retrendo.lima-city.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b4:37:29:4a:3a:11:43:b7:2d:79:99:cd:d8:bf:92:e5:9a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=retrendo.lima-city.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b4:37:29:4a:3a:11:43:b7:2d:79:99:cd:d8:bf:92:e5:9aSerial Number (int): 409773291702248167515125258594701855090074
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 88:53:e2:3d:5e:30:1d:c7:54:d2:6f:55:42:51:f0:b7:eb:b0:86:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4c:30:53:91:3d:34:d5:9a:b5:c5:60:84:f1:63:cd:15:33:28:63:3e
Fingerprint (sha256): 79:09:5f:f4:20:ca:4c:3b:d5:10:e5:e8:88:fd:1c:6d:ca:af:67:c8:c4:32:9c:1e:3b:3c:a4:c7:ad:96:f6:1c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate retrendo.lima-city.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for retrendo.lima-city.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
retrendo.lima-city.de
www.retrendo.lima-city.de
www.retrendo.lima-city.de
Other certificates including the domain name retrendo.lima-city.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for retrendo.lima-city.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISBLQ3KUo6EUO3LXmZzdi/kuWaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTkyMTM0MTZaFw0x OTAyMTcyMTM0MTZaMCAxHjAcBgNVBAMTFXJldHJlbmRvLmxpbWEtY2l0eS5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMs3Ir5lF+wi5N1GFPZ4EWPY valyMNl2FIcsjM0E2JpqDLNUOcJ069gZZsXWmiwpfCFYOzJCKwZfajJSNzgPJv8K l7D/nbQdtNfIuwi3HYRW4bsdx+WXjEtAVscKOQbjIqA8YTobc6RtHvsf9RRDEiEV cyY07AwztBk+aeV84Z0SQm925Ua/JAPeN8fyDef0a/HE1aG9N1ok89qQESAyuexq J0DbAWVpT0Gqi9frQUtLESGGKHdODGmJfI25mHHaze+K9h8mcKkXi+t28DEEEjxt LZ4a7tcbp1TPD9rKsOWAbB0EeFyiMI3UWcN5sgbG8hBjZggO4smC6l/LGam4XfsC AwEAAaOCAocwggKDMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUiFPiPV4wHcdU0m9V QlHwt+uwhkswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA7BgNVHREENDAyghVyZXRyZW5kby5saW1hLWNpdHkuZGWCGXd3 dy5yZXRyZW5kby5saW1hLWNpdHkuZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuuJujpQAnohhu2O4PU Puf+dIj7pI8okwGd3fHb/gAAAWcuHChEAAAEAwBIMEYCIQCBYohqZfLja30xrAbi CXWBI5vqs15KAoiE4uSYaLdvxQIhAJKGh8Ye85j9FhW7U4fQa86AvRGhu2vS41mW UYRRUAcyAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFnLhwo UgAABAMASDBGAiEAmNlO5uEUxXjm68E0ZCw4bf60HIApvwraePasHafotdICIQDy /Ja3snGqzMCfR9jh9tccKC98+aLAw8LD4LzS4jZNezANBgkqhkiG9w0BAQsFAAOC AQEAm8XNqu1qIwH5i7VRbyk3wPYHnBuqfvJShwDw2w12vcHKusWqeg8AgUTEd3nB Ry7J0/5pedSSRhiI068i4zEJJJ+3UaAT1PsNmOPllOGHq87rCN1k6pP1xiN90QXg IXEkJPrjZFQjLJKFQR8Rm/qx4lUK1NgFywkBiJFAUoqRv25/JuzH8nOrfCO/+66A uoUFvg969K4cKPL6FWZ8iLsD8aVB/c/q+NVw6RfiDxvXAXTy1Mrjw3XnkX0X9gf3 SkclqIlNm7e3CO2jk/VnSQ6BJBW8uapmkgajW7Oz1aY2aokb/BZC/G9AuwIm/xie /Eor0sOAjlRUuPNuomyfVeLf2A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzcivmUX7CLk3UYU9ngR Y9i9qXIw2XYUhyyMzQTYmmoMs1Q5wnTr2BlmxdaaLCl8IVg7MkIrBl9qMlI3OA8m /wqXsP+dtB2018i7CLcdhFbhux3H5ZeMS0BWxwo5BuMioDxhOhtzpG0e+x/1FEMS IRVzJjTsDDO0GT5p5XzhnRJCb3blRr8kA943x/IN5/Rr8cTVob03WiTz2pARIDK5 7GonQNsBZWlPQaqL1+tBS0sRIYYod04MaYl8jbmYcdrN74r2HyZwqReL63bwMQQS PG0tnhru1xunVM8P2sqw5YBsHQR4XKIwjdRZw3myBsbyEGNmCA7iyYLqX8sZqbhd +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409773291702248167515125258594701855090074 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 21:34:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 21:34:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retrendo.lima-city.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25653564343832457850305016923446830758163468627797274529887668314202469232944100625012943616303384761646335640325215159070612298419648927734919293159608246598597423218675845996279511352797107546881075024843787880282771429629787156213954775451772899420818153825932777273663401275439489586063383659510992086129993003325081155488506731349826087923555088264485204595168658494111911216762693241903853207162814913094083357111247952812093263516793260389592546578490229042313078336787725806588477382733446092053101874764027374580782006070147721098227898293074753608516410573624505143281034919065445426099355856536213923585531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8853e23d5e301dc754d26f554251f0b7ebb0864b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrendo.lima-city.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retrendo.lima-city.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001672e1c284400000403004830460221008162886a65f2e36b7d31ac06e2097581239beab35e4a028884e2e49868b76fc5022100928687c61ef398fd1615bb5387d06bce80bd11a1bb6bd2e35996518451500732007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001672e1c2852000004030048304602210098d94ee6e114c578e6ebc134642c386dfeb41c8029bf0ada78f6ac1da7e8b5d2022100f2fc96b7b271aaccc09f47d8e1f6d71c282f7cf9a2c0c3c2c3e0bcd2e2364d7b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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