test.magix-dev.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:91:3c:89:6d:41:a5:e4:b7:16:0b:a1:8b:6d:30:86:d5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.magix-dev.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:91:3c:89:6d:41:a5:e4:b7:16:0b:a1:8b:6d:30:86:d5
Serial Number (int): 311211135750284382989562340568588941821653
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:cf:f6:18:b2:80:14:30:bc:62:a5:e1:ee:48:76:2f:76:4a:0a:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:d6:63:58:d9:b3:22:16:fc:68:5b:74:11:6f:e5:20:b5:bb:a1:a4
Fingerprint (sha256): 70:26:60:5a:a5:3e:29:bd:dc:9b:3e:55:5d:6d:7b:e8:f1:d0:f2:38:28:4f:1b:ed:d5:ee:83:5d:f8:18:fe:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate test.magix-dev.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.magix-dev.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.magix-dev.de

Other certificates including the domain name magix-dev.de

(limited to 100 certificates)
nextcloud.magix-dev.de
versiondb.magix-dev.de
dwh.magix-dev.de
versiondb.magix-dev.de
checklists.magix-dev.de
test.magix-dev.de
webmail.magix-dev.de
test.magix-dev.de
checklists.magix-dev.de
kibana.magix-dev.de
mantis.magix-dev.de
kibana.magix-dev.de
versiondb.magix-dev.de
itsm.magix-dev.de
itsm.magix-dev.de
phpmyadmin.magix-dev.de
inventar.magix-dev.de
devwiki.magix-dev.de
grafana.magix-dev.de
webmail.magix-dev.de
grafana.magix-dev.de
aptmirror.magix-dev.de
checklists.magix-dev.de
es.magix-dev.de
inventar.magix-dev.de
esrestapi.magix-dev.de
checklists.magix-dev.de
versiondb.magix-dev.de
phpmyadmin.magix-dev.de
itsm.magix-dev.de
aptmirror.magix-dev.de
inventar.magix-dev.de
checklists.magix-dev.de
es.magix-dev.de
kibana.magix-dev.de
es.magix-dev.de
dwh.magix-dev.de
checklists.magix-dev.de
phpmyadmin.magix-dev.de
devwiki.magix-dev.de
mantis.magix-dev.de
beta.magix-dev.de
grafana.magix-dev.de
aptmirror.magix-dev.de
kibana.magix-dev.de
itsm.magix-dev.de
nextcloud.magix-dev.de
kibana.magix-dev.de
test.magix-dev.de
phpmyadmin.magix-dev.de
checklists.magix-dev.de
itsm.magix-dev.de
webmail.magix-dev.de
aptmirror.magix-dev.de
es.magix-dev.de
itsm.magix-dev.de
grafana.magix-dev.de
beta.magix-dev.de
esrestapi.magix-dev.de
webmail.magix-dev.de
grafana.magix-dev.de
devwiki.magix-dev.de
*.magix-dev.de
beta.magix-dev.de
phpmyadmin.magix-dev.de
esrestapi.magix-dev.de
artifactory.magix-dev.de
es.magix-dev.de
beta.magix-dev.de
mantis.magix-dev.de
test.magix-dev.de
inventar.magix-dev.de
nextcloud.magix-dev.de
kibana.magix-dev.de
es.magix-dev.de
nextcloud.magix-dev.de
*.magix-dev.de
test.magix-dev.de
kibana.magix-dev.de
camtest.magix-dev.de
esrestapi.magix-dev.de
dwh.magix-dev.de
beta.magix-dev.de
test.magix-dev.de
aptmirror.magix-dev.de
mantis.magix-dev.de
esrestapi.magix-dev.de
test.magix-dev.de
webmail.magix-dev.de
versiondb.magix-dev.de
phpmyadmin.magix-dev.de
aptmirror.magix-dev.de
camtest.magix-dev.de
dwh.magix-dev.de
aptmirror.magix-dev.de
itsm.magix-dev.de
itsm.magix-dev.de
devwiki.magix-dev.de
beta.magix-dev.de
devwiki.magix-dev.de

Certificate

The complete raw certificate details for test.magix-dev.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311211135750284382989562340568588941821653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-30 21:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-29 21:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.magix-dev.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693862439376087650421848478618910554292190810282698824685531996226354374313631482228839889219017866266493964765820832495289473305217713361446637741236722438074835612507426068376690939887764356325635497100281834477380634662237310317237880011432942447963328623808887804526254251693121790009285333630073830137579017760105672970846240895360159488357191160536710757215807225934106447448515397858358510223558797795067842001402694544704505255162528784486417947008439054154123628240719960246440859037071901203372143979671837889846395700510991828911000152675867402171154484286250917851605585922957861980211215436923855283476443881997608884381612567277600182845844211345658021312162913570877247849838608330301630556324758734543400891679447191634289017684306460321854396476197425184837129610833773765526525111423309125556853742682396500154505273779769937438633902082750302268019948804567063367303651334155888274955838616446593403623641819557014364307446499765511938898204394063137997246532049114333169066056343034050461203948221366518992191679529279170911068149404176631709209574539662888549465736748203221071813194398425417235461387227878920477810903542221376772000446891175657910517495555549405824047373479979070828817947462045056973024914203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afcff618b2801430bc62a5e1ee48762f764a0a21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magix-dev.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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