*.tfz.treestones.org

Issued by R3

About this certificate

This digital certificate with serial number 04:8c:eb:0a:70:c0:9a:53:6b:0b:a7:ce:be:d2:5a:16:8f:26 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tfz.treestones.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:eb:0a:70:c0:9a:53:6b:0b:a7:ce:be:d2:5a:16:8f:26
Serial Number (int): 396401097884839856399366298133288113835814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:cf:78:28:1d:33:df:62:d5:ef:df:12:04:50:90:18:a9:90:b2:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:f9:2f:9b:05:fc:5d:72:76:02:92:d1:7c:2c:ef:76:d0:40:e9:7f
Fingerprint (sha256): 5e:14:fc:c7:2c:dc:50:f1:02:37:d1:13:e9:18:a5:f1:70:c3:88:84:cc:fa:0b:13:92:63:74:95:36:4c:d5:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.tfz.treestones.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tfz.treestones.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tfz.treestones.org
*.treestones.org
treestones.org
www.acado.treestones.org
www.gpw.treestones.org
www.innovatis-club.treestones.org
www.meier-villiger.treestones.org
www.posterkoenig.treestones.org
www.release-tracker.treestones.org

Other certificates including the domain name treestones.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.tfz.treestones.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgISBIzrCnDAmlNrC6fOvtJaFo8mMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MDIyMTI1NDZaFw0yMzA3MDEyMTI1NDVaMB8xHTAbBgNVBAMM
FCoudGZ6LnRyZWVzdG9uZXMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMlcLNkiKELSEJc6soIR2cG7AF0APuj1Z02alyhFUdZrUjwOOQPnrKN6
sPxELYOyJ7/z7KdH4Tld857ipNRwYAtwXTe8yUvxLRCfEPJ2t77EmvmI0lpI106o
+0TkdnL3Q4BZdU26OyMFKQgp/uxHtNJl1iOXGV4uZcRCb3szLG+03Ki/1+BLsIqV
y6PbJpeZCHCl6fIz4xNXnRjWnI27va1k+hQygmLbgMLub+rNmeoydtC3X50yLAOh
K5BNLtoB6LtMl2zgy1TRSDOIOsBftJudcvAMt+m2XWinpRWXODfIMTvpEKpZDAep
QldzhHSBx7XqYOpjhXyufg4AHfjF4QIDAQABo4IDMTCCAy0wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBS+z3goHTPfYtXv3xIEUJAYqZCyVDAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCAQAGA1UdEQSB+DCB9YIUKi50ZnoudHJlZXN0b25lcy5vcmeCECou
dHJlZXN0b25lcy5vcmeCDnRyZWVzdG9uZXMub3Jnghh3d3cuYWNhZG8udHJlZXN0
b25lcy5vcmeCFnd3dy5ncHcudHJlZXN0b25lcy5vcmeCIXd3dy5pbm5vdmF0aXMt
Y2x1Yi50cmVlc3RvbmVzLm9yZ4Ihd3d3Lm1laWVyLXZpbGxpZ2VyLnRyZWVzdG9u
ZXMub3Jngh93d3cucG9zdGVya29lbmlnLnRyZWVzdG9uZXMub3JngiJ3d3cucmVs
ZWFzZS10cmFja2VyLnRyZWVzdG9uZXMub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIB
MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAtz77JN+cTbp18jnF
ulj0bF38Qs96nzXEnh0JgSXttJkAAAGHRBOTzQAABAMARjBEAiBZHTU5/BFhogmN
g7ihHULsJspS9vR5UwlQnxwR7v1eQQIgBtSkumSIjfJV/HRq4m/oVY0mb1yv/rry
4jpBnNUumAAAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYdE
E5PeAAAEAwBHMEUCIA1W+hLV4HPcNzhoPcYI0OFjxX2Eqg3IBfPe2RaWKUAWAiEA
p20TwdKpWFW9yqCUGKwyIgTJ30/ZUH1BG98tsAXzOaowDQYJKoZIhvcNAQELBQAD
ggEBAHJjCAhQICwQUKlCjJJC6Qs5jarKozogG9oSaU/3loHmb7yF7otdOruKU8mn
0/uQsOK8zY+LhRw0M9kAbG8bXhlo7foL+rK3MqrnZ0UPNgyifriNsd6ma8D6LH4G
G6ZbA8HGRHNus8qcI6DVUYyTw8NKdcniBHBu7VrFQasyJAEOefVmEB5ABM5Ob4GE
Sc/DLBD3T4IIGnMctIStItsf4brUIhTq49SW9IQVu+FEZ+m0I0e5wbaLTABdaU8I
/RQxY9UqzutJuzwvrSAkLVbEyLWET17HSdE5LwE/mjvJp4myHmgXZFKisxR09Iql
QYMnQvtX6FDF7+cZyBykm8OsBwc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMlcLNkiKELSEJc6soIR
2cG7AF0APuj1Z02alyhFUdZrUjwOOQPnrKN6sPxELYOyJ7/z7KdH4Tld857ipNRw
YAtwXTe8yUvxLRCfEPJ2t77EmvmI0lpI106o+0TkdnL3Q4BZdU26OyMFKQgp/uxH
tNJl1iOXGV4uZcRCb3szLG+03Ki/1+BLsIqVy6PbJpeZCHCl6fIz4xNXnRjWnI27
va1k+hQygmLbgMLub+rNmeoydtC3X50yLAOhK5BNLtoB6LtMl2zgy1TRSDOIOsBf
tJudcvAMt+m2XWinpRWXODfIMTvpEKpZDAepQldzhHSBx7XqYOpjhXyufg4AHfjF
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396401097884839856399366298133288113835814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-02 21:25:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 21:25:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tfz.treestones.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21812282800168109401232943191844034277131582333451564872119367878520821852405508971343068033825594100060394166062349947644159703307833387813986479613713597899808220762577569565188858855186825510983435634899635611569683211473307259863762170573148126052707524311502802390273453533969925553550510571393270090147637106009724237881586696255583351175368310151423480276072714224278435108202651698439378870278628596447047250369729485489045328636586976817205147354762693101727968799368724468622818496208913555643483854531013786269468741639635475831155371204774177556885683116970836500908132512635571888270446498421699063104993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							becf78281d33df62d5efdf1204509018a990b254
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tfz.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acado.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpw.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovatis-club.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meier-villiger.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posterkoenig.treestones.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.release-tracker.treestones.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187441393cd00000403004630440220591d3539fc1161a2098d83b8a11d42ec26ca52f6f4795309509f1c11eefd5e41022006d4a4ba64888df255fc746ae26fe8558d266f5caffebaf2e23a419cd52e9800007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187441393de000004030047304502200d56fa12d5e073dc3738683dc608d0e163c57d84aa0dc805f3ded91696294016022100a76d13c1d2a95855bdcaa09418ac322204c9df4fd9507d411bdf2db005f339aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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