xrstf.de

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:71:7f:97:44:51:48:38:17:e4:9f:3f:37:0d:52:66:a7:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xrstf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:71:7f:97:44:51:48:38:17:e4:9f:3f:37:0d:52:66:a7:a5
Serial Number (int): 125733790771760301038169718887309438789541
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: f0:1d:d3:ff:e8:b3:24:c4:43:d1:22:57:aa:0b:6a:58:6b:8c:ad:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:5a:db:fb:49:d5:75:cb:a4:e1:1c:6d:2b:18:64:8c:4a:09:f0:e5
Fingerprint (sha256): 73:52:b1:93:e3:4b:b0:cc:e5:2f:44:8a:c5:0e:0f:28:74:e5:29:a6:35:cb:2d:e8:7d:ec:eb:f9:8c:fc:18:0a

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate xrstf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xrstf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xrstf.de

Other certificates including the domain name xrstf.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xrstf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125733790771760301038169718887309438789541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-03 20:27:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-02 20:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xrstf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618524832277949646671844504801475131871351945073960242490375135912324961329663544281818283278801293640748334222119166060431916604575776493524987006530599936368510376400440590646547339829521265508651376573757580025870288183195770506428551268875073361548328256732382746043036271959894316502748775491154934111163178547854531001279857774695328062312671721528891983885255715765342674583355011332020020816607018385566082978220878087379772056499723865374191741767521191112141841963666196225046728996853753226956178310786657233610625089161624754263451864617315062196357180219241784021640555970693925057859714794704750197231238406808881675669814314710681656662254129557398969496952716282201014815743387504139648398490841712024094235400653483462469356438754558234289078082007096469576065624517335586664458646533779178676733387686246483217175199557387099294821500105933307091055441110940536917356209550102290391226735517913293530013952775697066780326282849958133043183704854679560753699706822027058179725770110684411771374622797980119069759627843000429378494927959876208197985280855809566305937946307160713407640367559292577954530945166200991678401977722012259840991521509601614837429145602951756073111335526506133659973443986433171221991589759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f01dd3ffe8b324c443d12257aa0b6a586b8cad1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrstf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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