benjaminlindner.de

Issued by R3

About this certificate

This digital certificate with serial number 04:83:78:cc:e0:9a:08:f7:ab:93:5e:9b:7a:df:19:03:de:2e was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benjaminlindner.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:78:cc:e0:9a:08:f7:ab:93:5e:9b:7a:df:19:03:de:2e
Serial Number (int): 393186704937200919849952404306827300560430
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:06:a8:71:07:8d:5e:99:c4:ac:c9:d0:d2:ec:56:e9:dd:32:1e:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:18:0f:7a:f0:b6:b9:13:d6:18:04:e5:68:22:70:03:e7:42:5a:a7
Fingerprint (sha256): 59:9a:e8:ea:40:bd:f9:f0:8f:12:8b:27:f9:18:28:a7:df:aa:a5:f5:ea:8a:5d:03:f6:e7:f7:b0:70:e3:18:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate benjaminlindner.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benjaminlindner.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benjaminlindner.de
blog.benjaminlindner.de
www.benjaminlindner.de

Other certificates including the domain name benjaminlindner.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for benjaminlindner.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgISBIN4zOCaCPerk16bet8ZA94uMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDUwMjA2NTlaFw0yMzExMDMwMjA2NThaMB0xGzAZBgNVBAMT
EmJlbmphbWlubGluZG5lci5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALwbtIJNahCNvgVzXgcDm5GrUY9GFyGAPyKVY3Z4PeA+POEkqqHawMmsfOQ0
SvYHpsGMLzaBHPnK0k0rllwS/bapp9Kqw5ixa7OADZ3abKYPA6FYBCopXNb0l3mP
EAB/9BkwS4jln4XJC+xeeFnb1MiZouL3ZwFT59xOMYuSJYUtt8DOk+fTJOUmR42x
Q6rf2z+Vhqh98FT9nQWKXZshZ8v9BTFQdEifhsyrMyIdVA9wst9jYn+EmyIXOJBl
GqC/ctdvUxTjfcqv0ZfUNeMnSzZGkmi0+uitxzyd7WKrabnNSrfyxqb5r+yPT2VJ
P4qLE/raJl/weWhjJH5Dk5NXuwcpgNg9OZ2RbNl9ILFNQlJPvjApjXPEU0VBuU2C
IKtkg2rxkK+HenS5lvJ+86MIMZbxobwj75AGU5ijT8q2RkAV+02YTkj4slS1MzT+
XjrJ5Bet0f9603yNXyYatitnShObNZjywdQlS9UNS6jmzuo1udnFNcteyPbMxfuW
aPhnRjyQrmE2Yy77PwBHyvnrbzIlgHP/L4oXArgWblOVFrSGEG6ki8fGMY72kzcD
43mkLrd7dQq7fpQ7PtG3F71Ha3KPo/yhrhfGLO9MyQfQR3yfqoAr61Nfe69T4nvS
HftFpRIQtwbA+qkODe7lRCQiDGJ2ExKSz95W9tFuEY//gHM1AgMBAAGjggJFMIIC
QTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIUGqHEHjV6ZxKzJ0NLsVundMh7YMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvME4GA1UdEQRHMEWCEmJlbmphbWlubGluZG5l
ci5kZYIXYmxvZy5iZW5qYW1pbmxpbmRuZXIuZGWCFnd3dy5iZW5qYW1pbmxpbmRu
ZXIuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYnDqZk4AAAE
AwBHMEUCIQCcNjNrkmiyqDvw3XODiL7iWPGIAQkhKHRm9RFjkMiKQwIgTP48eJzr
l849gjdRZgAVpjJ6K1NeuogMptJ9rzMv5gkAdgB6MoxU2LcttiDqOOBSHumEFnAy
E4VNO9IrwTpXo1LrUgAAAYnDqZlKAAAEAwBHMEUCICuLYxAQFRipAw6QPEgE1C1A
yEMDDqI/6W3abCkEPkLOAiEAq9lV0lZJL0uysUlgwAOsw8VIfPuai39Le2oYVsDj
ZmkwDQYJKoZIhvcNAQELBQADggEBAG+kBsThXvFQJIXoLOzblLjpgrazYK1mqTMy
vd9V7Lt32Sm3inqk3P5cBDcIAFo293FmZm6mVJ6EytfZnAqh9XaU6XDH+WcKYt5i
IRfOCotmZYrt9H7VuV7nRDunLdez5sbe0Felsxp0z6IRtvFO4Rj3yB9dI2yNCOAX
DjrTdovPJxLveBoBUKlSKGiLXaRGZPw3T4t0LAukGnyR2/gI/w5+u7aI3qzCXNZ1
27Tq0oIXHcZKDYJlXHNTiw7UeeMZ3zVUku8gtiqw5EtwLdDrLnnUIap6JF9L+t9O
VL3qeuMzDX33IlBwxzjek8HN7jMA5scJVwrJJ0Z7mSXIIhzYl50=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvBu0gk1qEI2+BXNeBwOb
katRj0YXIYA/IpVjdng94D484SSqodrAyax85DRK9gemwYwvNoEc+crSTSuWXBL9
tqmn0qrDmLFrs4ANndpspg8DoVgEKilc1vSXeY8QAH/0GTBLiOWfhckL7F54WdvU
yJmi4vdnAVPn3E4xi5IlhS23wM6T59Mk5SZHjbFDqt/bP5WGqH3wVP2dBYpdmyFn
y/0FMVB0SJ+GzKszIh1UD3Cy32Nif4SbIhc4kGUaoL9y129TFON9yq/Rl9Q14ydL
NkaSaLT66K3HPJ3tYqtpuc1Kt/LGpvmv7I9PZUk/iosT+tomX/B5aGMkfkOTk1e7
BymA2D05nZFs2X0gsU1CUk++MCmNc8RTRUG5TYIgq2SDavGQr4d6dLmW8n7zowgx
lvGhvCPvkAZTmKNPyrZGQBX7TZhOSPiyVLUzNP5eOsnkF63R/3rTfI1fJhq2K2dK
E5s1mPLB1CVL1Q1LqObO6jW52cU1y17I9szF+5Zo+GdGPJCuYTZjLvs/AEfK+etv
MiWAc/8vihcCuBZuU5UWtIYQbqSLx8YxjvaTNwPjeaQut3t1Crt+lDs+0bcXvUdr
co+j/KGuF8Ys70zJB9BHfJ+qgCvrU197r1Pie9Id+0WlEhC3BsD6qQ4N7uVEJCIM
YnYTEpLP3lb20W4Rj/+AczUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393186704937200919849952404306827300560430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 02:06:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 02:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benjaminlindner.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767414596510252840327127803684722498012441911178553988718810716829177933272235884117915401520880767696463763365026787741981320332302092299269921317285869519421298995516761206532336566429622015697587491826342123210380014279224653821272228284648657663838833538487630748866060707924110543309357400339287363290567414231059538117458539937294106559844169299213855028496320586965512000127655980483022514981368719732524605121583659345106064594006545510318671899888263924717213807764694242747992435218483763357630364599601003836483027542195134796987908025010762036867289172803762706485528939953846021128743405426959343970483514389993714305146619918072890993429187556738398407512425557420004369471137532515193438940560287836403228776681300522803459836173001496754781844153316903472827581214446028824475686011760541144268616950701918239577614729541279292993170337497140716713374827229597713237138443340509835776913977877529479841090220557592801700118359786447218931031153341589364522749860017112037139073383064982207423470674777658133839738156958034343755717925530501649888239010539490193482170083299037416512803508247468269431715904747552523153798582804903841090435479369157428718152775560233406660784882186537317093803846495198223383998264117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8506a871078d5e99c4acc9d0d2ec56e9dd321ed8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminlindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.benjaminlindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminlindner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189c3a9993800000403004730450221009c36336b9268b2a83bf0dd738388bee258f188010921287466f5116390c88a4302204cfe3c789ceb97ce3d823751660015a6327a2b535eba880ca6d27daf332fe6090076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189c3a9994a000004030047304502202b8b6310101518a9030e903c4804d42d40c843030ea23fe96dda6c29043e42ce022100abd955d256492f4bb2b14960c003acc3c5487cfb9a8b7f4b7b6a1856c0e36669
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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