r14t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:04:ac:85:2b:9d:05:5e:13:72:53:06:d5:0a:b1:6d:56 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=r14t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:04:ac:85:2b:9d:05:5e:13:72:53:06:d5:0a:b1:6d:56
Serial Number (int): 304558931082298616362781753738287371087190
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:25:a5:e8:40:8f:58:00:a5:44:38:17:76:72:4c:50:22:01:e3:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:4b:ff:cd:12:05:e7:fd:2c:ec:c4:aa:8f:ae:bc:37:42:81:af:b0
Fingerprint (sha256): 6c:70:18:c2:9f:30:b9:3b:e9:cf:a3:71:f0:3d:12:3a:dc:60:1f:c1:a5:02:a6:60:d4:60:a4:0b:dd:49:23:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate r14t.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r14t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

r14t.de
www.r14t.de

Other certificates including the domain name r14t.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for r14t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304558931082298616362781753738287371087190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 20:55:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 20:55:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r14t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773814415795785342271720749231459582491628429260907033115680914518723717909536497739046366826804440945929220508623549681519846863791389512169666183055956030316950122350787563720974272908876514818900532525546675875040793641157642021083135354809489654834986306190287911509919013101321126672395766777178793950352545646920609269818156821571128183431190230602739952484186638687886446881927184546963608947048428259838101580595689296184546420115817382155199945594796765049261327311252046260655110367546354873341336962947635125046905768444746259224362583593150681912374692711160264910983172604277454232267017568124118387741379334003125700451548720345923479219608287383309805519009222062396843410019942931990117543065829394648710419615986984534997782469713883283074221823653871606606669494415253292690855207087651672931540718290102843892024610469133288904809552703322943776811939207059355650600113117090299911796554115011833532087656174003290589923641144013559278553050695331671431689665264918579470417548654576878410696568582101848578415431997102384230625933402082888580853163233658330350322163071459674454776524450484581987041881291147123927731437810142523356735340000326072632503701189012044190036197140481187620472829501651005490126632069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3625a5e8408f5800a544381776724c502201e342
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r14t.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.r14t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166a813ab6600000403004730450221008feab960949b7b980dde7a4ebf63e5f4751b449bb32eedc79ce9428b5ff3565402205b12f8474605eb5c22e19ab04e69af767780b457ce9fc4ec963e465c15dee904007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166a813acad00000403004830460221008f77c595bb8d5ceb3c19b8f6101e7b6560a1a39ee8808a57cbca47453e938c8a022100848d85d2c36bbd2b4e1b2c5f0d95405d2b7c0ea208ed53fff3fd191d776622f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057c12c2400d87f90d0299de9c7e47249cc5195753986bff68a5d61b0a14da81ef0a08702c6a1ba2a643237f7c5c2d17933f67c52b90c1e28b068ab85c1d2ddbbc76052be1f7a75a40b320369dce5f5bc5fe61ddc0ee46887e17048e1fc63945302aa9b4c187f5ce1648fa7420dbbe0ef750bebe039dd9534d1fdb47008872a6cfe904385299751478c8706ebc4c8326f56e175105b3b13a8740c37201caee02500e73937dd04bfd89d340cdceb61c9bbdbc2fabdffe7647e08b7876aa06bdd0a9f13e990ebfe4a8905e54ac1ffd3f5181ded1139675954c89478f1eae67fb6b92b6fd0598650f476529fd9468495e01ed54bf24af89eba3d88e5e306c3608dd4