www.oberschule-rosengarten.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:07:25:e7:8d:1e:e2:7e:c7:7a:78:47:59:9c:60:bc:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.oberschule-rosengarten.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:07:25:e7:8d:1e:e2:7e:c7:7a:78:47:59:9c:60:bc:73
Serial Number (int): 404605235676367440981959907099082049502323
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:85:e6:cf:95:3f:16:72:76:af:2e:2d:96:e2:57:b2:37:99:f0:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:78:de:f1:c3:39:52:97:b4:75:0d:83:29:aa:9a:d6:d9:4d:f6:18
Fingerprint (sha256): 65:b7:da:dd:64:ef:f2:44:b8:c0:63:29:51:32:96:a4:9b:34:f0:40:5e:8a:a3:4e:8f:d1:af:f0:33:a5:c3:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.oberschule-rosengarten.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oberschule-rosengarten.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oberschule-rosengarten.de

Other certificates including the domain name oberschule-rosengarten.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.oberschule-rosengarten.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs32qkt2R/7V6ODmKbSaA
GpEeZmjuSwJKyOuAi4llqWJxKEoQhcHNKSYgbm8n2/bvWsewSa9mSPr4vKIGFtJL
bs1F6m+One9W5jYq7nBs5MgTXUlwO8EEdhSgomFd9H7OpJWaR8KUC59UfOX4nvoL
2p83EEP4bEVMUH6t27FavBT6Mcmuz0WnvhXmW+KxlOxqTkCMvzQTqq6prBEt1NBW
hiXds4UraXaBRdNM6IxkJHOrFe+UOOXk1icJ6HEdEXJnwX/nc5a0Qn0DWFwUs8Lm
QmM+kS6NxhZTm0oRmBvmNC1E7Z3RpNWVwI5ST/89nzDivxHIuqS6B8UiGQzMOjx+
53yNcNt7xtqSIRWLmsoTWwQjkqSRTZl7qK7/qcj/cvnJjWYbVubX8/ekyMT1+b5b
CH+jZaSs1T33/5MVqXalZkZNybVN2mzwBO912ey+dAxW96nR1eOKYId7jGw9Habg
Vt0ObEx1nukVgTPG9YKr9B7bZHWhnZ4aSMUmj5ZBmG0bIpJ7D10oP97wBbKMRpBI
ubPUVtQ7X4s4dHVlgBz9PggtfcLQwfLLEJQxEimliefLlFBLeYjEQjMjhkOHcVlM
hT0w5OaE4OYEbbd6WD4jd5n75kBVKwK/uDwqvL0EiupY48ky7q4TnnXkLZCk1v+j
m5vQiDqSLqkfXdmlyTQ6stMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404605235676367440981959907099082049502323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 00:50:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 00:50:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oberschule-rosengarten.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732258920166158478789202983897125378993588626940475917829161728146883217847624642799211657429188892267790457658915998219458231002543154709529738202266749459382469165173488051980404787524713821616390709429651936032343294693827027510298445032311385478553395179140877841852709822693167429254916734105303216344271497928651843067516618721308752096038868143485276919440609570782468295838515650507880197063784970639647760467593160950370756354328596011542658416254398445612614062025893214968957825666281914601950830339036529975530356507565424398789739982843956640996289712744535848060440412409406670370612560202813634825045801255717060297451438728627188754804235108010774388479315685376269652972818505675309570183635892225001519777088261391536095113968703328035424550894010748058170581698569990580019337187309131661027136157979458610924032012102220671070841340818702753368022319498420821157484622506913985721453604277261311831467092293121224734346928014975255449853742050133764903873006198967553881423600163333514177678516637891810525367086203972656882191578682937827729576650412379697951881258850735374792561841998086962176461154708152552742624616068495750693628904403314803079712100177931710067668753811586210023205529464752687493171294931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2185e6cf953f167276af2e2d96e257b23799f08e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oberschule-rosengarten.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd5d2f1140000040300483046022100c4d6fee973e54a75bec6cff2a9bb5d0ff7696ca640af0cf2177b377c3bca3b7b02210080765017bf0b9180567013d110946087f94a72958d5bc368e2984bfbe2cf1f9f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd5d2f11d0000040300483046022100aba262d0135390d9f18b7fe1fdac4bd342defd276826b2dbd209a4685ce7e76c022100829ba77625f36d33fa172db82fa31d69c5f2206bd609b8a14c66d3af9ccbb0c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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