rosenegger.name

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:3d:d6:7c:df:d4:45:35:11:ba:61:37:41:78:d7:03:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rosenegger.name

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:3d:d6:7c:df:d4:45:35:11:ba:61:37:41:78:d7:03:b4
Serial Number (int): 272988654862615619601050279651634222400436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:4e:79:26:b6:c5:65:70:f6:15:ba:1e:7f:2e:6a:e3:cb:41:b5:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:24:ca:fa:f7:ba:32:5e:2e:66:b1:4c:23:01:c9:f2:b3:2b:9b:1f
Fingerprint (sha256): 7c:09:1d:b9:5e:27:9f:c1:d6:60:a0:ca:10:7a:3f:71:bf:51:23:8a:bb:39:f1:cc:d0:a1:da:a4:1d:93:d5:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rosenegger.name

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosenegger.name

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rosenegger.name

Other certificates including the domain name rosenegger.name

(limited to 100 certificates)

Certificate

The complete raw certificate details for rosenegger.name in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISAyI91nzf1EU1EbphN0F41wO0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDMwNDQ3MTlaFw0x
OTA2MDEwNDQ3MTlaMBoxGDAWBgNVBAMTD3Jvc2VuZWdnZXIubmFtZTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALzZ9lyn+KuD0eba6ySilMUX22qZoCnh
0rWov/Lud9scST7zdKTiI0pdIg9+DaCmIh9/+0QAbwPOVLp66PkHeG50D9t6YDDE
5lPPFHEfFdY08AecO3ptNrpUNM+5k77sWmArec/xxDNL7aZRv1qxAHVaU027C9p4
RCnLXNpy+whpjR0IEngGftNIy4LYjQSaxZ8Z6HCxVb42LfAZRaHk2Uw96TSa2jWn
uG3S5c2sdaD43oo+dJ7nsk4luZqEpdxTv5vnVqaEcgOf5Vlfwk/2PKHKLoGEvH7B
ds4dfbPdV0hB8MT6cfVJvTpae4JcFO7PzLamZrC1YqevgjLrRskrh+vHiaxqUX3R
/T1S90+S0kN5wckTfKsAUD552TjGrpJS6I3ZcLv7VkddQPjmJcoCt8dhbrlHB6gE
YhoLz6LN5TN7N/MF42aH/cRjyq6n+MxuiHzn5v4p1zv7+cOj6B5sCfb44HF9H1lv
SjXzrmKkPirMgpHbqkDndEIJs58ZqMaVF8Jz23s1RE+7bIh9EefvLjFZEiCZOBkW
577r6idIas3RCeVhO7UDauEPf90+kkKpsPL0k4CDMCtuuG77BGpwxBKx49jpvZTt
u1f1uwtDOYHTjt2CXcmzd7eo1TDJ05udCXDQ1MRkgWmSvcA6netUy5j4rSSvpXc3
P8yEjXYI/X2NAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKNO
eSa2xWVw9hW6Hn8uauPLQbUTMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPcm9zZW5lZ2dlci5uYW1l
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFpQhej
cgAABAMARzBFAiB+Vd1ZDvd1ebPCmkh1dmM5XFdMXXeQjcL09Wy+Jy6F2wIhAL8S
hypQ+hpENQkbT1PvOqdW4QcFt6+BQQqyMq9t/ApbAHYAY/Lbzeg7zCzPC3KEJ1dr
M6SNYXePvXWmOLHHaFRL2I0AAAFpQhejewAABAMARzBFAiEA6SXvoab71tT/o6Jx
S7L1IrPixf2pLut33EO5Qx041OICIBxISux9vYW/ZCudnTbm5fsZLXQit0yf9hsL
1otHpG+mMA0GCSqGSIb3DQEBCwUAA4IBAQALogDOQlkl3bpKb53dl8DSGS6z9i9e
A+iJ/wlzasATsCMsorNQ0k/nJArmAAlbdPkv6/TXghocqx5wQUL48Qyh6CPzyYKu
dqkkdXA/jscRdqfzpD2mN00PuKa10npStKNqZijFYtz3IrSQBiEHerj03nKC3X+r
/S3SwJwjVGMum9bkpryFW2jiFQAdoZH6XlSIAS7F2/cCxLn9uuuiZM038KkcFsUA
SKVeBmCUFHhm5IqJQrvLt2vOVtQfDjPTSq082940tP7nSFegtdte1jp5geVuT2HW
Tn7J97GE67oIVUs7tcNsv0DumkKSKjX4DOSyiq2X0Youn0zoOE+HKwhr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272988654862615619601050279651634222400436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 04:47:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 04:47:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosenegger.name'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770446556715972402557825695351928443611193167217321615098694916733075487869202460539306444364235712131746518709361650714908483930452709641510664870554998042597817433896441514906676551091667163616481105413910716940446777941763963220310563001597060660746594214403012422048063254010658681844700256936173754122346766684657514400998622813808256540417385546089241934706823032306215664695340391620372516494067195709372063456030966752971437623107667309653191642523718035452260870568328367101600150537123762849033175285299532747216407278593215338343406960238639675649566070923710815749803443723627227652620413314088433824268036876982459645517666208176550336629551469220013634881763098042592580143173074184324029443588513258650343313367094191090119514549182836953970876070073657737607148977126959715652192217945730522748003438980050822578380527188092270192490499233156581925877673156050353969868626034474041821292759020956708668008298513357972908952522500091705787071582963839915343110743579264246640277039764600728203313638203208447316838716000219506560965184261343330974637717897127462073711870328258410819380495571168778945181362181282303316775769466039262734688944359555187904225885772107989389249177572549393542501525946040226175784942989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a34e7926b6c56570f615ba1e7f2e6ae3cb41b513
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosenegger.name'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001694217a372000004030047304502207e55dd590ef77579b3c29a48757663395c574c5d77908dc2f4f56cbe272e85db022100bf12872a50fa1a4435091b4f53ef3aa756e10705b7af81410ab232af6dfc0a5b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001694217a37b0000040300473045022100e925efa1a6fbd6d4ffa3a2714bb2f522b3e2c5fda92eeb77dc43b9431d38d4e202201c484aec7dbd85bf642b9d9d36e6e5fb192d7422b74c9ff61b0bd68b47a46fa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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