idgard.de

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:3f:f8:89:c1:0e:b4:97:57:08:59:80:0a:12:db:27:23 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=idgard.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:3f:f8:89:c1:0e:b4:97:57:08:59:80:0a:12:db:27:23
Serial Number (int): 302936338406976300996647918023237162444579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:42:42:6a:28:be:88:d7:8c:e3:2b:15:03:3c:6e:83:bc:2e:87:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:20:b5:9c:bb:eb:f4:2a:09:26:26:05:3c:c5:a5:e6:50:92:77:28
Fingerprint (sha256): 7e:1a:c7:6b:5a:ae:9c:cf:da:97:97:40:e5:2e:f7:cb:e0:39:05:ec:e5:a4:e4:49:cd:cd:b6:95:32:e4:aa:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate idgard.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idgard.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idgard.de
www.idgard.de

Other certificates including the domain name idgard.de

(limited to 100 certificates)
www.idgard.de
www.idgard.de
idgard.de
zoho.allgreenhosting.eu
idgard.de
support.itmagix.nl
idgard.de
support.subrosagroup.co.uk
*.idgard.de
*.idgard.de
support.viveflamenco.com
helpdesk.bau-master.com
support.axondevelopment.co.uk
idgard.de
servicedesk.resolutecare.co.uk
support.viveflamenco.com
idgard.de
helpdesk.bau-master.com
support.teletechnics.com
test.service.idgard.de
support.itmagix.nl
www.idgard.de
support.bitexen.com
idgard.de
help.someday.com
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
support.bitexen.com
*.idgard.de
*.idgard.de
support.itmagix.nl
idgard.de
support.jackbaker.dev
support.newlink.fr
support.teletechnics.com
assistenza.amotive.it
support.newlink.fr
assistenza.xsystems.srl
assistenza.xsystems.srl
zoho.allgreenhosting.eu
support.jackbaker.dev
idgard.de
support.what-now.co.uk
idgard.de
*.idgard.de
helpdesk.bau-master.com
*.idgard.de
helpdesk.bau-master.com
support.itmagix.nl
idgard.de
www.idgard.de
myportalsupport.thingco.com
support.axondevelopment.co.uk
idgard.de
support.itmagix.nl
servicedesk.resolutecare.co.uk
*.idgard.de
idgard.de
helpdesk.articad.com
servicedesk.resolutecare.co.uk
support.newlink.fr
assistenza.amotive.it
idgard.de
support.subrosagroup.co.uk
support.itmagix.nl
test.service.idgard.de
idgard.de
idgard.de
www.idgard.de
support.what-now.co.uk
*.idgard.de
assistenza.amotive.it
support.subrosagroup.co.uk
servicedesk.resolutecare.co.uk
helpdesk.bau-master.com
support.viveflamenco.com
assistenza.xsystems.srl
support.what-now.co.uk
test.service.idgard.de
*.idgard.de
idgard.de
idgard.de
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
myportalsupport.thingco.com
support.newlink.fr
zoho.allgreenhosting.eu
help.someday.com
www.idgard.de
support.axondevelopment.co.uk
zoho.allgreenhosting.eu
helpdesk.articad.com
myportalsupport.thingco.com
help.someday.com
support.bitexen.com
ithelpdesk.beaconedu.uk
www.idgard.de
*.idgard.de

Certificate

The complete raw certificate details for idgard.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302936338406976300996647918023237162444579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 12:26:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 12:26:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idgard.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684972900286032668286934937295648622960770005929836754013043368798897726486524406686741089370099743710452492168586965948816333741567459918378776385037778661799891960766543231582540565770929165806447370738142660764660588803013262504220572461747611690455772410842598216435685346423947778931237501331619818772914600125772575332590832032430285149631898296384468046924107117341270482428955770905484566057773228811533258372693134383141555784552694052904930050589905819009494472342934546081481334389578153875297750994521619574185153830955746662617063179870812779335757116523469493985851234921854786021112540477984568647374765873700575273902024090628540833045687461278812558504338075174553531035295058485126070871036079691599168969717331119286936041178788004587475129120784252712352667220053330744974218639403303200038458340725805810550893886900500895695920542907563894238652102214824101426367172286935178398539253545316435518113798195419901263141500673546845648067354032202525306860863788214025890326437927430631234191886202080345998998149292212407880850095552048602938044469195898045597768317631496406871536295203400070213909368463953215453613520705990413236501008292458735472351233858847201267755466757684123489196124795549746816923455529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8642426a28be88d78ce32b15033c6e83bc2e874b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idgard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgard.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce41a4134000004030047304502210094e2f976c8dc5359e5baca97affa7addd10f214920fee0209b982c91d6c7c33002205e9902f864c1fafbeedf6c63810af8c53093e52fa065cc2a5387aac0f98f05c600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce41a41600000040300473045022100d1f9a9635c522e751c3e577ce818399a0379192b850030bf93344bbc072aa72002201dd4db4c55b2d3ecbe788a779657d42b37609ffefd5a3d67866a0ad630cfbca7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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