komischlila.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:4f:46:19:5f:34:b4:8d:cd:8b:98:b6:c4:7f:c8:2a:bd was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=komischlila.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:4f:46:19:5f:34:b4:8d:cd:8b:98:b6:c4:7f:c8:2a:bd
Serial Number (int): 315206844755839349985928713231668888480445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:a0:3c:ae:59:60:b1:cb:21:45:97:c1:df:49:67:6e:9e:00:3a:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:da:88:6f:aa:ef:eb:a1:dd:04:05:f1:86:7b:38:9e:c8:31:ed:b7
Fingerprint (sha256): 74:e5:98:99:d7:c8:fe:0d:58:6f:97:29:f2:5e:fd:0d:cb:b1:f3:0c:e2:74:b0:ce:09:d3:12:a1:4c:1e:a9:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate komischlila.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for komischlila.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

komischlila.de
sql.komischlila.de
stats.komischlila.de
webmail.komischlila.de
www.komischlila.de

Other certificates including the domain name komischlila.de

(limited to 100 certificates)
www.wulkau.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
webmail.komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de
komischlila.de

Certificate

The complete raw certificate details for komischlila.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz3uwS1LPRgbwCFoeWHaR
vMi9cUIyC5PkE4xoxSwtB/YKKODHk3YpY1WaOKBFW4no5r0DUWPN3RmXMjRK4eYM
uuchvLn+uI4PtjZTqSzXsSc/fnnD9LYCHMyrfUIdKfk4X17wLYRnW8MHpOmkbWx1
cqenMkw0Gjk+REtU1jZ2Ci2yx1/rzA4dErNHBQH6GFUDgM2qYRnWwjm5XTdxDfaB
h/VSydXtjZ7fpmgd6cGuP8PCiQdCqwQP5mSVmYIpWWn6qAmOSWT0Vy5j5Es7SKO5
wML139tWJ56sCZN3567x2MzZ18+eWV7uaTwbpESO3wg64JPzGScTli3ZF2yMXFAV
71axngK0dsYMcvzVH5nqpmXvSz4FWXl/24UeHQoUklpPBBg8sBwsQblTHpncl8k+
hCuN/iuphOEMA0UHr3oJ85DRpnaGT5Lejyh1kQikbupkiWMPco6HCNyinoTjZhpm
igoLAETgJrnPN/alkQcrN1ToVSpX5yHJoghhzdZF7yGvmOUOnZfdl4STBcJESJm3
+wI4XNA2Qjz2Qkk6erQ9BftFKL54MQCj8zLGiy7STEAM3F1kTHwHfsm+y3Pu+Vb6
DYc4LERE51MUrDodOrWU5OVL0BGzBTeaKOp1iK0O8NI0j0QqQUhkB/2TTHCKlO+i
+yTerahaQFLkXD6x99Cd5mUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315206844755839349985928713231668888480445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 10:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 10:42:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'komischlila.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846457437957439070601772856249624955645008561936166901025927537601261821966002101797019360524050795183351909281802882091207263391378652262428079739473871805966883470168740360996197839128982201933233250434465126195090428216918312507971811416648809807009907401087342492744853609758668785045348322594327894237269333414810894805813781002039906719613454751153733065943786302767559815886451274731851462503596608434276110117545742752378836079488952497774744989880057751725341916003457848446840379405451550731273156802408462362349630505625806840634135347122852129252812961267436550307832215833254900994375509877859397806659859854991974469274661607106350519736582036205081984461415192433401518571359404726045108187296885163108637585692626284027467054808617180361514978963182341703246848699916319793744491851784686163114588813346146504464637260291714352424375786066632122158471321399988575092689824594870477546590473047779506650451795154155513812680340414207348814580307038807950308543945180675942571825841273514066130593562459164141049319985970883542499566130101329844015481159002994340046616687081788411329267935680594585070503622640407130168481800160153604120981758023086643379098609892567275981348707024330448497389950011703985200795870821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5da03cae5960b1cb214597c1df49676e9e003a57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sql.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.komischlila.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komischlila.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175ff360f070000040300483046022100b89c3f40ab5bcb99874b53a8dd9d9e7d7779d01fc66ac34f146eb5d0d3b8de9d022100f4b6d49de8fa4cf99a6e163a1446a6195cf91e89512159353f7b001c70df83ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175ff360f460000040300473045022100cd44838886392db2c7553dac1fd9aa2f99b5379dfe88b7d4b71164eb075c1ad10220708c872f88f740be58d4d26045252f6647f178be521af879fa98f2b4eaaa6993
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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