kungfuausbilder.de

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:89:a6:87:56:0a:09:3a:3c:13:2d:e5:d7:46:28:9d:98 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kungfuausbilder.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:89:a6:87:56:0a:09:3a:3c:13:2d:e5:d7:46:28:9d:98
Serial Number (int): 335361100318767461242036418862449695432088
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:ae:92:7c:8e:66:cf:73:ac:97:63:96:30:e2:f3:01:18:f1:31:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:65:67:71:11:48:c0:86:2b:af:95:6b:61:f1:68:d3:52:7c:f6:90
Fingerprint (sha256): 5c:9d:42:0e:44:10:66:c9:e9:19:7d:76:90:58:12:17:d8:b2:a7:f2:8e:ab:5f:8e:ed:9a:d4:2d:75:3a:ea:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kungfuausbilder.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kungfuausbilder.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kungfuausbilder.de
www.kungfuausbilder.de

Other certificates including the domain name kungfuausbilder.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kungfuausbilder.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+UZnUyUqMxkgRzjDnqf
zWsr6peDrrC4RYKuozD73NgrjmY5KwFGE9254QBW4aFbNJIG1X/PHAVvW+lNiziS
01hic99fmE7Trpo5c1ZYLfCds934pn8XC1fmq7aEJP2uPCpTkd54LOYwHR11M8Ix
0GLuB55IN730v/LKiJN34tOoV9OU89mGZi8PZTslaXbokz/hQQYkiFmIkjlCcCOn
GZfGpEaI5RisMj2ve/gNzVY4u6Popexgng0Yt4PLjEIT0Yf1uEWBKC6peYOniNbV
1XsBMLz+Z/pQg1bCaoWpFPRW/ZhaNOMPeUXIclwKUoopeU1AZbOJMTNZj2y0gzN1
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335361100318767461242036418862449695432088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 16:30:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 16:30:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kungfuausbilder.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19679910718149928267842516710793276416888946981725461807904520180520985256241862904279725792761585056528026780585264115381978349930718625811329794540896547847914288793276248691753082709296051159112797396711257912537921476027616599597178786097191322963680215534738817320983878410016932801714714499276374650102981654993034303637314670900591080474615563675847794499494182836158979575713633477119434091164773547999124916669826954156812347356758922096765034402563662494745094165601380846717974508155461897531138153607127110912349944187240491937469848208026568099299390845832959091709183217132402521210785949321687907661171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29ae927c8e66cf73ac97639630e2f30118f13105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kungfuausbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kungfuausbilder.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c9293e20f0000040300483046022100e90fa62538bd07ff988c4a1eeebbedb3d0f4912b4e223cd775f6ae200962f0b3022100abdab24bdc67d47bb75ea41a62e94bdfed654404d3a4badb29a08590bf6abd8f007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c9293e21a0000040300483046022100b28cb3b524b1fa3804670e25c4a43aab278bfe404e738d4234f9300adde7d184022100a9a67418ed26aab46aa710001d66bb6b6cd9bd55ff208e403b214a710f6b0dd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006993d0f770e69e418b567a1e5b45fa2133a952a7747aac5f556a3d4eef9e356152c02682034ed19e2ea1ab382af96413b8c7f8d4f567bd0fe85f11186fcf9a53a85d7ef6ea52b512004e5e766b67c33fd0e01d365c273fdc3dbef071c8395915f93736dd1bf358487ba4c744d5c4b25be89538ec99087612f757adcc7ba978269ff58adebb83feaf0b942e949fc05a799a3f44d232b657d7f0f98d7da7a465ec622cbd8715829b26112cefc005490fd85a8f7c43aa909f950ca01d46caa5c2becfe2b1001f70cd145076d1670d1b902a599a2158ca038351a4d640d77e30bab5c5cfd674b5d2e6caf26572d2efecece3bbf9c807ae0778f24fdc3007492c59b5