ekitchen.de

Issued by R10

About this certificate

This digital certificate with serial number 03:17:cf:a8:f7:a3:7b:d8:8b:1d:99:7c:57:01:1b:27:cc:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ekitchen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:17:cf:a8:f7:a3:7b:d8:8b:1d:99:7c:57:01:1b:27:cc:ae
Serial Number (int): 269439379758169727069189696116929050692782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:b9:1f:72:00:99:30:72:09:89:6c:8e:49:eb:88:40:c0:e7:71:51
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): ee:98:48:fe:c7:80:d3:c1:0b:91:7e:5b:2d:ec:f6:d6:2a:39:c9:42
Fingerprint (sha256): 60:ab:46:ec:c0:fb:10:ce:0c:f9:ce:70:43:00:7d:46:91:00:9b:24:c5:5c:f8:88:64:f7:3d:bb:da:86:46:bf

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate ekitchen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekitchen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekitchen.de
www.ekitchen.de

Other certificates including the domain name ekitchen.de

(limited to 100 certificates)
ekitchen.de
www.stage.ekitchen.de
www.stage.ekitchen.de
ekitchen.de
ekitchen.de
www.stage.ekitchen.de
ekitchen.de
www.stage.ekitchen.de
ekitchen.de
www.stage.ekitchen.de
cmp.autobild.de
ekitchen.de
ekitchen.de
cmp.bike-bild.de
cmp.bike-bild.de
www.stage.ekitchen.de
ekitchen.de
ekitchen.de
ekitchen.de
www.ekitchen.de
www.stage.ekitchen.de
www.stage.ekitchen.de
cmp.bike-bild.de
www.stage.ekitchen.de
www.stage.ekitchen.de
cmp.ekitchen.de
www.stage.ekitchen.de
cmp.autobild.de
ekitchen.de
www.ekitchen.de
ekitchen.de
cmp.bike-bild.de
ekitchen.de
ekitchen.de
www.stage.ekitchen.de
cmp.bike-bild.de
www.stage.ekitchen.de
ekitchen.de
ekitchen.de

Certificate

The complete raw certificate details for ekitchen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269439379758169727069189696116929050692782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 05:33:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 05:33:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekitchen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840211379351316865997348901757273888594292665542351511747907002871619729429315537088102451293315302413970631700865933879387579375428490728623830486167986041267846012807539356674816682821034956389595867517040885351800123768727821988012143720038374967785257365835219130989366380850809994659507119278011776575901487508037586321998730976580085300719656837532841079515158888877406606541891573244267138954532287253020934870708857984338023645739712964460541707910266973951688126864290127954734345153493747226215693853175398336096750614389263404599502442071359458725647825127895735291360268850098566448999547468992524516767517972738848754552188597936776255597013367378830301574593383953854951352599624906662516699231300963822332836394732220998270758181058474538664264142832087848003859440538344661880729461381724898551740917935283068150686749721567722208686021996285406082503765965438797212961332470994578275388427590371728249433067083939636264746188338924165705274719054233110931091407513676091884853788433630167885327539443778655784046626422422089678267983009021837432691068888576812076615231310046512973488832280398213445997848024587485028831601733434857074124057354399158196902546501636035020331883812522412266207978487673377114686759583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ab91f720099307209896c8e49eb8840c0e77151
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekitchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekitchen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001902f3361520000040300483046022100aa5e80300cd6c9ef1be28efa94d3b32a13ba5d844f8ce31d4a8671aa0eb51d0c02210099f76b098940fb1b396df96300cdf4b0451c8e88d54cf75266b3ccf447133b9100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001902f33613b000004030047304502200df7491ae2c601a6a8c5818ad179b4fe505efb4259de97481c046ab39aa59568022100ed0d36d2888c35f7dc750d915fcc0a3ee4f6349032a7c3664bd0eef019404928
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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