git.endil.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:76:94:16:68:3e:d7:fd:c7:27:35:53:2b:dd:90:23:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.endil.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:76:94:16:68:3e:d7:fd:c7:27:35:53:2b:dd:90:23:3f
Serial Number (int): 265577864016241874098836694011928158151487
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:7a:b4:33:33:63:fc:43:e8:f1:3e:c6:7f:d7:a5:eb:d8:aa:74:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:dd:24:c8:99:4e:1c:fb:08:6e:40:4c:14:96:2e:b2:1d:ab:20:45
Fingerprint (sha256): 7b:c9:fa:03:6f:70:f5:ed:6f:d2:c9:21:b2:f6:ca:5b:21:12:e7:c4:00:4a:f5:67:19:6d:4c:1e:e4:88:6b:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.endil.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.endil.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.endil.de

Other certificates including the domain name endil.de

(limited to 100 certificates)
service.endil.de
endil.de
files.endil.de
stats.endil.de
service.endil.de
files.endil.de
files.endil.de
service.endil.de
service.endil.de
git.endil.de
git.endil.de
endil.de
endil.de
sql.endil.de
cloud.endil.de
stats.endil.de
endil.de
www.endil.de
endil.de
git.endil.de
git.endil.de
sql.endil.de
files.endil.de
service.endil.de
stats.endil.de
cloud.endil.de
endil.de
files.endil.de
service.endil.de
files.endil.de
stats.endil.de
sql.endil.de
sql.endil.de
stats.endil.de
cloud.endil.de
service.endil.de
git.endil.de
files.endil.de
dev.endil.de
status.endil.de
cloud.endil.de
stats.endil.de
endil.de
sql.endil.de
sql.endil.de
cloud.endil.de
files.endil.de
git.endil.de
status.endil.de
www.endil.de
cloud.endil.de
stats.endil.de
status.endil.de
cloud.endil.de
files.endil.de
endil.de
git.endil.de
www.endil.de
sql.endil.de
stats.endil.de
sql.endil.de
*.endil.de
www.endil.de
git.endil.de
files.endil.de
stats.endil.de
status.endil.de
stats.endil.de
sql.endil.de
stats.endil.de
cloud.endil.de
endil.de
endil.de
stats.endil.de
endil.de
stats.endil.de
git.endil.de
service.endil.de
cloud.endil.de
service.endil.de
git.endil.de
service.endil.de
files.endil.de
status.endil.de
files.endil.de
service.endil.de
stats.endil.de
endil.de
sql.endil.de
sql.endil.de
service.endil.de
service.endil.de
sql.endil.de
stats.endil.de
stats.endil.de
service.endil.de
git.endil.de
sql.endil.de
endil.de
www.endil.de

Certificate

The complete raw certificate details for git.endil.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAwx2lBZoPtf9xyc1UyvdkCM/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjEwODUwNDZaFw0x
OTAyMTkwODUwNDZaMBcxFTATBgNVBAMTDGdpdC5lbmRpbC5kZTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAN27w4PDm4qLrNEznK0FglM9TT7v4J7R+hAx
/fIwrHG4dxSa47vU3jp4taq5giUOd5Q5eVqXxbbbnBCD4aXy4nocYURXoS+LQK9Q
UJTttDwL637cllOaLX8ksmao9Zm5Nd7vFQV6ZHoqN5J722Hyv4xBAc0aCKs6mxwX
/yYaUfmCl4NH7Ji7CKXkgBIhYQuLtClU1vaYbi2EFiUAYETQc8z3QyRknqDDW86R
hDrCFP0qCD+Kbuc8eEkrHRwIyF2T1vFhs4ACsWQ7aVunfjmmcBveMOcvXBOOy7rF
40TD8NQfiOvRpj9LYYrA8dphkyhMarZzjTY2/kXiGDoLNOXuAHeWojIdcjxmTy4t
OwYDWRMnHtVnk5swchNdvfk0dIV1mkntS0ApgHc968FepiwSw3Sq6dEReM9v/Ee2
7LS/7RAQbazrnmHLUTe7SzSPn+mWLI5aRkY+1uLP/CqSH4rGHV/5VAO1l1rQOmtO
z5GZDn8pPoXg1qMUpc8OVn3z2vv4h55iP4d6D7W1/2VCpn+C2OjdEoukqaYmWRIY
b6J+pOtPW+QPof1ayBaXQYC6f2MDNc9b9nP9Fha61n4dS1SLln00tHx4PKn7Pm22
X7Rp+yZ8rtvp62FoYR/kcesxg86G1sQ5tdm+ri5VR90x71bBWZOju/oDEnhuEwKB
70wEdOXDAgMBAAGjggJ2MIICcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFD16tDMz
Y/xD6PE+xn/XpevYqnSHMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ2l0LmVuZGlsLmRlMBEGCCsG
AQUFBwEYBAUwAwIBBTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYG
CisGAQQB1nkCBAIEgfcEgfQA8gB3AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiT
AZ3d8dv+AAABZzWt34UAAAQDAEgwRgIhAPEjnu9bYYjr0/zm9mkYnI3SesWMRpEb
4uIuhwINtn4hAiEAz7ZnU8YSVTMu6WjmkL9v5XGm6zfm4ixOeJUheSM/zjEAdwBj
8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWc1rd2TAAAEAwBIMEYC
IQCK2rnn65Knmbleoihvmg88B2NSvsh4ZVWOpZTyipmesAIhAKUFgkYXHRmUICsB
MHoXawhMSYxwN3uQCgqhXF55C2ngMA0GCSqGSIb3DQEBCwUAA4IBAQCR1JQUfN8B
EmGCDy0gKpbww4/WSctiEDxPccqPVCL9PGfxMZCjMK/lbNvjgeBEQmzKfWQmXWxA
sEU0BhxJDVctEfmCO3gk4aSZJjMk39fldyiwD4NEz6TkVB2OEX+d38F9JjyOIcWe
KNSs8ckl4drcBDspaQ8N3Pf4YDhgH7nd/mvnBiFCVA5KnhTBZ8+Rwe1LfSlwtJ5i
MW0n24XKRb5ju+XR6Ra6Il8UO/QCaWmCBxdvcGgJ4lOdZRphjeF0L7QpKFwzuvmY
eqEHE7xkI6wy0sbs0IErP0rrDOI2u5t6FKa7Ve/9MP/q/SoQwHPjqRT3nL2hLb9m
mkJKCLQeCqci
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265577864016241874098836694011928158151487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 08:50:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 08:50:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.endil.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904593562409287390112926620823248635668120621158561020094398851958065436801193697975647869814516428421783770318286915296534542520403429482803263204735344927087497390830399085099431730794418151506848260995910205125579481591262277565967505993648317590108477838317022299944277412494401550777118961654114210390888923422853112468450136476715902265336023946142365285240446383555209167434308808121945327195437742756465194147436632678036573915132847688658701440257637124212232376311955928169613558097866632364102262366734792400477665204644691242411689892046061845854215661814167241384791555096429070703348069601856979023477273669431978512323825395319210317443831186847717854032970759856992384454292809947370998683661101933255981261156084408292928296650817242099933120025146507982971591525486336510723782295218397166818054763164652873884565151465349442696294445074572886615391557726630644438611272819072964826409755350339634429232397601936940382891863682415404937401703911710458130853049423265797467788627653278746916938015953684065308163278614814192867001697851519942868980626514420252840728974680465272150739621000721527897634177786259309873739851614723846869305115246560480503178637037426656534138530477148683403738995642842793486163699139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d7ab4333363fc43e8f13ec67fd7a5ebd8aa7487
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.endil.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016735addf850000040300483046022100f1239eef5b6188ebd3fce6f669189c8dd27ac58c46911be2e22e87020db67e21022100cfb66753c61255332ee968e690bf6fe571a6eb37e6e22c4e78952179233fce3100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016735addd9300000403004830460221008adab9e7eb92a799b95ea2286f9a0f3c076352bec87865558ea594f28a999eb0022100a5058246171d1994202b01307a176b084c498c70377b900a0aa15c5e790b69e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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