www.holz-speckmann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cd:f1:e3:3f:9f:ee:01:db:20:65:77:3b:41:b6:4c:c1:43 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holz-speckmann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:f1:e3:3f:9f:ee:01:db:20:65:77:3b:41:b6:4c:c1:43
Serial Number (int): 418528552834667166273611319521357903741251
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:2b:37:af:d7:34:2a:cb:e1:1b:5a:b1:38:76:bc:7a:f8:01:b2:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:97:d6:85:c0:27:e2:b5:1b:ec:f3:58:79:b9:7d:11:30:56:1e:a2
Fingerprint (sha256): 59:67:ed:d8:9e:df:c1:04:d9:86:40:68:0f:9e:e1:44:1f:35:59:ea:4f:e0:01:29:79:2b:42:c1:d3:6a:a9:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holz-speckmann.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holz-speckmann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holz-speckmann.de
www.holz-speckmann.de

Other certificates including the domain name holz-speckmann.de

(limited to 100 certificates)
www.holz-speckmann.de
kiosk.greater.sydney
magazine.landroverusa.com
www.hochseescheinkurs.online
mx.holz-speckmann.de
lemagazine.landrover.com
epaper.treffpunkt-bau.eu
publikationen.kreis-goerlitz.de
magazin.zibibbo.de
online-katalog.baude.com
magazine.landrover.com.cn
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
kiosk.greater.sydney
shop.holz-speckmann.de
holz-speckmann.de
berliner-kurier.kiosk.plus
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
online-katalog.baude.com
epaper.treffpunkt-bau.eu
blaetterkatalog.rp-media.de
katalog.ud-shop.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
terrassen.holz-speckmann.de
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.holz-speckmann.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
kiosk.greater.sydney
medien.koinno-bmwi.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
www.holz-speckmann.de
bibliothek.bregenzerfestspiele.com
katalog.unzerbrechbar.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
kataloge.fuerholz.de
epaper.treffpunkt-bau.eu
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
online-katalog.baude.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
online.hansestyle.hamburg
webkiosk.sossenheimer-wochenblatt.de
medien.koinno-bmwi.de
holz-speckmann.de
berliner-kurier.kiosk.plus
magazin.em-chiemgau.de
www.magazine-kraftquelle-bgl.de
online-katalog.baude.com
www.hochseescheinkurs.online
online-katalog.baude.com
polsteraktuell.mediaflip.de
webkiosk.holz-speckmann.de
online-katalog.baude.com
kataloge.fuerholz.de
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kataloge.fuerholz.de
kiosk.greater.sydney
epaper.netzwoche.ch
medien.koinno-bmwi.de
epaper.transgourmet.ch
epaper.pt-magazin.de
epaper.transgourmet.ch
epaper.netzwoche.ch
cf.completesportsnigeria.com
magazin.tourismus.li
epaper.transgourmet.ch
www.holz-speckmann.de
kurier.leimbacherdruck.ch
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
revista.landrover.com
epapers.gleitz-online.de
magazin.fon-times.ch
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
holz-speckmann.de
kataloge.fuerholz.de
www.magazine-kraftquelle-bgl.de
berliner-kurier.kiosk.plus
magazin.jaguar.com
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
hochglanzmagazine.buendnermedienverlag.ch
online.hansestyle.hamburg
prospekte.lokale-rabatte.de
berliner-kurier.kiosk.plus
www.hochseescheinkurs.online

Certificate

The complete raw certificate details for www.holz-speckmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418528552834667166273611319521357903741251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 09:38:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 09:38:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holz-speckmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641095150147475598836196741502800835625476527008326215382393380804694216696348192551013203511213364823655527487385414317379893546444875281862817582914640834232340807050709703421784821798259826854157873405648132763101872448682430786287585447210419554549063422559181187398017633288029849048484616669798290981106922816456755848570816728556537165913586555366886078148069518779372412322929928111555150665614453439962883053132500549699618682684776556769299007934553762678776332218236116379689239257807176611310631199456620590355281065982155891957499551829810065875750897323872468586138377681991141057789997742917924525743683549846466895125487196677679595283580533536239664653847141472559917866075869539517407771906620652660001668340139758545938129109463465458295902926977059148517426184532802307351561243989508754088325230634531312255367852652565392561479468016761463383159359652541535786646013983470176387751647711132989129653305374953250681623033500558561449787289917243769316436576114672618042499727094070386578673382038918928243105517749007008954599355732496370571382221588125558604924780361019554282618829938497654543837646134318817893795134007225908127913358760262962923012950989069281587583979598877501536395852373789981754642362311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a2b37afd7342acbe11b5ab13876bc7af801b2fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holz-speckmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holz-speckmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f84bbbcf00000040300483046022100907df678cf2cc5b11d4f8d82be3717fae7d5650d087b9ab3783ffdd55d310531022100bc4313bb26659d821ed30ce0d37a4e22a81166eeb71278d125bc0e519d166fa8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f84bbbcca0000040300473045022067184c2d9b8cf3ca97b07bdcfff1e83c4faafe33a3fb87a763fee3724ed39515022100eb60d1321ee1185bff3c36c511fde57cb2be06028c529c93750db86164ae1e50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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