mail.naoverde.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0e:89:db:38:5b:59:de:36:51:65:7b:64:26:72:94:9c:e9 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.naoverde.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0e:89:db:38:5b:59:de:36:51:65:7b:64:26:72:94:9c:e9
Serial Number (int): 353396339355421191074028253774449346911465
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:47:ba:f0:80:87:14:59:e8:3d:2c:35:3b:0f:52:ea:9b:be:a5:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:6a:bb:3a:2b:f4:75:a9:57:db:3f:ff:79:e6:dd:5d:d1:0f:26:3e
Fingerprint (sha256): 6a:97:60:06:92:19:ab:07:f6:3b:5d:ce:55:34:62:f9:71:2c:c4:50:4d:b1:d9:07:98:9f:0f:9f:4e:d9:d7:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.naoverde.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.naoverde.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.naoverde.de
naoverde.de
netzpuls.de
www.naoverde.de
www.netzpuls.de

Other certificates including the domain name naoverde.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.naoverde.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgISBA6J2zhbWd42UWV7ZCZylJzpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MjIyMTA2MDBaFw0x
NzExMjAyMTA2MDBaMBsxGTAXBgNVBAMTEG1haWwubmFvdmVyZGUuZGUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzHNRQIskge00KsuJLugKDgYROrQd/
dFcIg5TkUpme/7OhzrtHDGg5rUkdSx+dOpmCHMvfzbq+NnTqre9hkYughpTtY4ev
aTD84lGIAJY9h4f9qhUQYiLw9LakPgAXLznWoYOXwCC4E45rt7NXPdIMpNZLfgF4
69zvrBKCmeYBpQkwfmafnVyTatKRgwWpyPb2VZR8God7+lGm0dJssRESBmfFRw9L
Lb2aMVanOUdtX5sV5/3srW4cufP6Wyf+DhrvRKza8msqPizUaTdmpyvBAmsnhvA7
zH589R2jGoyzM3Yt6N+bh2cpx0PAYRnYAbEYF4iQAAgQm/l1k6Yc0/crPk8meTfW
dUj13NeRq9+E0GIJGeVNnGDaGVq2apv/lHpZFBBsk7bZAUl0q/MYkFt2wBl3zsYg
0U320dQmZ9aG2+WjzqO3E0omq8Fv09+6ZgQgdXCB22Tv4BGNwNB103ve7Gmq3ww0
XwS2WYgArwC6lWFkVRDSir/0aPFowCtO7Z5cWehk/3C0BpaKy38ylNn3LHQe6HrL
7tRT7T6hFcNf1TM4OtoUjXni5Wd6c/hOtOx5djX2AJINgphZVjxaRmmQ2PBzHYpq
KIo7cl6KPlV+iykSOtBo3ScAwKTntaqALzVg1+/eNyEnyozdw2kKqxR3UsabvVWY
pkgh49Ide2TZcQIDAQABo4ICTDCCAkgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRp
R7rwgIcUWeg9LDU7D1Lqm76lTDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMFcGA1UdEQRQME6CEG1haWwubmFvdmVyZGUu
ZGWCC25hb3ZlcmRlLmRlggtuZXR6cHVscy5kZYIPd3d3Lm5hb3ZlcmRlLmRlgg93
d3cubmV0enB1bHMuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB
gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl
IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv
cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw
czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOC
AQEAfbJT+L5tFqJYabilGrPzkHcN58ednsWZYSC3vDWQDL55ueM9u8n+bk3RfZmB
o53mZebLNVr6RAkxQZeBaCD2KRgp1p6Hh/caFGl25O0ikh99cgs00fUv394zhBSY
SFFOlqMffASwW28PduLZ1OiT3Yre3KOGXhyow9K4Z4A4t3WYN9zPT4tKa9dd4YNI
m9udBVESm31YIEGCV+CwjwBEpFwM3/MISX4eIkXuUS1mCnbxFBiN6V91IxL4Oqvx
D2E9r2DuWU68+XWcj0KljR37VwrjrVb2ELHaE00ei8fXssxVMpFfLVMmR7x/wACI
eAW63vWfvMLaXri9NkGgxlqBTw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsxzUUCLJIHtNCrLiS7oC
g4GETq0Hf3RXCIOU5FKZnv+zoc67RwxoOa1JHUsfnTqZghzL3826vjZ06q3vYZGL
oIaU7WOHr2kw/OJRiACWPYeH/aoVEGIi8PS2pD4AFy851qGDl8AguBOOa7ezVz3S
DKTWS34BeOvc76wSgpnmAaUJMH5mn51ck2rSkYMFqcj29lWUfBqHe/pRptHSbLER
EgZnxUcPSy29mjFWpzlHbV+bFef97K1uHLnz+lsn/g4a70Ss2vJrKj4s1Gk3Zqcr
wQJrJ4bwO8x+fPUdoxqMszN2Lejfm4dnKcdDwGEZ2AGxGBeIkAAIEJv5dZOmHNP3
Kz5PJnk31nVI9dzXkavfhNBiCRnlTZxg2hlatmqb/5R6WRQQbJO22QFJdKvzGJBb
dsAZd87GINFN9tHUJmfWhtvlo86jtxNKJqvBb9PfumYEIHVwgdtk7+ARjcDQddN7
3uxpqt8MNF8EtlmIAK8AupVhZFUQ0oq/9GjxaMArTu2eXFnoZP9wtAaWist/MpTZ
9yx0Huh6y+7UU+0+oRXDX9UzODraFI154uVnenP4TrTseXY19gCSDYKYWVY8WkZp
kNjwcx2KaiiKO3Jeij5VfospEjrQaN0nAMCk57WqgC81YNfv3jchJ8qM3cNpCqsU
d1LGm71VmKZIIePSHXtk2XECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353396339355421191074028253774449346911465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 21:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-20 21:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.naoverde.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730715715822639190486792091738085141001764762907965411763377038213795385973400237588192866522508712797244966602884081187253405619549679662461689424298042326759583813549147525807862197645776960751836437088724892797125269792068293700328021122295635285223693514650737033524048884599805140948345820008204423086879552105569284718790836878652600700574943821275129604269796212826782346952436190054805954988783810258362849840523278033917201347511205700995387766252019536603060974411155516055656878687972543269167434863642636171518324604348252014725255599651340211110653570319096919173758712820132849311615646840869296282864754760743090082220471072879436194378224419807249357818509987144278545557077970125784014721827192233610992433699477113887698438978777734653790723843492509195015879132218247026294441402194035042685156666114147672970867618456112569323734872907908227994532595008072947164842375768207193921688354344527580166960144683833553040455187161698426962695522112959880760178860549905377013403003395973364936474297773684138259680102858355996566875499362750995470659465647169267594208707076831669693562322900199617650773384539904701824747442768766328334682040199067307354976037077584582073439537663377786812932993753895654445602363761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6947baf080871459e83d2c353b0f52ea9bbea54c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netzpuls.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netzpuls.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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