www.bachgaufest.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:36:e1:b1:7b:f7:9a:de:7a:92:84:5f:e2:3c:84:94:db:6d was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bachgaufest.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:36:e1:b1:7b:f7:9a:de:7a:92:84:5f:e2:3c:84:94:db:6dSerial Number (int): 367124389390720897391466102553380801272685
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ca:6f:44:de:7b:de:1e:db:72:b5:c7:9a:24:e2:21:51:19:05:90:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4f:03:33:27:c0:78:1a:0f:37:70:db:11:8f:fe:bd:0b:64:02:9f:00
Fingerprint (sha256): 5b:40:98:8c:08:63:14:d6:32:9e:cc:41:3b:33:f7:53:09:ad:b6:bd:27:de:9c:38:87:64:81:4f:53:6e:9f:e7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bachgaufest.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bachgaufest.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bachgaufest.de
www.bachgaufest.de
www.bachgaufest.main-echo.de
www.bachgaufest.de
www.bachgaufest.main-echo.de
Other certificates including the domain name bachgaufest.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.bachgaufest.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgISBDbhsXv3mt56koRf4jyElNttMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTcwNDEwMThaFw0x OTA5MTUwNDEwMThaMB0xGzAZBgNVBAMTEnd3dy5iYWNoZ2F1ZmVzdC5kZTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMRdU98rB6mMAueWHXNkd2XXVk7t O7PXfWYcbLLHr42G2EctsugfqHSkvse7WN/XhBZ+++wz37w71z7cQF/rz55tAMi2 kHyxJAnf9Z1nhy/FaTz+gK9ImOx4OMHgviGuhK2uXtA4I0LcMxbo8M97Gi/WZpUk fVYeHl9DJPOtprYavCYpQm2HOGXNhPMeEr7Ym6/hg64Ex0JSCFKvKPE2Mf7vZG6w ro9w3vTqMDlEz6OZbc9UPJYET25R9Asay4uGw9bbcVXBExV6IFXDHRchCVOKZe03 mdLW8VuFRycNj/TMqegON+jpVnYHWGoWp/XZ3GNVKwBj5AyXpV4NcZmlCvy7m4la 6PKFoqaawuF2hoUW83gC08H+BbzSJeXX6/e7WWHBt8fRYya/90O+35IvLMvJQpit zszEFyepVZ1Wz74l2BBhvanQfdyCcGRVxMvF6HXRkQnE/TWs1hUQwxZxTsjKS5CS KCP2Y+slc5yYF5wOgHNNKWq5I3GL8t6lxhIBoeKWAw91DbRowM3WrVysB5EymVlY Q1CIJvunj3kOKpn9a8vlJqUshQXAyA60QDpPGupDvrp13HI3EQLpoyF49vGoBA9p BVG4dOYKshGtAB9UgcLMAk0O6fRFbiUBw2ELV3qVWuP8gZakGnEPxa43gX64cVLX RBibd1U/uuiSHgVPAgMBAAGjggKWMIICkjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FMpvRN573h7bcrXHmiTiIVEZBZDiMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wSwYDVR0RBEQwQoIOYmFjaGdhdWZlc3Qu ZGWCEnd3dy5iYWNoZ2F1ZmVzdC5kZYIcd3d3LmJhY2hnYXVmZXN0Lm1haW4tZWNo by5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC BAIEgfYEgfMA8QB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB a2PX1/0AAAQDAEcwRQIgHhn3RYhIXI2p/mKwsYba7gdnbr7Vas8+tV0GLatE+E8C IQDm05C3mrtvm+UXyOiAeopicjRRfSy0698oSRIsSbuWSwB3AGPy283oO8wszwty hCdXazOkjWF3j711pjixx2hUS9iNAAABa2PX2AAAAAQDAEgwRgIhAJNnJijb+y7j pd+mVePnBABNQeMIlrYAo3zSm6Q487UkAiEAzlGjF2AWPC6BmvrGnZPSjDsWe5su 4LxOsZnLLl3pgJAwDQYJKoZIhvcNAQELBQADggEBAF/nAtWCaeZW2zGBy8FG+tp6 aa/EoGcd/bx/iiApjeuLvQpxskIbpGOPo5vhw/TNHyzRmFHEcawDaecNJVSufGtr tcyGMVxlh9BbK2mdAYNsFDbUQbs+yaMLmrGBhX8lw5QphewdjKHZnE6VbzAJ9SQ7 XMWYAb1QNJeDXv5xzZuTDDZFzbd/T3ipO1yP6U30usddkl1gppdqGkKlrADZVfZI 4qYmxogLBFrk6z4+f45CUzMIjKVLoBmobCRg8PK9lyc9VX/raa7w570Wn5snUVHO p8NUyPj8NgFQzGoKuRZ28X3W7YIWtLogPi3kChDoAp92NyEiMi0wm6opoKGg/Ys= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxF1T3ysHqYwC55Ydc2R3 ZddWTu07s9d9ZhxsssevjYbYRy2y6B+odKS+x7tY39eEFn777DPfvDvXPtxAX+vP nm0AyLaQfLEkCd/1nWeHL8VpPP6Ar0iY7Hg4weC+Ia6Era5e0DgjQtwzFujwz3sa L9ZmlSR9Vh4eX0Mk862mthq8JilCbYc4Zc2E8x4Svtibr+GDrgTHQlIIUq8o8TYx /u9kbrCuj3De9OowOUTPo5ltz1Q8lgRPblH0CxrLi4bD1ttxVcETFXogVcMdFyEJ U4pl7TeZ0tbxW4VHJw2P9Myp6A436OlWdgdYahan9dncY1UrAGPkDJelXg1xmaUK /LubiVro8oWipprC4XaGhRbzeALTwf4FvNIl5dfr97tZYcG3x9FjJr/3Q77fki8s y8lCmK3OzMQXJ6lVnVbPviXYEGG9qdB93IJwZFXEy8XoddGRCcT9NazWFRDDFnFO yMpLkJIoI/Zj6yVznJgXnA6Ac00parkjcYvy3qXGEgGh4pYDD3UNtGjAzdatXKwH kTKZWVhDUIgm+6ePeQ4qmf1ry+UmpSyFBcDIDrRAOk8a6kO+unXccjcRAumjIXj2 8agED2kFUbh05gqyEa0AH1SBwswCTQ7p9EVuJQHDYQtXepVa4/yBlqQacQ/FrjeB frhxUtdEGJt3VT+66JIeBU8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367124389390720897391466102553380801272685 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 04:10:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 04:10:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bachgaufest.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801097516580909584496689253433130240521713198600577814701044545349539030241382455091153824762821461118316586531712382602365633480488177933584024788459862969396031395056020477157050782616341696882585784366184452284759732717540327869094979445252472657610684772701318600834451881761104700609428038524478868983607005660320023332385872922048777604106497404393577136299302272966138711642422749889077134793500784401648078270310328736206237287513840939122123980685633948027089810559275957397267265853230877159153574932063698735245593447967469551018730469094763201677898944330991383800457427546467078437490904159918446598125343819104143830581657857372499901820303245513993387181449614085500135318206230338316676824509512341567571878258772018640017050763596475874857047059418180264113799634532206714645906475641706707355913034759991354812317377775856784753847478299138703954532961587985072673164630130334750549749750344216934204729337570904265127286448221847831413803591111700585928312301275083923397207834784990959468945308201316464765070156676903709560776530322791234419824819865776713998624186303744874575375447825292531658672747057048307491743452111089928596261213628536858908071500967372400672248856244870415178506996165651017829372003663 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca6f44de7bde1edb72b5c79a24e22151190590e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachgaufest.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachgaufest.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachgaufest.main-echo.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b63d7d7fd000004030047304502201e19f74588485c8da9fe62b0b186daee07676ebed56acf3eb55d062dab44f84f022100e6d390b79abb6f9be517c8e8807a8a627234517d2cb4ebdf2849122c49bb964b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b63d7d800000004030048304602210093672628dbfb2ee3a5dfa655e3e704004d41e30896b600a37cd29ba438f3b524022100ce51a31760163c2e819afac69d93d28c3b167b9b2ee0bc4eb199cb2e5de98090 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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