mattermost.niklaskorz.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:ba:ca:8d:f1:7b:42:23:3c:90:06:57:9f:e5:17:b5:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mattermost.niklaskorz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:ba:ca:8d:f1:7b:42:23:3c:90:06:57:9f:e5:17:b5:04
Serial Number (int): 280300676106065661710433737958996819031300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:01:96:41:4b:f6:1d:a8:b4:59:11:ea:8e:bc:44:0e:71:4b:b1:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:ad:b7:ad:fc:18:ee:dd:a3:85:80:dd:57:7f:d1:da:a7:44:fe:ff
Fingerprint (sha256): 64:f0:a1:c8:1d:9c:70:af:b7:71:53:d9:b8:73:30:78:2c:a8:b9:66:9e:7d:2f:90:04:cd:7d:f5:5b:4b:08:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mattermost.niklaskorz.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mattermost.niklaskorz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mattermost.niklaskorz.de

Other certificates including the domain name niklaskorz.de

(limited to 100 certificates)
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
www.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
phantasma.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
writing.niklaskorz.de
sni197082.cloudflaressl.com
www.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
www.writing.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
www.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
*.simplyfitapp.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
*.osteopathie-wohlen.ch
sni197082.cloudflaressl.com
*.kj-webdesign.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
mattermost.niklaskorz.de
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
sni197082.cloudflaressl.com
*.kgmorenhoven.de

Certificate

The complete raw certificate details for mattermost.niklaskorz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OG2uIHuS3imwR4PfBqj
c3Q7brvpGElUA2r3/zjsr91wygvBU5KNONE3P7CMCAnfrllLgniIGqCmwYBiDiqM
3PO2r1m55lee64Zt05laSTSgAXT0dNcKkfMZ/ndrhhTDr0ozPq8zBt2POvqkKgS4
UZSGwGgHzVrz53RsKO1qrmt+a7vmFm1tUosuPIIem5xAJuUYF5yjY/384LaCMWYQ
wOLJ4lPWTA7gAqRjvOpS1xzWeCbdW6KbJrfm1pWY4I06HqIB10ySVX4RV0Lv6olf
kFW4sjNeXjpHxCEBRQSWVi9VR/ocOMiN5LWPIQp0Ivbdo5fMPSSd2Y8PgXN6/Hz5
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280300676106065661710433737958996819031300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 12:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-03 12:41:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mattermost.niklaskorz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26368871032818259680045555572013082268469639015862840013916366581369649978858160305264537692456887969317849844027910916230053935327160817200475294107376008107810205314104946558431132851292765563460097214293940151518612714033495973580792941650258778556117258689916828264800627851801616625718084620275873889763824857247567039307606188347829435871296957825810898798600085310065541681612102772394023890811774651669209618859791730327976178017888138874181438541966556108734707591572572875077654350812755276211148034408737738050173332261978532286288874465171589104209725076708363399700797468476367082421305789467990096148923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							320196414bf61da8b45911ea8ebc440e714bb1b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattermost.niklaskorz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166e41b44e80000040300463044022005d064276aa0bcc0494f5e475e9b5778f15e9135ce165c606f9e62f9c9d163580220576379c5100c87cad551f2649e48d1e9ac131d4d00df28c8bbaf01512c53b78a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166e41b435e0000040300473045022100a6c1e9d23681e9d15787eac1297cfd1b305452f25dbe923493bfcbd26ce66bbb022011b08366c9785eef8037407683988a5eda9002f305b174bca89231b33778eba8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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