b:a2:6b:5b:52:6d:d2
Fingerprint (sha256): 57:ec:ad:ce:4d:b4:ff:bb:9b:3f:95:8d:1e:12:49:f8:43:80:08:38:b3:fb:12:26:00:9c:1f:e3:6a:dc:c1:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gruener-punkt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gruener-punkt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gruener-punkt.de
www.gruener-punkt.de

Other certificates including the domain name gruener-punkt.de

(limited to 100 certificates)
gruener-punkt.de
helpdesk.sgmc.org
servicedesk.eugenustech.com
helpdesk.sgmc.org
support.ecctis.com
www.gruener-punkt.de
helpdesk.sgmc.org
nge.gruener-punkt.de
helpdesk.sgmc.org
support.ecctis.com
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
webmail.gruener-punkt.de
webmail.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
adfs.gruener-punkt.de
support-services.gruener-punkt.de
portal.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
portal.gruener-punkt.de
servicedesk.cheaperwaste.co.uk
nge.gruener-punkt.de
helpdesk.zultys.com
support-services.gruener-punkt.de
servicedesk.eugenustech.com
nge.gruener-punkt.de
support-services.gruener-punkt.de
portal.gruener-punkt.de
infopfand.gruener-punkt.de
servicedesk.eugenustech.com
gruener-punkt.de
helpdesk.sgmc.org
portal.gruener-punkt.de
servicedesk.eugenustech.com
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
portal.gruener-punkt.de
gruener-punkt.de
portal.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
webmail.gruener-punkt.de
infopfand.gruener-punkt.de
webmail.gruener-punkt.de
helpdesk.sgmc.org
support-services.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
www.gruener-punkt.de
helpdesk.sgmc.org
login.gruener-punkt.de
servicedesk.eugenustech.com
helpdesk.sgmc.org
adfs.gruener-punkt.de
helpdesk.sgmc.org
web0.gruener-punkt.de
adfs.gruener-punkt.de
gruener-punkt.de
helpdesk.sgmc.org
gruener-punkt.de
nge.gruener-punkt.de
portal.gruener-punkt.de
gruener-punkt.de
servicemanager.loacker.com
servicedesk.eugenustech.com
gruener-punkt.de
web0.gruener-punkt.de
www.gruener-punkt.de
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
nge.gruener-punkt.de
servicedesk.solidsolutions.co.uk
servicedesk.eugenustech.com
nge.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
servicedesk.eugenustech.com
portal.gruener-punkt.de
portal.gruener-punkt.de
servicedesk.trencon.co.za
gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
portal.gruener-punkt.de
gruener-punkt.de
servicedesk.trencon.co.za
portal.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
infopfand.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
servicedesk.solidsolutions.co.uk
helpdesk.sgmc.org
helpdesk.sgmc.org
helpdesk.sgmc.org
infopfand.gruener-punkt.de

Certificate

The complete raw certificate details for gruener-punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISBGlXa+KAIYPXV1AjbMMTnrbBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjMwMTU3NTJaFw0yMzEyMjIwMTU3NTFaMBsxGTAXBgNVBAMT
EGdydWVuZXItcHVua3QuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGkU3rfyWsQntXThOallG1ydbGJD5zXhXhw5OEU6X6pKTGwV6ZiIi1guNfc7F3
nLFr1WX/3yAAT4pcp5KunHDQ9wyyX9TBtN6ser/4YisNDbwxuXvo9eu8HZzvZloe
M3Kcvp4wkQVYotcdGESibh6KKhwPbPxuVfemBo+33vS/q5kGHyyJ5bq6kFZZdnXX
xRia1fHC7XpsmaTVf1cs1pHd5wt1qNml+fCMiUNWnf2WX4l0jwWkmkZmkJtJWMFD
jTpBljbgRu5MgXFVC/BcQ1SbL+w6ejFMQwT1Ubss+V70i3LgmvyP1HzOKrI2aYFN
dH+ymhGWO3IYjq1Gke90q7gnAgMBAAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFOyWZyC9Lvu4OSrU0x+aIuNXa2BnMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMDEGA1UdEQQqMCiCEGdydWVuZXItcHVua3QuZGWCFHd3dy5ncnVlbmVyLXB1
bmt0LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGKv/jd1wAA
BAMARzBFAiEAqvIJmUNtyX6gJ45n0KaIz2ccA+jb+qeBbRpD0RFE9AkCIGpKrQ64
zIdLRTO/ccaLazyCGSFsmWZzaDOjhpayyCeHAHcAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGKv/jd6QAABAMASDBGAiEAmuyFNS4/ViJUeeXacnaX
JM5KVg80iEgsyhkjnJX6M3ACIQDRFqTeO/phFCI5RJIbGlY2UceGtgqsdp+VSzTt
R3/gHTANBgkqhkiG9w0BAQsFAAOCAQEAr9+VJm9VjmCVKZYLAMC3CMsfv/jtyTg2
5Ab6CFRk0ghPgXVg6EXWY/tMFKB/oiyowF0AN3aT8ie3EGyAGq3n+CF3W3tqPN7G
ioEUL1W591Mi5/U3eBXw4RpakRUTpjTZQSsIGCY8uInuntkRhQYTqRfyDfOhh+iw
EbUmlIQyC3OJuHfqjQGSQQ5AR60sBJP/ZoCDhoHa6jmzIOXph9VXDfamadz6+tzz
eyUFP9K5aOD/nSeWAcXpYWNhcfOwUgJcneER1198OYTklE3KHN7EHs6YDGgVpzfp
UHzrndqR65Snb0aFvFxOgpbYPtWmbwtL6IAWDRZresj5YiT3QYSDJA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpFN638lrEJ7V04TmpZR
tcnWxiQ+c14V4cOThFOl+qSkxsFemYiItYLjX3Oxd5yxa9Vl/98gAE+KXKeSrpxw
0PcMsl/UwbTerHq/+GIrDQ28Mbl76PXrvB2c72ZaHjNynL6eMJEFWKLXHRhEom4e
iiocD2z8blX3pgaPt970v6uZBh8sieW6upBWWXZ118UYmtXxwu16bJmk1X9XLNaR
3ecLdajZpfnwjIlDVp39ll+JdI8FpJpGZpCbSVjBQ406QZY24EbuTIFxVQvwXENU
my/sOnoxTEME9VG7LPle9Ity4Jr8j9R8ziqyNmmBTXR/spoRljtyGI6tRpHvdKu4
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384294995259112823776278075825678922462913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 01:57:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 01:57:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gruener-punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25066836640932773493188383576413859480599892967309462460834374375132209001737066056571221216405996928245263713053075865513984556771220269815425887750141966204733555012432613886715347097753321245871739997809021241513283209996728735133023165112877000201236036587754392895269301571508766729575434716645518020102255723641628422300926772139047768371645601946036070993181117600784337047367125609317910712597744551227694484196453632031917137256919800900386969371905360000496427895638319449279387268330247534879753345127670930986820220809564162900397553326812552909781152922616283368560036935479043532653820469165602103867431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec966720bd2efbb8392ad4d31f9a22e3576b6067
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruener-punkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruener-punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abff8ddd70000040300473045022100aaf20999436dc97ea0278e67d0a688cf671c03e8dbfaa7816d1a43d11144f40902206a4aad0eb8cc874b4533bf71c68b6b3c8219216c9966736833a38696b2c827870077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abff8dde900000403004830460221009aec85352e3f56225479e5da72769724ce4a560f3488482cca19239c95fa3370022100d116a4de3bfa6114223944921b1a563651c786b60aac769f954b34ed477fe01d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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