comedian-sixpack.de
Issued by R3
About this certificate
This digital certificate with serial number 03:19:99:46:72:12:fb:77:8f:a9:cf:40:9f:bb:27:a1:f9:34 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=comedian-sixpack.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:19:99:46:72:12:fb:77:8f:a9:cf:40:9f:bb:27:a1:f9:34Serial Number (int): 270047654626138018112560062378956990576948
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 92:c2:18:f0:00:fe:06:c8:c8:5a:89:9d:89:2c:f8:f3:4d:47:68:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 82:ab:5e:19:74:34:71:bc:1d:c5:58:2b:e8:2d:e0:51:68:8c:c5:ec
Fingerprint (sha256): 5f:38:be:03:5b:52:e2:1c:83:d8:64:e7:0f:e3:a0:e7:96:cb:86:c5:ed:0e:a1:9b:29:f1:b2:2a:10:5b:b8:e7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate comedian-sixpack.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for comedian-sixpack.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comedian-sixpack.de
Other certificates including the domain name comedian-sixpack.de
(limited to 100 certificates)
www.comedian-sixpack.de
intern.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
intern.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
intern.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
intern.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
intern.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
intern.comedian-sixpack.de
comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
www.comedian-sixpack.de
Certificate
The complete raw certificate details for comedian-sixpack.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAxmZRnIS+3ePqc9An7snofk0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjgxMjQ5MzNaFw0yNDA0MjcxMjQ5MzJaMB4xHDAaBgNVBAMT E2NvbWVkaWFuLXNpeHBhY2suZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDZJ7e7JDoumR3zi5tE95at3XdaHm/nEaGbBpLdhTSpnq+/arywds3fMIzT +HBRI/hShOJx2Ey68x6YarV6XOexg1MRQHPRHcbvRq3hyUxYoDbI5i9v7Z4hwA35 BpSYwSlTdjyQ70LBSXg0wGsCMeIh4j262kUzW9cUkGQL1U1x4vV5r1rdPxwkjOvn 8pXJ82AH7fVMnxqPpzXlDaS12XyLJ8TKtoPF0M6wRCzD6s699VboQemg9q5joarC jw8AW9csb6n5VLQpFrnGHi/7/wXZaxliJKW9rKfMG7okT9psTKEklEvV0d8QJN9q taVqsoZtyMKFIIH4KVkm5oHWnNSSB8MMg+W2QOfMDrcCsv2dMQ4g5Y1mddVxEMgz WFyQT5+m/EoKtegcpSYJuL9QRSReL00K1M6xkSpVhpBYPoM/Ijd+Ox6Zz4iweS2t 8xp3cWdwP79sfKNnXLVCN9eCmfqY8ZHX5/1ECmGoG1rHNLr7WD3LYnUGIhKtH+qN RoFQytzyIiiXDLgQrWmr4CmcY2p6361kOxW9bESTh7VnuyBTppCeQ2F2agObr47/ jhRxrPmaJM6uhXFU/UoQyfhkLdAyhiQWXIrp3OC1aW8pwAXmDFzlicHhM8NuTtzO rd8QlZoIiMk8r6a2rbYIo7HL+xUGmpzRTJp1KBZNYnGZuUBwHwIDAQABo4ICFTCC AhEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSSwhjwAP4GyMhaiZ2JLPjzTUdo7zAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNjb21lZGlhbi1zaXhw YWNrLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNUFUkpgAA BAMARzBFAiAdK1qbjzUXVYZDDGXyT24uk4Do8YUeHny0eb6LWStIpAIhAL8gnq+M ZoZyraPcJCXg+tQwPWREXfc4YanV7FoKNXtXAHYAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGNUFUlgAAABAMARzBFAiEA1Wsu9y8livcB8U/nupxC zbXdiJIxPFjov7k9yUT5H2gCIGRHfWndsxLe7vR2JBCHg3thIKVWBpWjL/i+0UjX Ms40MA0GCSqGSIb3DQEBCwUAA4IBAQCD5UY1JKVqweArBmdaHLX1XTpkxkY6qp38 TqcWV9wXXyQKPpzb+Xalx/DpDI9+/l+6gDZ1YZTyN2d8cY0pfwvBrl3V2+q2kIQa 7FUfttn8b7eDPljmkS3iqvMJw5y/ox2twrNqmlLPbB+az8qbkpNyjyTNoDytjY7y tS8V1YBa3s4m/JjbS1IsiWEQKbCu8/wp4qygtWWm2kwmYdncYHL2QkajzAbc0CII nhVG4gNM/YDRhLDnz3Q/PNuv0B52eonKPhHrOtJXjr2fhjwG3jjBjFQGNsFIBxkb PZ53Wu0YDG+Y+nIszs1FD9wpwiH0kwTwYT6G/erjzq5gBoW8WJlK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Se3uyQ6Lpkd84ubRPeW rd13Wh5v5xGhmwaS3YU0qZ6vv2q8sHbN3zCM0/hwUSP4UoTicdhMuvMemGq1elzn sYNTEUBz0R3G70at4clMWKA2yOYvb+2eIcAN+QaUmMEpU3Y8kO9CwUl4NMBrAjHi IeI9utpFM1vXFJBkC9VNceL1ea9a3T8cJIzr5/KVyfNgB+31TJ8aj6c15Q2ktdl8 iyfEyraDxdDOsEQsw+rOvfVW6EHpoPauY6Gqwo8PAFvXLG+p+VS0KRa5xh4v+/8F 2WsZYiSlvaynzBu6JE/abEyhJJRL1dHfECTfarWlarKGbcjChSCB+ClZJuaB1pzU kgfDDIPltkDnzA63ArL9nTEOIOWNZnXVcRDIM1hckE+fpvxKCrXoHKUmCbi/UEUk Xi9NCtTOsZEqVYaQWD6DPyI3fjsemc+IsHktrfMad3FncD+/bHyjZ1y1QjfXgpn6 mPGR1+f9RAphqBtaxzS6+1g9y2J1BiISrR/qjUaBUMrc8iIolwy4EK1pq+ApnGNq et+tZDsVvWxEk4e1Z7sgU6aQnkNhdmoDm6+O/44Ucaz5miTOroVxVP1KEMn4ZC3Q MoYkFlyK6dzgtWlvKcAF5gxc5YnB4TPDbk7czq3fEJWaCIjJPK+mtq22CKOxy/sV Bpqc0UyadSgWTWJxmblAcB8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270047654626138018112560062378956990576948 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 12:49:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 12:49:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comedian-sixpack.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885915708371134564013187371038500358574085176059143235723736818763852739515790250997650510914031699233399966679482880335919118807007155121167550951185621929228341076840611123227925067115689234680906844323283944596132433736213919785870513524490506421596227615712198490428455265101036391322440817923694675358550039512287197786318001625605853799125105972816949478448908756672930029319153728837640869526541945660328593995565466573199203405991093803929138075885033942466449882698435770452905726128480904640449771097274512337760008126605952945986087351753238810442944465352897352593738373559081043434757845054196818803371374960887168029998849580707523279000089810976884813968279960239765907370154861461718424990335937466978158751560670394678167759585931611206970408236493116318024730101707199966825146136407548191925387657205340098635895847936082236866669166330596130385144654785750547584024588787119400678205253498550308878888796765247343142451288300996657252374231735897101250480938646075161826305988771764576126800231723177369598340219963393510159139674307229886452098636076153591939104410563325794351005078176198859777197960744897188191357184735242909217698487141466355161422530822569584918647668493241657451891256443094023723710181407 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92c218f000fe06c8c85a899d892cf8f34d4768ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedian-sixpack.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d505524a6000004030047304502201d2b5a9b8f35175586430c65f24f6e2e9380e8f1851e1e7cb479be8b592b48a4022100bf209eaf8c668672ada3dc2425e0fad4303d64445df73861a9d5ec5a0a357b5700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d505525800000040300473045022100d56b2ef72f258af701f14fe7ba9c42cdb5dd8892313c58e8bfb93dc944f91f68022064477d69ddb312deeef476241087837b6120a5560695a32ff8bed148d732ce34 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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