www.rokar.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d9:35:93:ff:21:80:95:ff:75:fa:df:53:25:98:92:90:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rokar.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:35:93:ff:21:80:95:ff:75:fa:df:53:25:98:92:90:47
Serial Number (int): 422361634874968212030703919022893209653319
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:61:c5:ac:b9:c8:6c:65:bb:53:d4:8f:86:10:d1:24:05:ee:9f:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:38:22:9d:b1:a0:15:32:bc:ee:03:49:0a:c2:94:7e:62:bc:48:2e
Fingerprint (sha256): 7b:ce:38:23:44:b9:c6:b3:6c:12:03:02:7a:dc:b9:9c:22:35:6d:a4:ee:80:e8:51:83:61:93:f4:ba:10:59:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rokar.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rokar.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rokar.de

Other certificates including the domain name rokar.de

(limited to 100 certificates)
disbohost.de
allesistfuerdich.2ix.at
*.linderclaus.de
*.flohmarkt-horst.de
shop.immopano.eu
www.rokar.de
www.rokar.de
stag.zorn.mobi
ninogemser.lima-city.de
*.rokar.de
www.diaryofpeng.lima-city.de
www.goeger-it.de
uipzakqndbnvdao.lima-city.net
www.rokar.de
www.rokar.de
www.rokar.de
www.poodo.app
lc4217.lima-city.de
www.locjul.lima-city.de
www.rokar.de
www.rokar.de
*.virtumax.de
www.rokar.de
www.rokar.de
www.photodownload.lima-city.de
www.verwaltung.sg-meerane02.de
rokar.de
www.rokar.de
*.rubber-queen-ana-lucia.de
gamerhosting.lima-city.de
anon4lulz.lima-city.de
www.rokar.de
solawi-luisenhof.com
zd.innovationskarten.de

Certificate

The complete raw certificate details for www.rokar.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4eN23MRva5iQczSL0+H
nuH2T4qP1GXU6EjckeLV7e+sgN9KWq6wVt8WpjggYHQl7zMbqvVKgKuQkva7fanF
LR8PSSzerRclGVQwCpWEmwcOZ9DLpd7nx0dt6YTdXK1xzO7ETJ/vlod5Yu6MewvU
J2kP8hGNHnr3nRjvt/Laq/qywy7qqY+Bqqosf5+qLpJw9h2jJOz5PkzdJOJt6Jsz
/WszeCCBr7MmPte4yCKhnx0Id/rO7wvpo+Ywk5hcl7hjCipGVjZCWl7L9ClT53Rr
f6zk/trPNVVTzxjQdcy3Z13SCnd6QMMyEpkBK2X38n+pYR2xC8363pJ2wE9DJUoz
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422361634874968212030703919022893209653319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 06:06:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 06:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rokar.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19128828282589751607835086789490313127677744896263116837315695822685372419093609878578202514686077223677027326658707613895706225490523938600002272136609609382327041214728190241211144054438120183768657470769679907296359572133198328765886387936508962674288453752504315086952027552973468227163686042936439247894963223614940537680634004676074150251135482910343284006093189112667571728314316212555412809373710798138369322814077460921018087093205339615249558388666574034627448045505586794213379041713619642034923577206462383473242991702689809986457031535564353044609018622297749750519821928862936534022813231687465985258247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6061c5acb9c86c65bb53d48f8610d12405ee9f04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokar.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1656d25300000403004730450221009c3bc760a898e077093771b2ff48a46633cc79d6d33e45b17f93b12e747b59a902204912d23af98e2f4110fb670a028503d86e453628f35d700d4ea5d3f20c18ec9300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e1656d2830000040300473045022100b70b0699e2409532bd2e859e900128031e0ab3dcd4cac699b956316dee0c2b0c022061c41faa231ee8e7241f13b6493cf8fc33e7a827e7c1e9ad5cadec2ab230ca4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bb8be3f5201ed7263cd393e32a40e2100b230bda2e08451f701a6bc6a688edccde72a2983b63f905b0ce4d3d42eeec71538e386546e9d0058ce464cc16cbb331197124afa21cc66837bb292aea0e6db81ba07efe52970e23f62f31f0aa156d21391d283c5be347fc4cc4934cdafc30719eb033bb7cdcb7c0c723964a3313117306d4e2f064eade04c32708cafb63f899b611104c1bbd7322092aa6f06cca7e8497d33c14db2ce766b5156081436242798b0515caea0c3db8f30f5f0f48e7a1b46059e7ee6fc264d1e0d11547139b70226369f2522e6eabdfe72195ba1666144c0d3839452dbfc9ffe1200d16cf01c1a1774c61b0a50f445b3b1e01412db18ed