r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:8f:05:70:86:ed:18:69:56:6f:d8:90:de:40:32:25:db was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:8f:05:70:86:ed:18:69:56:6f:d8:90:de:40:32:25:db
Serial Number (int): 291471813931524687213500849318179506365915
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:59:0a:64:5b:7a:22:c5:37:d0:bb:f0:cd:d1:1e:1f:00:d8:ee:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:80:3f:9a:ad:1e:51:63:50:6f:ea:50:49:37:ba:96:2c:9b:28:63
Fingerprint (sha256): 75:50:1a:ea:18:5d:4c:97:67:01:0e:c4:d2:85:5d:a7:3e:3c:e0:e6:0b:a0:d2:8c:54:36:41:04:68:6d:82:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate r13t.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

r13t.de
www.r13t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)
oc.r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
mail.r13t.de
jabber.r13t.de
nc.r13t.de
mail.r13t.de
blog.r13t.de
dyn.r13t.de
rc.r13t.de
mail.r13t.de
r13t.de
oc.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
r13t.de
r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
nc.r13t.de
r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
matrix.r13t.de
matrix.r13t.de
nc.r13t.de
matrix.r13t.de
rc.r13t.de
oc.r13t.de
www.r14t.de
oc.r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
blog.r13t.de
rc.r13t.de
matrix.r13t.de
r13t.de
kibana.r13t.de
graylog.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
mail.r13t.de
dyn.r13t.de
nc.r13t.de
matrix.r13t.de
mail.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
rc.r13t.de
jabber.r13t.de
r13t.de
blog.r13t.de
matrix.r13t.de
blog.r13t.de
r13t.de
r13t.de
mta-sts.r13t.de
dyn.r13t.de
oc.r13t.de
matrix.r13t.de
seafile.r13t.de
r13t.de
r13t.de
oc.r13t.de
dyn.r13t.de
nc.r13t.de
nc.r13t.de
oc.r13t.de
seafile.r13t.de
oc.r13t.de
matrix.r13t.de
oc.r13t.de
oc.r13t.de
dyn.r13t.de
matrix.r13t.de
matrix.r13t.de
r13t.de
oc.r13t.de

Certificate

The complete raw certificate details for r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291471813931524687213500849318179506365915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 21:55:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 21:55:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683760344246716568592437472762287764698601544841554801850288992939101785973773270949446229764590090180183042396745262414189013113000266432212070195960643363577056812910127188468247763851509256028060040133175352275892686547153176360817228882082488850017508206458913076217626594719422987795062347731156259252424756878155876634769008002314815035686539657250805247714213120690079983724470622838328576637884535411742406411338499716345121756914200223803629930330787842109974387495269895678157341485670045432549308376952709432767035318619655281217387364410897173998837834407532210291117936495726667706016413133973375272512403088850053520264487015529594853056673648997068821489093479027495109842311895905386242570770616934345188906484267533185843176345714342424300405124969870795868372136960667765216116261705218786542749981970756129129313593286160009052819530614269752269677792611985583113282024341124403872863681481831781405131636789378648047972355501055165673158171018172188808987544630922542065675200640428971565187192714911487576573408096102048388025936907527206033507364655793742494680077092185414611158495645693953141557931233603658891141167258730291801857693102732960652727126375315255251145186142981474698830689106482353721042554951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58590a645b7a22c537d0bbf0cdd11e1f00d8ee18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r13t.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.r13t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016912450c9c000004030046304402201bfd6c1a52be86ad11ed06dade747e6e2207e360a318d9d017c744e6ef975216022079a9a5fb5ccf901b688abafed7461053bac7335b103077ce992dc5db80a5945a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016912450ee8000004030046304402202487c9e0609468f4a2575c5bd044626870c6b60769564bde4e02715ad9b3270e022025ca8a96d4514a00648a478ee943972616b51f942fd1a6895dfdbb2ea913f2c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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