www.care-vision.de

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:94:68:37:76:56:a4:c3:f4:d7:f4:e7:3b:c5:f0:50:c8 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.care-vision.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c4:94:68:37:76:56:a4:c3:f4:d7:f4:e7:3b:c5:f0:50:c8
Serial Number (int): 415341754510702646874162300341951266836680
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 45:f6:cd:c4:51:6e:f3:92:5c:53:47:40:3d:c4:e3:21:1f:72:6d:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:49:f0:3e:86:0a:e9:79:46:95:c3:9d:65:b6:83:44:ea:63:a5:c5
Fingerprint (sha256): 6a:5f:db:ca:f2:71:f4:52:27:ac:99:5c:31:9c:9a:5b:70:ea:1b:b6:df:c5:da:16:22:95:86:57:fb:68:2d:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.care-vision.de

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.care-vision.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlasbkkahlmann.care-vision.de
augen-laser.care-vision.de
augenlaser.care-vision.ch
augenlaser.care-vision.de
augenlaserkorrektur-freiburg.care-vision.de
augenlaserkorrektur.care-vision.de
augenlasern.care-vision.at
augenlasern.care-vision.de
care-vision.at
care-vision.ch
care-vision.com
care-vision.de
carevision.ch
clubgesundplus.care-vision.de
debeka.care-vision.de
h.care-vision.de
m.care-vision.at
m.care-vision.ch
m.care-vision.de
online-termin.care-vision.de
patientenformular.care-vision.de
phpmyadmin.care-vision.de
www.care-vision.at
www.care-vision.ch
www.care-vision.com
www.care-vision.de

Other certificates including the domain name care-vision.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.care-vision.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ZWx/SPYSgjlJoaFvLu
6lthajBJIn8RWPg6HxELZnJ0canXjJ/CcZfeIdbEAjgDy4zVWyOdar1CZaYhOpI+
LHeiIWnO4+WHYSiL88IdFXS63QSu97EoWiW7lYi4wbzRSFHDOC4Z2FZKvVpLCD9A
Q+qwEA4kjDCkc1BNSbFCTY4OK72rv83tqFdFbUU6Z38mUn65kMrX7LYXqBO+o2lw
yU1y7Bg1FoXBFNCGjIx/jCIu5CkyrTdbcjtLu657JNxAXaVAsB6k7ArRidUSWyQq
iRJPPRsw5YcOTpcT+EQUdKlGizR8z0P3jYLPs6tUWdvCR20JZizp7MpIZJt4PFqu
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415341754510702646874162300341951266836680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 08:39:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 08:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.care-vision.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20130245619795603868402314614953552381352055086979181379897748780824961809524657262992575513735036888321685012353226513877499089662382617796604227705635473649333318020061700660481798645086361602085503791564285526674044598012649296164084986869956808560108698218474679090615589436869458720405256567516945005151683348996188128590303239117754894985042588407164132866805131181681693100459752723375737250169852830938619517378108341730313786491617453194805020357596666337944007971138039298217343116557742788552108145406988074383993525807104403167489496834688484675472089860412291502780321811079475867087119077644093592612411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45f6cdc4516ef3925c5347403dc4e3211f726d7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (633 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasbkkahlmann.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augen-laser.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlaser.care-vision.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlaser.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlaserkorrektur-freiburg.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlaserkorrektur.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlasern.care-vision.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenlasern.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care-vision.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care-vision.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carevision.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubgesundplus.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debeka.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.care-vision.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.care-vision.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-termin.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientenformular.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin.care-vision.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care-vision.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care-vision.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.care-vision.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018faf1ee83d00000403004630440220462c2cd3b87b26eec41efeeb045412012183000cc7cb021af5c197a3658f707c022028a02dcf3060f130e0667752bb583ced366d3c24f842bee9b6dba6bd4408fe0b0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018faf1ee83600000403004630440220654bf0c774c602d7a23410e09d52bf952cc978dd1d85fae3f01a65d6f0498c5602206a8d51362239995916966cb1707a1284830cb45efdd064071a7f340719b06e5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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