owncloud.schlittermann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:71:e7:37:96:f0:a9:16:25:10:b6:c2:f1:62:b5:78:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=owncloud.schlittermann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:71:e7:37:96:f0:a9:16:25:10:b6:c2:f1:62:b5:78:72
Serial Number (int): 334989252361792698480158892618430350194802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:1a:7b:dc:d4:02:f8:3c:d4:60:82:4d:ed:c7:67:f0:06:a3:de:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:eb:84:9b:0d:e2:df:f5:cd:b6:27:8a:45:22:6a:9a:08:bb:df:41
Fingerprint (sha256): 6d:f9:42:54:5f:6d:d7:05:1e:9d:65:0c:36:d4:90:da:fa:79:e9:f5:5d:f0:cc:dd:0b:e7:2d:e4:c3:15:49:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate owncloud.schlittermann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owncloud.schlittermann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owncloud.schlittermann.de

Other certificates including the domain name schlittermann.de

(limited to 100 certificates)
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
rric-cx.dyn.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
w.schlittermann.de
rric-cx.dyn.schlittermann.de
hg.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
muli.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
pu.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
mailman.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
w.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
muli.schlittermann.de
chat.schlittermann.de
owncloud.schlittermann.de
www.schlittermann.de
owncloud.schlittermann.de
fubus.de.hs12.schlittermann.de
w.schlittermann.de
fubus.de.hs12.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
git.schlittermann.de
www.schlittermann.de
icinga.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
lug-dd.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
git.schlittermann.de
roundcube.schlittermann.de
www.schlittermann.de
otrs.schlittermann.de
git.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
mailman.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
w.schlittermann.de

Certificate

The complete raw certificate details for owncloud.schlittermann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334989252361792698480158892618430350194802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 17:23:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 17:23:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owncloud.schlittermann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840436052806052640503064013090742828905309809117927824163690793549568211264901025776783969706693080910366596182951634060341867934578048386689436136814265380154784526416990791111939051784107966685655027423901328760221576537997053721140282416164464567730604123662110719843301209716807991210322136240252731027206533446746273861779261318562344915895215610490331979933861792026314517761573912873907118024087658070791878475321387095207911427008986294826562034043124657661590091612031311262783272183322839783662147055982140845454957626305661647751301950908185311402481960536917459431687275867359222974916946083025751680798298344823799378640348961653491789301264964560130928417263514148683430964047145235164450974391044915233810372542148138488419441014001426097399007581474476425120824837687252240805004482245331555240778579586624754264883241840742237054273708467483230171838679450006501242646458617770678485227071586434748851296745131188372563792966221331715863016860915873509424605395718691245918496756481744682330542145574430348384650260926750237775649069307312419952569773800769600284265977709228601489189003970272208014434211346599887819137828295674840522665202447566844598799890574511302695196736757980297935282298888719472268684372301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							491a7bdcd402f83cd460824dedc767f006a3dea8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owncloud.schlittermann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d9d29ede10000040300463044022033fd9a7fd2948fde0181804a9a8de879329d9981097b4120afefcd221907123b022026d230c1e02e7d88ccb41b41133c38de9675c5302cf10794f6f1f36cfba544a5007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d9d29efde000004030047304502205889b226092a4fede8cdfefb5250caf36ccfc09312f2a358bc5ed8b32639b91b022100f6bf2c4701d575552dfe184ee5d5979853e45439dc7b5cf63fffd1fde43d7e9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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