chat.zukunft-digitale-bildung.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:f9:e9:dd:e4:d0:86:d2:18:f5:5a:4f:6c:42:e7:7d:c8 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chat.zukunft-digitale-bildung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:f9:e9:dd:e4:d0:86:d2:18:f5:5a:4f:6c:42:e7:7d:c8
Serial Number (int): 327003264320760486922561582287434835000776
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:63:0e:72:dd:c7:c8:8f:73:d4:89:9d:58:0c:fe:fc:ff:47:86:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:8e:ef:95:84:43:ec:ff:8d:6d:7a:56:5d:f2:c6:6c:d6:a5:33:a1
Fingerprint (sha256): 75:10:34:45:cc:b6:ff:9b:a2:a9:b2:20:db:41:c0:8e:06:69:2a:f4:68:5c:6d:1e:28:5a:60:f8:00:43:f0:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chat.zukunft-digitale-bildung.de

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chat.zukunft-digitale-bildung.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chat.aorai-conseils.com
chat.bamero.de
chat.ethos.ltd
chat.locster.fr
chat.medify.com
chat.mobility-bi.com
chat.podmanagement.co.uk
chat.sudolio.com
chat.visuaav.com
chat.wetranslate.ro
chat.zukunft-digitale-bildung.de
cliq.bimequity.com
cliq.crystalgroup.fr
cliq.d-consultant.ru
cliq.embr.ee
cliq.gemnova.at
cliq.ladina.lt
cliq.liebper.de
cliq.meetsalzburg.com
cliq.penninewealthmanagement.co.uk
cliq.profitroom.com
cliq.refocusit.com
cliq.sweet-move.com
cliq.tecamb.it
cliq.yantox.com
letscohere.coherenze.com
messagerie.numsquare.fr
portal.starlingconsulting.co.uk

Other certificates including the domain name zukunft-digitale-bildung.de

(limited to 100 certificates)
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
zukunft-digitale-bildung.de
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com

Certificate

The complete raw certificate details for chat.zukunft-digitale-bildung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERTCbS1C68F/yF232sk0vqyBnT0W6
22+vFy45tM08LsbR3l2+hLpFy53w9caPXhBwpUKKarUzWYMmATsj5zlvNw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327003264320760486922561582287434835000776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-10 20:01:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-08 20:01:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chat.zukunft-digitale-bildung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000445309b4b50baf05ff2176df6b24d2fab20674f45badb6faf172e39b4cd3c2ec6d1de5dbe84ba45cb9df0f5c68f5e1070a5428a6ab533598326013b23e7396f37
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e630e72ddc7c88f73d4899d580cfefcff47864e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.aorai-conseils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.bamero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.ethos.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.locster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.medify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.mobility-bi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.podmanagement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.sudolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.visuaav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.wetranslate.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.zukunft-digitale-bildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.bimequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.crystalgroup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.d-consultant.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.embr.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.gemnova.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.ladina.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.liebper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.meetsalzburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.penninewealthmanagement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.profitroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.refocusit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.sweet-move.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.tecamb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliq.yantox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letscohere.coherenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messagerie.numsquare.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.starlingconsulting.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000173da2d332d0000040300483046022100f147c04471ae3d18187b5a301b7d12233ca3c802dde0a5270b9d20275d29894d022100b90010d21cd54e1a51cd9c291e506faa250496db7c13ff938d66c10249d76eb20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000173da2d33580000040300483046022100b2346485eb599eb68702b858b14ed7a894363225e2f0eef03c02599b7de5e38d022100e5b3d499c476b6e2dc2c90a8da1efb0e82af8f4151723fe0d5aa0fd19c498e30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008334cfa20a17d64b42cc570ad3d285e7393f2dd749b1f927f8e856f65d3a7e9c1e7e24b2b17c133aed4f8fb78359a209be16a95c510312d398cc1476a81cb4a45537ab63ce876b0ed24f436cb57f42d4240d285aee8f2aac0c793c844ed6d7abb565e368f5e89064ab6fab2e3e506006e9b91d32ee5b6945f43ea194cdb7837ff916cb3e04768c5b119ed76b488f389370a34d4118a90a289f80a1308ba4a616123e03f12b9d00452a7b6790fcd8069f7315c675de5cccd20d0dbe19ab6cd0980f11d07fe8f2aadfc62b68eb1ae65886109bc6554cdfb5b2b81a18307e90713b6f0ccf37340fd444ae939c38058c9f7d8f68e9a839bee7904652748cc6c333a4