portal.vp.primaholding.snailsites.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:4b:d8:46:53:31:45:91:29:60:1d:c1:d0:16:ba:53:6a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.vp.primaholding.snailsites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:4b:d8:46:53:31:45:91:29:60:1d:c1:d0:16:ba:53:6a
Serial Number (int): 305674380557167911014515997032830390129514
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:17:ce:01:79:21:85:ef:f5:57:ec:32:f9:95:a0:5a:33:ba:5e:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:a2:18:d1:81:21:63:18:31:d5:fc:5d:ef:1c:77:d2:30:c8:e6:b6
Fingerprint (sha256): 77:f4:5a:47:6d:24:00:bc:0f:54:67:20:b6:4d:8c:30:3a:0c:43:b2:61:c7:76:48:48:5a:2a:31:7f:d8:fd:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate portal.vp.primaholding.snailsites.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.vp.primaholding.snailsites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.vp.primaholding.snailsites.com
vertriebspartner.primastrom.de.snailsites.com

Other certificates including the domain name snailsites.com

(limited to 100 certificates)
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
anywhere.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
www.snailsites.com
wgg-hgw.de
wgg-hgw.de
anywhere.snailsites.com
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
portal.vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
www.snailsites.com
version.snailsites.com
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
vp.primaholding.snailsites.com
anywhere.snailsites.com
wgg-hgw.de
anywhere.snailsites.com

Certificate

The complete raw certificate details for portal.vp.primaholding.snailsites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvXE8G/0NU+kJkE1fkDWD
P5c5DK7DMyg0CUdrfd6qOiJxU7d3fAgO2fykcIIJ8OfVeP9nmS2A0kUDJRoQ/oJf
UunAW6bqcg41Vx+6hxmK7yLVrPbQ9SWnWfqqmc5xZYbnEP4BVieOQqQwYv6R6HBz
Bi8GxtTx5nI6SQXdhC+gR41bqaNx39gCt5PqR4TSbb2XvIxZ9voP0iXiX1W/xB42
/FMjy8qMCZOXlPpzSwzl+CKGL4S2yF/ZfFX8JXxjgohb0VOwOryPXjVcgEIFMuoM
f0UyX/bgiB9h4EnI+QLiIs4AAdJV51jwjNmrHIdCEYcZq/3OrlWnR2QH/aSqzcIO
bbIaKm4aMO/puDNf0TsDRl0uDIoyE71Rq32HzeNhgfsxmIcmbggB4SlOMdVXcTw3
M+o7vZmbtUFVa7soGhtyYsu/VM2jM6rIilviC3E59gVoIL5Zgm0p2xGrq7rvrXa6
CGZFpAW18KfIx4WUkr6Y8TD0VOszxwu7I/pOlFM2x/E+efFh6O+PFQOwxDI5cmC6
8u9d3aON9TZ5PrM1cl5ugJvVOoJ6+eInM4g1m367tyotNrQKeu5OG5F//oCbT1YM
hsW1yoJRsfzMpP1PM+/bm8XLCotG12tGiyTCf1wgHVhJA17ODvN4Igt0XCDWtUr+
d37ZguyT38yrwNxjWH8FY2sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305674380557167911014515997032830390129514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 02:08:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 02:08:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.vp.primaholding.snailsites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772857251076740994836660909228895677936088126765158502926123348097018744840708126373154515523334221485239221634830969961326526177641253721883436325232056774076202728552959815448745255838236705583933031403270904304177074563737111466929103389560489142441341963934460855819080617355209216191669651289791098482237484774035997853419932511551502752507615965983798572572125302812072873086833815984513488988266970080220671956600564202255064664995914220288810380789420891522124432520557840367108225177894407729158653686329514918569332477084484446883672468777519399402214969635159836727880382837058803446057940751061205753094877803387463985430712338476245909316939366121895731744688301864216971337921915679271155047328240022108129851971094603591684927660928035870701071410423924652673606032343317548825592060316290404915183601606317878719387436014013077161574440910139750366973419800124991052627266917125110286001196576900496642091405328741938345190826338668300849827033804727997465182570489386208952650584370761220046453754338287585654774871742703025525516819027663997293516540137112859362416123875435026405526198075944717026765892950555697451067421256686491151391948624978993283317896441249959541487750614868586027449839832380296099004769131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5217ce01792185eff557ec32f995a05a33ba5eda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vp.primaholding.snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertriebspartner.primastrom.de.snailsites.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5348ac5e0000040300473045022100e15a618d28c974ab0e693f07b03fb20867edee1f9c9569109df2aeee19a98585022070f6c025cd045b43b9ec29d9c6a141f9c8ba2e9e9a8945cc4a3d8234c6000ce500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5348aca900000403004730450220445e9f4b77ccde3b7aa67da62894545da6aea2a49ff1b92ab67fe707bb18c82f02210099ef952331c976f7b19134badbf9a6d3ce1149674637e18c1c227013e1aa0ccc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037b5ac53f0c8f7399595019d9cb461aa971e1d6b5a77cf9b6abf3b61542a1d9b1a1ba02816b0ddeb0dc2a798c69b435d92e7bfa3ffea5cf80dfd8ab90f4f0a12b1f09f607ee552b2f9fc41dc6a91331b0ac69ef6befda2f091d5bbc02b3741e486317a0a67e475a37a4e020b1fe8d714a7071e3f7c48f35879678289eb3a3ea43ef09a4de5c35a22c1233b2e73a9a3cad18fef7219ac7cf200629ee40dad1fc92eb75a19bf49aa106b796b172ad1dc6871d90b050b11e0e955f9759dc4a2cb62be16c13c03cb3ae8fbddc8e3ff9451381e282a3f604710abe48fdacf7d1c043d6fdf3e20bd3302b1a7d4f4d2c34bb6b16649bda6f5d41d1989907767cbbe77b7