fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:35:67:7f:c2:1c:87:1a:b3:f9:71:a3:8d:d2:ea:6a:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:35:67:7f:c2:1c:87:1a:b3:f9:71:a3:8d:d2:ea:6a:dd
Serial Number (int): 341714482870220359048629287319345493076701
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:38:ec:52:15:32:8c:f5:71:0d:7a:e5:05:ee:01:a0:dc:17:b2:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:ec:4f:42:5b:48:f5:41:fc:a8:c1:93:05:e9:27:e1:00:21:09:1c
Fingerprint (sha256): 7c:3f:58:a8:6e:a6:2d:08:24:42:7d:89:e3:d4:c7:4e:0c:63:41:01:fc:e0:6f:cd:0e:0b:99:3e:cd:a0:8c:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2VkC3gfmjDTPGVfuDYGW
WKRY5PfbUTw8M1cAqeBArk3GvG25vlSl/G+jACalsQgHZNe3ZHGqSKAQl2NlLjxL
kZJebSv6XIITfjhFlzGO1dg2ktVMmZm7CXKBxFtzt+yywtPrXYnABO250Os+ZtQF
bcvMbkl8ilolBSMuUwx1OwI/0TYnZtnadtUXsxzm66aZc0OCUignWVuaq7dyyqyd
HG6qgRGfRF32qq4pD3+PVm1M9L9VTiVp58sVhU5onWOPbwO6DcFyRRwV6YGiCfxq
IZub9Nzh4Ucj7+wSOSUMwf0PrhaNBZIfAmf6qh9e3amZOWN/cBm3FAIlF0MB7LvM
KWjm3hfBKkb4ovGg8BwChX01c6AHA5jlGc7UFqKh6GCW/WdVC30LXNnMdqhD46qn
jysIhVAGDwQYUYq8c9u+t02CZGfyKDzTTGrWu7CvC4CWXGdTCM2ZOp5h8S+VkzZW
D7pEGamURfjaHXR6M5/q9eorZVA7g6t9i/9wiRns/m41TyDvxUa6pzEk5mEH5muw
T26Pa+DyILUlQLTTgG8uQ21I0iQiH0igAyVlDCXJLcD6czk800LWraA0iPMwMsNT
1A4y3Uq2k4VhvreIJHR6vGboHcFFy5t1PqUDQVi25bnUzunKsQPwggdhsTu3gprQ
ZWunYPMU2FerhpNc/nAu6f8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341714482870220359048629287319345493076701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 13:35:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 13:35:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886701255009544512873044419147025473589148002272414580378354529588077206172543638443378048964803200660024279915593389619392134612154327910243767158019606412375750000200557418599704246907798996398079186080804634863683408529125972538660401093500665515943695174974665613992428157026407999127978318217893801391343513496618776303669224021137780075642584436729732838084690154131823918840045137421836843233019783951336868819255487606574416646148922446015850315748831557558943252281828164911330823600318700922973000107235519937891783651987505183418264230291263744508782103788404962437431556486501461514942171428748952887881571055745156385773001677558624380586771868262224841234897214850492545311832393714551484552747665718798722110526745143833803248941467175974179485810905057836873893592419067970587774201014906977138749008209368117604705279980651468767213675126963443684968435896377425241774076552082725416305389803591606113684982287708728452156019828125575953233943975089564624908142378601970621308395846831260782321276210420161572010270307547578123206837976606427288816756303365886638643849297465736114740011075951196147343684317717946447480914744783370217647833824268399187886826316272113073968223918707769596785944905092651033178335743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2038ec5215328cf5710d7ae505ee01a0dc17b295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec1e3af3d0000040300483046022100ec351cba70d75fbbb11308ff2f965cc6db5ffe08214d2051ced1a628f3d8373c022100c218f5909ce18aec7930fc540548682022d6b0de4570c4e1c040aa750ec8b7e50077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec1e3b10c0000040300483046022100f14872223824dec5ce65092eb6858ff9204675a7b2f657cc559e489463283d49022100d917ec7e5d2e3c7371ea4b1b6c6623512f537bf6d3e6d0d64490ecbe1497fcc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001214ae48840b6a339bc06953cb4cc5cd6f0c9f87273e9b5b484c8c8d2435019d275b344ac8771e25da8b864a6e4188abc916e4131eaadc5a524a4b6fc40df77e09b59f5533a83e33e88a7c9145891f1995d29c2a005f1d45e33fa0e08c290cd8061b94792db135c80257df00df569288c93669f7a314fdbf0e9bdd1b6ab82a56c87ad73f7c4fa4e027336c7f859b257c8a9fba70fcc8acb8518cfce2a8dc3603d07f17e1fbd45e8ad73cf50431cbc98bb18750ced445106d3f9a841a0431bdf6a09854064cc296c334c2d4cade56a2f0f1af0fa21e644e072696c462319f324988fe37ee9bc4478637ddef5fc9336458148d46ec5e7a0c57bd5bffbebffeac9c