reader.thueringer-allgemeine.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:94:c5:17:bd:af:55:c7:ee:e9:28:ec:57:84:8b:0f:34:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reader.thueringer-allgemeine.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:c5:17:bd:af:55:c7:ee:e9:28:ec:57:84:8b:0f:34:67
Serial Number (int): 399072915216604145367531696069503888602215
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:4d:b7:05:8f:d3:cb:a3:46:2e:de:b8:bf:69:2a:4c:9d:57:50:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:6e:c2:bf:5d:2b:51:17:26:9f:1a:b0:b9:70:b4:f3:98:38:18:67
Fingerprint (sha256): 5c:80:17:76:e9:d9:c5:ec:7e:21:dc:62:ae:22:96:ae:2a:62:25:79:4b:2b:41:71:3a:34:e3:91:4d:f9:5e:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reader.thueringer-allgemeine.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reader.thueringer-allgemeine.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reader.thueringer-allgemeine.de

Other certificates including the domain name thueringer-allgemeine.de

(limited to 100 certificates)
sso.zgt.de
origin-interaktiv.fnki.de
abo.thueringer-allgemeine.de
www.funkedigital.de
abo.thueringer-allgemeine.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
stories.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
emag.thueringer-allgemeine.de
reader.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
emag.thueringer-allgemeine.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
*.thueringer-allgemeine.de
*.waz.de
reader.thueringer-allgemeine.de
*.thueringer-allgemeine.de
anzeigen.funkemedien.de
emag.thueringer-allgemeine.de
sso.zgt.de
sso.zgt.de
emag.thueringer-allgemeine.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
reader.thueringer-allgemeine.de
dev5.aws.funkedigital.de
dev2.aws.funkedigital.de
*.waz.de
img.otz.de
uat.aws.bildderfrau.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
funkedigital.de
trauer.thueringer-allgemeine.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.thueringer-allgemeine.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
data-d946a9c4a1.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
anmeldung.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
*.thueringer-allgemeine.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
img.otz.de
sso.zgt.de
*.fabo-live.funkemedien.de
*.funkemedien.de
emag.thueringer-allgemeine.de
funkedigital.de
reader.thueringer-allgemeine.de
trauer.thueringer-allgemeine.de
funkedigital.de
*.waz.de
funkedigital.de

Certificate

The complete raw certificate details for reader.thueringer-allgemeine.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsNk1B+7zrysPw3BW5mNb
6pjWsocWRj2+BNCq7+mRECfSJIxYxtKbf3s4oXFMbU9Xhtl/Qi1by/9kX4qj3YmR
hMK0E7UCG4gfXAuW7Qb4Oq03Opi7zzi9Aknp9O23oeNUYprY59VcMK879NxtEwuJ
NqiI5WpTGRJ9kO0+UUJQ+ZIUzYJ4C7Spi1t06xN6OLL0FhpW6kyXFuZ/PTz2tWXf
M/Fd9tR+JLMjb5i+Cp6Ulz+HF9YY1/eHvZ6oi2xBTu0/J+x5Hn+BV7czeCXtFl7T
P6Ouu3VTwkgLme6/IWzxjS7vSkzRd5Pf+1dCFOUYGbwoDpsTYf8w+dOSH26zzrBE
klqmoBTjQn6v8AoRD3o0ruSxvFtuUg0mQZnHKusLhtVyKwmhR83pIWdPYykjGqKB
hvLhlxHjaqm7xeQOKRaQaR+Aw9R72tUH5mnSS+vvO6ZxUnALDaom2KLrOB+J9TGQ
FsJgbzPnmAAt/1EBXDDmEdzBb8LRtT3CD8IzZy72/1QFcU0sskznKckSQ8QDpDX0
A3nJOZfaYxokfTw3oHPh4wx6bZ5bfjBWYEvXsN2lelrsaa+vMrIfHcV8L81O3czE
kcMxicBLG/0OYpy/O+QkqDxBoqY9RWmkfLkFRg9tp3Ckpe+cn3TTDVi7Oa4GCnrb
EI8gMFv5OYzpPb5qfWvocNECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399072915216604145367531696069503888602215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 02:55:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 02:55:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reader.thueringer-allgemeine.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721478792965406548748452941736546535352045454433615500537178052933057548060687224508761296770201258604336587392400845289052766074369180520510564376340402310206353165051505840508460923151497480619908619668765103267322154644232634687645619157112567221224948822243931668302200211518950605026267274767717065127260094321935228220943797469917958738827440886837678046312904670804215909724122209652916727430164859860510222790244882049448352322636372587450024211902834979603858060768278978034306737027972429442943709234235334064023520704151115647764158981715543337471686895314017010509105471602702506185210315802788825163818839732368380138611159389822056150971848134430351209290286913536819535714692442001900312551819563756526830137500323038064240013710811887468261149140717017491925698717312306940971624352144990541083758781498857232261175189389664302165558078760182801161104699568292581952902612964237898376767921962782921477261732997453447247023686288262243671373403542766477883246574694214217122437309217208479106349012185051852789476682994906023026636177158338844592112181783729110609836183153198347591680367266358892912448382623236841180468597742175119552551095978294743871368427850388882412219426343897890147512422962170907115456590033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b54db7058fd3cba3462edeb8bf692a4c9d57506d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b73062b910000040300483046022100aa9404df2e4074272c263fd71d79eff1f984090a3360d3138d1c77b2e790028e022100c58dab54be343c67618eb80d8c699b926000b689973d48528afe9587701ec212007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b73062b790000040300483046022100eb8cfd40fd8979d55668a497c14bac684abeb28a36002a1003c399d6115d0757022100d841457060975710988ea864a348778b4f6e50556ebb80822e22d6fca67968be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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