tgkm.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9d:da:b5:3c:ba:65:7e:cf:31:f2:cf:3a:54:04:a3:d9:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tgkm.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:da:b5:3c:ba:65:7e:cf:31:f2:cf:3a:54:04:a3:d9:4b
Serial Number (int): 402164188074153257550189073541184643914059
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:d0:8a:7f:f5:e7:ca:d7:70:27:3e:25:be:f3:bf:6c:bb:d7:d8:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:30:a1:54:58:b7:a4:8e:f4:d5:22:ad:b0:25:19:92:f1:b8:fb:56
Fingerprint (sha256): 72:d3:a1:bb:f5:c5:d0:05:28:06:0f:ba:bd:0f:53:7c:9f:39:c0:ec:5f:6a:9a:00:98:e9:94:3f:f5:f9:05:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tgkm.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tgkm.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tgkm.de

Other certificates including the domain name tgkm.de

(limited to 100 certificates)
www.schreiber-pension.de
www.tgkm.de
*.societyon.de
silmeris.de
www.tgkm.de
cd13deb01.rotglut.net
www.tgkm.de
www.tgkm.de
tgkm.de
www.static.degarni.de
www.tgkm.de
www.waidelich.me
www.tgkm.de
www.holger-goeddel.de
*.spirisfeed.de
tgkm.de
www.tgkm.de
dankelmann.lima-city.de
tickfighting.de
gabrielwaldvogel.com
www.fr-software.net
forums.hesse.pics
www.ourtrip.4lima.de
www.9-mai.de
*.retrolamps.de
yannickstark.de
klaus-barbie.lima-city.de
tgkm.de
breitsprecher.org
www.tgkm.de
tgkm.de
www.thai-seifen-kunst.de
www.tgkm.de
www.tgkm.de
www.tgkm.de
www.weyer.aero

Certificate

The complete raw certificate details for tgkm.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISBJ3atTy6ZX7PMfLPOlQEo9lLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDgwODM2NDlaFw0x
OTA3MDcwODM2NDlaMBIxEDAOBgNVBAMTB3Rna20uZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCpiJNWFdPS3KLaNtlEqR/9YLHuz+J9TUyAZnu+XuGi
toJP+mDqeBnfaQdcjWXiAXz1MCUrvBuLpqWITwdV9o+ZLcZV1Zk/AsEizO4aZRZJ
jHWaCsFd9M5eF31xXn5tchQAds4vYeqcNsgSXUKO7MY/suTk+wd19LORn9T2/b87
s9P1Ln0SiAfGFSJTImZw5BHZzX+G//PkO+PnaiQSgHZIPVAQQRgfRKsruIUPcqvA
vePGzg1Fl63fQ8/r6xS6okeXJ7br3Ti7DCLdPSAlZiAlPQLq9aLPLhNFraN1DGHU
gj7hu6yEIf+UYYJCl5O1qaGY4HmSUQhg8idg0OynCDcRAgMBAAGjggJbMIICVzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFD3Qin/158rXcCc+Jb7zv2y719gPMB8GA1Ud
IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr
BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr
BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wEgYD
VR0RBAswCYIHdGdrbS5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAI
xjc1eeYQe8xWAAABafxOsgAAAAQDAEYwRAIgO0aVPTUH108ozhwRS1XIFX2AMvj+
QKFqhzHbigEyPMoCIA35xoOEztFeVS85G/D1jyCQOpVp3/bO4q2JLNa5EFPaAHYA
KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFp/E6z8AAABAMARzBF
AiEAiGFOPUY+DNwQSfa9loESmm4saVh2JS+spEq4uFI7nmACIClrnvgu5MjdnUrY
yKhd0a4Sbj7kFrY+VTldabwCQxXUMA0GCSqGSIb3DQEBCwUAA4IBAQBOywK4EnQm
ufPP1/VhMDT9u6eMRFc0ujr5ZeAKXZ+78L62i3Fa4ucZ8Gy6kjMCG5SV1r9EdK7b
/yK7CUAfQbAPU2FviYk+2Y9GiKCv5jnTExS2HOD53svub2c0ATrJEGTVFD0fmkR5
1A5ckVtjRbMIAW9J50zd+W/to9r1EsjooLB+xk3O1YctBvY0NDedllG/5HK5a9Wv
NKhZsgtlgNzsjPsKcKStCsK7M+kj/siZaw/nk2UGaxLr4OvsFCnnuxkKsfyyAbRP
ypbdkXHy6LaVv1NkHaL4lpcfFJ1wM7x+1Tzyzj2olMrOJ/g++0efprIPRMb4nLWz
0AIjJ5DhJ5qn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYiTVhXT0tyi2jbZRKkf
/WCx7s/ifU1MgGZ7vl7horaCT/pg6ngZ32kHXI1l4gF89TAlK7wbi6aliE8HVfaP
mS3GVdWZPwLBIszuGmUWSYx1mgrBXfTOXhd9cV5+bXIUAHbOL2HqnDbIEl1CjuzG
P7Lk5PsHdfSzkZ/U9v2/O7PT9S59EogHxhUiUyJmcOQR2c1/hv/z5Dvj52okEoB2
SD1QEEEYH0SrK7iFD3KrwL3jxs4NRZet30PP6+sUuqJHlye26904uwwi3T0gJWYg
JT0C6vWizy4TRa2jdQxh1II+4bushCH/lGGCQpeTtamhmOB5klEIYPInYNDspwg3
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402164188074153257550189073541184643914059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 08:36:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 08:36:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tgkm.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21401621444335224347573933328831658438814984016238016086463690180702759715263125481370124197466327133535979314515486243404952089701233251558766148666704602119413568001157316420416908085148387065979104991539134475026661727052937341090180306334637692702088747480681268706346280090763936028231419293239000663406684790859417399041026645359532342389099654106301457395124800147309973493796847519668961637539541584843875272503265843035905116728976849196260491931057368527854983575308769350747753364208926958182137949062262970919422031112537532075570011672282705643790890886659282261921270141644750771805130027418753492858641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dd08a7ff5e7cad770273e25bef3bf6cbbd7d80f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgkm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169fc4eb200000004030046304402203b46953d3507d74f28ce1c114b55c8157d8032f8fe40a16a8731db8a01323cca02200df9c68384ced15e552f391bf0f58f20903a9569dff6cee2ad892cd6b91053da007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169fc4eb3f0000004030047304502210088614e3d463e0cdc1049f6bd9681129a6e2c695876252faca44ab8b8523b9e600220296b9ef82ee4c8dd9d4ad8c8a85dd1ae126e3ee416b63e55395d69bc024315d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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