www.kartenzauber-lena.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:02:af:19:e1:2c:70:18:92:7c:67:fd:d1:4b:dc:1c:f8:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kartenzauber-lena.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:af:19:e1:2c:70:18:92:7c:67:fd:d1:4b:dc:1c:f8:94
Serial Number (int): 349362457734629579161204760503583262963860
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:de:aa:87:72:e9:82:c7:07:4a:61:5d:45:6c:51:01:20:1e:fc:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:f1:95:ce:49:79:84:32:bc:b3:ea:a8:db:b9:47:89:19:ac:9e:8e
Fingerprint (sha256): 6a:10:63:00:5a:5f:c8:89:57:fd:67:92:8b:3e:d7:33:5b:e9:53:cd:7f:4d:fe:fd:c3:23:b7:e0:e9:f6:86:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kartenzauber-lena.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kartenzauber-lena.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kartenzauber-lena.ch

Other certificates including the domain name kartenzauber-lena.ch

(limited to 100 certificates)
webshop.kartenzauber-lena.ch
m.lapidooo.com
www.kartenzauber-lena.ch
m-c.lima-city.de
phpmyadmin.kartenzauber-lena.ch
phpmyadmin.kartenzauber-lena.ch
www.ini-app.lima-city.de
nightflyer.lima-city.de
magento.rhein-hotel-kelch.de
blaueklaus.lima-city.de
www.visagistylist.ch
wp.kartenzauber-lena.ch
angelseth.lima-city.de
fabris.4lima.de
habbopw.lima-city.de
blog.kartenzauber-lena.ch
www.telegermany.lima-city.de
silmeris.de
ve.computergott.eu
www.klassen-cloud.de.cool
thephoenix.lima-city.de
mxxthi.lima-city.de
www.visagistylist.ch
www.kartenzauber-lena.ch
qzpchcrolnhemgb.infinite-loops.de
www.kartenzauber-lena.ch
www.funsurfer1977.lima-city.de
m.execbase.de
cilok.lima-city.de
www.hierundjetzt.lima-city.de
www.amalgam-fansub.lima-city.de
www.kartenzauber-lena.ch
fischer-design-germany.de
www.igel91.lima-city.de
wxylife.lima-city.de
emusch.lima-city.de
konditormeister.lima-city.de
jumpup.lima-city.de
m.holgersoft.de
www.smile1.lima-city.de
www.pilzesammler.lima-city.de
www.en.shidigital.com
magdalena-korduletsch.lima-city.de
maximale.4lima.de
magento.kartenzauber-lena.ch
hertzklang.space
www.kartenzauber-lena.ch
meinekleinefamilie.lima-city.de
bergrennen-altlengbach.lima-city.at
www.hebammesophia.de
www.jojowhite1616.lima-city.de
www.visagistylist.ch
phpmyadmin.kartenzauber-lena.ch
toxic2k11.lima-city.de
magento.kartenzauber-lena.ch
m.paul-weber-photography.de
dau.finio.biz
pop3.qi-marketing.com
xn--wandern-in-der-schsischen-schweiz-v1c.de
www.visagistylist.ch
kwblakenjette.lima-city.de
webshop.kartenzauber-lena.ch
store.kartenzauber-lena.ch
www.klassen-cloud.de.cool
wp.kartenzauber-lena.ch
www.holz-kuster.at
stageing.kartenzauber-lena.ch
forum.hesse.pics
webshop.kartenzauber-lena.ch
moose2905.lima-city.de
muenchen-west.wachbuch.info
www.visagistylist.ch
www.visagistylist.ch
gabrielwaldvogel.com
christiantpr.lima-city.de
kartenzauber-lena.ch
jsokjjtbqvvuyju.fam-gundacker.eu
hexenschule.org
www.maggei.lima-city.de
louishempen.4lima.de
www.manuelp91.lima-city.de
webstore.kartenzauber-lena.ch
shop.konsolenschmiede24.de
www.9-mai.de
phpmyadmin.kartenzauber-lena.ch
onearmer.com
webshop.kartenzauber-lena.ch
www.bremerhaven-guide.de
phpmyadmin.kartenzauber-lena.ch
otr.matzl.eu
www.visagistylist.ch
versicherungen-pkw-test.kfzversicherungen24.eu
webstore.kartenzauber-lena.ch
www.yinxi8.lima-city.de
phpmyadmin.kartenzauber-lena.ch
multitool.dasdirt.com
www.angelsportverein-toenisvorst.de
xdxgfxbvknbband.lim-city.de
preussen-dellbrueck.lima-city.de
masood.lima-city.de

Certificate

The complete raw certificate details for www.kartenzauber-lena.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUQw4unpF+q08la/p8Ps
JgPHJERUDz8QPb+o50E3/Y418ybUWaqRm81RP9Kj8VaZOkBmRIUUuHaYByZGzkgV
j3a/ZtACuDXQYmkNK6cuixJXdSRE6poxKrfe3y5uRAnPupww9FLSWlzIXcK4cMaF
g2u5Aqu4jz+Nt48Scnr43Q9y/yitmNY4vv3GAOzeAOKLW1cyTD+MhH3Qbq6ehE8d
nuNN/dy7bIWUG6z6A9JAB+SH6ZPvjqsz+RGyzZALR0aWStAxPEY1MlTwng2HQRsI
8MBkkPrxqc9TAag5pnsduuGxcJLQ0TG9cJ4lwcg5Jq48CHSxbyb9bKVDwuE1r8kL
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349362457734629579161204760503583262963860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 14:36:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 14:36:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kartenzauber-lena.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22377806195832125016464866565398883531921538551183415150178110703949313091567189931349992043258589866492936491134343548013470410142317560736013703088294799761039794623134894150234595108561282154495587695656121997249574902137651057920098558359774722597007398540189523966803645837641947206625723351319748910301840782345525020685337818461536667069649153058811669861046476899562643739567047575781741022441333160310703606409912941522825344199681179991221577264609952088625960240283414973627149695242975441484490846564633011120640686080094848936423191658395719598192154013309840354705220251992724130031959537704675895217007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18deaa8772e982c7074a615d456c5101201efc80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartenzauber-lena.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168aedaefab00000403004830460221008ea15e19bc1de2d9af17af15464b7ecb7109d745fcd3b80e1412fe1bb26c08fa022100c3014147d8f9e24f8bd9404f89411dbb08c3be1037b8c17c7e68d53d85e0f32c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168aedaf18a0000040300483046022100c48141b8173c577243b3e4dd5d0e2f2e230b3883b7e9b2539d46eb21cc597052022100cd96f0bd7fdff82ee6118cc1a2843e141319a122ef896bd9e93a8824eba580a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f1801869bd8215feef17ff7dc57ac6fd0a3afca73c72be74a503708970da0107696dbefb684b1d5eb1590dd0d4777e3a9b9426b26cd45c12dacc2b548e2e46f5bb5c6429f0e5a19ce6d67ae480d6452f2c161444f595d965183566fd629de4958f7192ea6a720134e81d729e79ee8f23ce6ae9593b6a8d8c864676dfaad1ba65b47f9d6490ee366c38ec173f07a306ef8b0865294f93a02883e08fdb44722c158c2298667d82b168a51c177a1b19a9b693092ec361450b314698ed88036c47fd7f1ab4beeb43c5a51b382ab18e89120ce3645353d745cf302a1d96a089247e26fdd9bf66b993e86d9d1b4e2d953df5cea3c74e51e101561e1791f9cf2e6ec52