asta-jgu-rueckerstattung.de
Issued by R3
About this certificate
This digital certificate with serial number 03:e9:20:e0:9b:dc:45:12:67:5a:59:99:fd:f5:6b:29:5a:58 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=asta-jgu-rueckerstattung.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:20:e0:9b:dc:45:12:67:5a:59:99:fd:f5:6b:29:5a:58Serial Number (int): 340666350819445892069719601724756104665688
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e8:83:ae:08:35:4b:db:a8:bf:e2:c1:fe:e1:e5:86:2b:eb:1c:18:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ef:1d:42:ab:61:ed:d7:be:84:45:20:37:7c:5d:c3:ab:0b:f6:3a:e0
Fingerprint (sha256): 71:4a:7b:20:d7:ff:e9:0a:54:b5:d1:38:9b:e9:a1:da:5a:5b:73:3b:86:ea:cb:44:b7:e1:7e:6e:75:81:a6:13
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate asta-jgu-rueckerstattung.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for asta-jgu-rueckerstattung.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asta-jgu-rueckerstattung.de
www.asta-jgu-rueckerstattung.de
www.asta-jgu-rueckerstattung.de
Other certificates including the domain name asta-jgu-rueckerstattung.de
(limited to 100 certificates)
asta-jgu-rueckerstattung.de
www.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
next.asta-jgu-rueckerstattung.de
next.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
www.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
next.asta-jgu-rueckerstattung.de
next.asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
beta.asta-jgu-rueckerstattung.de
Certificate
The complete raw certificate details for asta-jgu-rueckerstattung.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgISA+kg4JvcRRJnWlmZ/fVrKVpYMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAyMjcxODQ2MzJaFw0yMTA1MjgxODQ2MzJaMCYxJDAiBgNVBAMT G2FzdGEtamd1LXJ1ZWNrZXJzdGF0dHVuZy5kZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANP43X54niRfrYN4ZJ5NYt1D52UXjMZhZNMov4a5p625KyEz ErJdU6qpQWeDAwmEDC2MV1roUtLuFa4UoOHU8Is6dkigKxXjeWrbP84l3xuFlUpg xC08FHRl5awLjeemcBMnGEi6n4VyXuNXtIY4sEmccSz3f8tWEe13G7RJ/4DXZwvL yn/7HRQuXpZ6jHWqckvnUvjCPlVgu8OrnS1ktX9yM1J7LmUFamJQNk2bBOagVmR4 4wqCRnCdZkRlZ92tHP4y+b2v3tf5spVoeVbD+SlABNHNoWMz7npQ892AJ0xBVT5X o9oc2jhKS3gSSKiji5QeHTjeUayhvHw9R7mtZ6cCAwEAAaOCAngwggJ0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQU6IOuCDVL26i/4sH+4eWGK+scGGgwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wRwYDVR0RBEAwPoIbYXN0YS1qZ3UtcnVlY2tlcnN0YXR0 dW5nLmRlgh93d3cuYXN0YS1qZ3UtcnVlY2tlcnN0YXR0dW5nLmRlMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA RJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAF35Qc8FQAABAMASDBG AiEAnXB3zbYuM6dF2f0sFrTxqgiwVNSIBFvMs+hpjQqN/QUCIQDtgWhqZeARHguq xG7H/4saHTH+k12X/E5Xq2tbWOQnuAB2APZclC/RdzAiFFQYCDCUVo7jTRMZM7/f DC8gC8xO8WTjAAABd+UHPAYAAAQDAEcwRQIgdtPdm2AxCCM6nPDHyrdsEi7goW6A LnfOK22RaM22MVcCIQDzxPIv4IOuKtmhOsmkP7pmgYCIRZFaKQXJKYulJCpHqzAN BgkqhkiG9w0BAQsFAAOCAQEATEcAiyonQLT2rqLD/MeK7E/i8c2URhglwMD51303 l5hRR+nwF/hGPXIwv3hqb0+/92x5YInMLXkcKdJaqQq1JcL0djoPfI4LmvStrJYK 1kiw7mIY4JjbIC0DS5RQFQwnf2OaSsYb1LbtK/GTwmb9zw6Aok0wDsTQLi9G9ueS eY72WJyuDG1N3adbqByXtIKFq9OmlLE8SAlHeAvtjOs0LWUREt3WuOCP1PYbdRNU 8Gpbt/W4Xa/uG5+FPBmbZ6qx7W1lYkjkOljXU0BMOdBn1N71RQ6BhAuVFBC7ofdg S8OjI+Y0ht3R0cUYxwmMRlRbqQcl5aZoniPdcc1xMLPw0Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/jdfnieJF+tg3hknk1i 3UPnZReMxmFk0yi/hrmnrbkrITMSsl1TqqlBZ4MDCYQMLYxXWuhS0u4VrhSg4dTw izp2SKArFeN5ats/ziXfG4WVSmDELTwUdGXlrAuN56ZwEycYSLqfhXJe41e0hjiw SZxxLPd/y1YR7XcbtEn/gNdnC8vKf/sdFC5elnqMdapyS+dS+MI+VWC7w6udLWS1 f3IzUnsuZQVqYlA2TZsE5qBWZHjjCoJGcJ1mRGVn3a0c/jL5va/e1/mylWh5VsP5 KUAE0c2hYzPuelDz3YAnTEFVPlej2hzaOEpLeBJIqKOLlB4dON5RrKG8fD1Hua1n pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340666350819445892069719601724756104665688 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-27 18:46:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-28 18:46:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asta-jgu-rueckerstattung.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26759002357242933460529109447345792911410964186356112619096120998513592769237650468274712385747465488007261801199847085846214225166640176140824712123246965082598959711758760332830015157281551355170998436305198646977611643181160524183076813587214572473796794423541795430270406637975243225468665181796594323646239768911789455430670629698884985427488396481023472143935920512231723308173881876519657545090661732515995134233410213683820994699924932501446711972355664250311526382525192946173052260737217025438232147014531794938973624429202378411962181582832497051962125948229456187670106852890839989357463623351069328631719 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e883ae08354bdba8bfe2c1fee1e5862beb1c1868 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asta-jgu-rueckerstattung.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asta-jgu-rueckerstattung.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000177e5073c1500000403004830460221009d7077cdb62e33a745d9fd2c16b4f1aa08b054d488045bccb3e8698d0a8dfd05022100ed81686a65e0111e0baac46ec7ff8b1a1d31fe935d97fc4e57ab6b5b58e427b8007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177e5073c060000040300473045022076d3dd9b603108233a9cf0c7cab76c122ee0a16e802e77ce2b6d9168cdb63157022100f3c4f22fe083ae2ad9a13ac9a43fba6681808845915a2905c9298ba5242a47ab . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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