tap.idg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:d5:11:88:4a:67:a9:f7:1d:81:52:38:84:7c:f4:0c:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tap.idg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:d5:11:88:4a:67:a9:f7:1d:81:52:38:84:7c:f4:0c:a7
Serial Number (int): 345329536654283056678986695330908492532903
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:0d:2e:44:32:82:b2:cb:d1:ee:73:83:ad:d1:ba:92:8a:54:a0:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:3a:ac:4e:ac:62:21:63:8c:47:ca:8f:60:2e:52:b4:e7:c2:39:78
Fingerprint (sha256): 5a:02:75:26:f3:6e:ae:06:ba:46:7d:f1:59:0d:00:6b:69:36:76:bc:e6:57:a9:a7:f8:b0:41:43:61:3c:ca:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tap.idg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tap.idg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tap.idg.de

Other certificates including the domain name idg.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for tap.idg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISA/bVEYhKZ6n3HYFSOIR89AynMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMjUxMjI4MTFaFw0x
ODA0MjUxMjI4MTFaMBUxEzARBgNVBAMTCnRhcC5pZGcuZGUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDUB2agL6fASbjZbHaUN/m3QXTEyi5pef+SUp/y
hFk0zxDl40L8PMVna64aIVKUxXgMajpq7ow3Q/C1EO+SePFx4GQS3Fc9Oknblmg0
diHdtvHggLBqZAMaqSiLPLYYrPEu99PqNZOrAllR7w5SjUyfYsiqqMPWHAH4DzSr
k9fSHChUkoWOEvzBLFQ/mTol/rh+icP5f0XPKwZwdB+XU1QBeTDrokq41WUTUi42
cQcT0Em/7SUmcoxDGVaApeiB0syi18izw0L8usWHCecuRD//wOaOSbCOp701tgAo
PXWNLcho+pshP6/z5R3jtZpbWAvUoO5VUy0frLejGqUwI2p51WMbnFvvvjxNdfIF
QUapy4d4f++5SVMvlDWfC8ZpKLAv9nMzTADaOz+uWC+9kwZrvDgW1hizwDSGoXYO
XxSvKNm5QUVsnI3MufrYBOthbHgFiloi6BJwMI3zhfSiY25JNlUv9rS689AfynRS
yge3Wu+3HPuh78NTrotWbYdNf9Cwv5C/jX74b80PHN3YXyusoF9cl3MYvPU3K9g3
qnsajl4goujvuhrQxkPCzIOxyHAIE2ukrs2YcPqzLnCQXl/C5b/L4M/MxCb5qGbF
wt65S4RGSgflcy4T4EEFV/NoHvQ7W3Ictv/4y3wiPgytl1PuU1IOVPL0jCgp6PHy
w1o1EQIDAQABo4ICCjCCAgYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR5DS5EMoKy
y9Huc4Ot0bqSilSgVjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnRhcC5pZGcuZGUwgf4GA1UdIASB
9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlz
IENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcg
UGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmlj
YXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBv
c2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEALmSAEFmiolwvKCL98xmBJMoSQ2Xg
ZtmqwvZfW5t5tza+2U6WV7lrFFkX6xcoOUT2kPi7U0d35QirmFzT6579j5Z1WSBG
VaxMnTdesZ4kFaOzwIGkb+DogL0dRvnt/LUUZz7zAE7OiK0vhJUzkK2OjkCeeeWk
xDaE4wzXXh0rsop7yv6+m6vbcM3f68L416jGX18dCv14tpyERWGr+eM0mROZDLD+
zFrvoWiwvgm9tQayX2Tdgp0t+hf9kB6c2xWH4bD4yrUw2iyUKF0wGCO71lJdgDbq
lPE7tdktSCseThK62H3KIxO1bAjfz91NMKzwXI+32hbnxaYoZK/0H/H/uQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345329536654283056678986695330908492532903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 12:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 12:28:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tap.idg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865002483683220625782284036486746187366808933151072969137569664103528045196297376587736638465803909321770282154577711892674100294101527931706909688525858254511391802434571102663861175336650015960132185043778655836215186326992813163838095279540008298360709725940858922678519766777765982111590793554859849516770112549210165485036924670685556369798912931076348799031596237978414754347876462935933795891746677643429634828782424367958503715132145664221408789791634953635768074158870122636881228535578603612185674215201291829051876361168278599527959387409710258478854455769490102099652203273274910546813367273925086496923929543902160645452867492048004081815042818284561129092307142034143278035280907568241819437008543590300332802924912104764948846772084102974839332736231211503778009099132647302094210965083636142224284787727043006755879758772318043204388105771883802290188036233348786487942443965204401679267240317954876349284651941834492767309412315008296165119306504100311258799913214009742884439769630206608777251567993591364594786457576879404024080815024926675303042700798522072537436147876343046180858257659247737806997238536810514444886810328874458111895233396411295089073423272400231073018357117545251233311064906050996209169610001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							790d2e443282b2cbd1ee7383add1ba928a54a056
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tap.idg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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