www.afilio.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:a7:7e:b1:2d:00:c4:29:27:9d:f7:41:16:4d:cb:02:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.afilio.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:a7:7e:b1:2d:00:c4:29:27:9d:f7:41:16:4d:cb:02:6f
Serial Number (int): 296608580486389662318951449847042987983471
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:a7:0c:d6:77:74:7e:05:ff:8b:7e:56:c4:f1:92:ea:d2:f0:01:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:f7:52:f9:bb:40:92:8f:e0:bc:94:f1:44:fd:2f:3c:f6:98:2b:72
Fingerprint (sha256): 5c:7c:7d:89:1e:54:52:16:bc:dc:e7:76:ea:01:94:aa:ef:a3:9e:8f:95:d9:3e:28:0d:6e:e1:18:5f:d5:d3:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.afilio.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afilio.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.afilio.de

Other certificates including the domain name afilio.de

(limited to 100 certificates)
sni21375.cloudflaressl.com
ssl375064.cloudflaressl.com
decker.afilio.de
finkodin.afilio.de
ssl375064.cloudflaressl.com
wiesner.afilio.de
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
www.afilio.de
lindauer.afilio.de
swiftseat.co
ssl375064.cloudflaressl.com
marc.afilio.de
zarbo.afilio.de
devapp.mydigitalpublication.com
afilio.de
afilio.de
v2.8count.tv
ssl375064.cloudflaressl.com
www.afilio.de
www.bollywoodmix.ca
www.afilio.de
www.yachtclubapp.com
www.afilio.de
ssl375064.cloudflaressl.com
afilio.de
sqlite.tk
ssl375064.cloudflaressl.com
dirr.afilio.de
Afilio - Gesellschaft für Vorsorge mbH
ssl375064.cloudflaressl.com
ssl375064.cloudflaressl.com
www.afilio.de
links.fragen.afilio.de
test.afilio.de
www.afilio.de
www.afilio.de
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
bossenz.afilio.de
partner.afilio.de
marc.afilio.de
rb.afilio.de
www.afilio.de
admin.fbaprepcoach.com
ssl375063.cloudflaressl.com
www.afilio.de
www.afilio.de
www.afilio.de
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
ssl375064.cloudflaressl.com
krueger.afilio.de
www.afilio.de
www.afilio.de
stoelzl.afilio.de
www.afilio.de
www.afilio.de
ssl375064.cloudflaressl.com
sni21375.cloudflaressl.com
sni.cloudflaressl.com
*.afilio.de
www.afilio.de
sni21375.cloudflaressl.com
ssl375063.cloudflaressl.com
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
ssl375064.cloudflaressl.com
afilio.de
sni21375.cloudflaressl.com
ssl375064.cloudflaressl.com
www.afilio.de
new.miautobus.com
demo.afilio.de
sni21375.cloudflaressl.com
beta.afilio.de
www.amblyoplay.com
ssl375064.cloudflaressl.com
sni21375.cloudflaressl.com
sni21375.cloudflaressl.com
afilio.de
sni21375.cloudflaressl.com
eckhardt.afilio.de
ssl375064.cloudflaressl.com
www.afilio.de
kooperation.afilio.de
www.afilio.de
sni21375.cloudflaressl.com
afilio.de
www.afilio.de
thodabahutpharma.com
sni21375.cloudflaressl.com
www.afilio.de
sni21375.cloudflaressl.com
www.afilio.de
spiegelsperger.afilio.de
ssl375064.cloudflaressl.com
www.inscripcionpadelmov.com

Certificate

The complete raw certificate details for www.afilio.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtevShnqUl/R5xY8p7kds
AE6WzxuzB8bFVOQDuvpdsPNGIpgDUJlghrtMc+/lX+iynr9VVFS+JGyKEymNntCT
YE/G+Yu9cK/5TpIGideSd4yCyjtZPKfp2pe73iEmtFs0kj8/0IZdYi7T52SZPU/0
l0r2iZ2GQtlJLFGZ69FvBWbtW/7V1RYMzD9XU8FFP1LKNFqqgqNzP2LddvI5twNa
bSAIb5kOZf4m01tXv2KfEvqcZfAQJJEcaRHR+cgqbIpQB75/zI8ABaLYzYZeaYtP
Sy4raljTTDeV9rHJuo506PHow7qsKzmPvAws8cB+DhvYhSOSckwNg45FxA0kmZA6
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296608580486389662318951449847042987983471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 14:37:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 14:37:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afilio.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22965421540909581791243828790787936613756829636762056757554839181736558066231719480003306414865237837430318158726474643992168969593673302692699264505131864450081615405555749195736695889320390382507986548239217273117025406313110252264096297966803152949417001010816077408070760407961671511715798351344309798166612372865312813529656655360716536381611997218726953322954495760005433329827581641569460555818383282875792026721351881996443866138720313932232083203750387485524172924915105290660931952231615230500631701941841389897841562825057064722837613305968593898703354574914232661317050982617963133236234444583552766982873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9a70cd677747e05ff8b7e56c4f192ead2f00184
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afilio.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164ebd65f690000040300483046022100990793d3715ee9f8ab08539d27ecb7d9157e54d3c2479bc7810241c0c4c0a075022100f60b5786a6e1c3ec9b88deb8fbd58f3bb50b4fb19d75d972b2c220b339182388007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164ebd661710000040300473045022100ec99b29d9809778421569eda15ba0c69bb4f9e830b5af0a5da74f0f079d7537202203b66fc7ac31e69606b45027fa57532c68c8bf00e7c60257be621ddd04a5ba88e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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