rosenegger.name
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a2:62:9a:b5:67:77:ea:97:6a:d6:e9:57:ab:1d:d1:75:90 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rosenegger.name
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a2:62:9a:b5:67:77:ea:97:6a:d6:e9:57:ab:1d:d1:75:90Serial Number (int): 403705954804849905106341934385727693485456
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f1:49:d1:b3:4f:dd:74:dc:78:e3:47:88:97:1c:b7:4c:f0:f2:7f:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 87:96:5b:3c:a2:f9:d2:63:08:7a:72:18:7b:0b:5d:03:94:fe:bb:b1
Fingerprint (sha256): 80:5d:5e:40:1b:ed:42:28:8d:99:dc:f6:92:3d:d4:3c:e3:60:d8:06:a5:a8:3f:c4:5d:8e:0c:14:7d:44:f6:f6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rosenegger.name
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rosenegger.name
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rosenegger.name
Other certificates including the domain name rosenegger.name
(limited to 100 certificates)
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
rosenegger.name
Certificate
The complete raw certificate details for rosenegger.name in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISBKJimrVnd+qXatbpV6sd0XWQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTUwNDQ4MjRaFw0y MDA2MTMwNDQ4MjRaMBoxGDAWBgNVBAMTD3Jvc2VuZWdnZXIubmFtZTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJdKPPwl7lOoWrbx2oLV1HKIMG8RxYkj 6rKD+QESL969xzIrapZCVnTVxeuzsdOzlJ8qYKE9va+Jh/heUL6khwwC0kvEuBUo /T1zB/IALv+nyC0Xzi/cFVNF8vXuOIjyqZRn40iWGmt7LKlyb1luH/WjvkRkbSTY 0vJ64yoGyG12UWa9qbxeWCSzxeL09mZMBbGYBEeiBdd6Y3fb35Cz0YJ/oUvMQklk VhlN1BIaAxBFf1NFfTX8rd/f1Z5gBs84gAqZPK7e7mtLqKD4fYvdFZqDsd58oOXD eIBg0RWhgdGeEaTzORKPHN6xLVE4st1m4A96RjhLPIs8NLWUogRwu64wHpTZvQpt Sn4NDeYhTuvNubZUf7S0UoAMNw3e/KyJ3j0JySFmShH/L+an9VeAiQwInFvRDCnc P3ubiEXA9mV/9Wx4GwtkCUFKbYAX4CwN/mQWXsCtgi5eHcH2w0HQCWv2/jakxiBQ QZMzG5J5fawkw6q0ogNDFCQd2bv2tlmOB68JH7TK4660tmRa6nlYcQ9erXjHkHre miVSPszI2b5k7cdfh2qscFLibDvJD4FcW2zExPFIT/T1GT9cLJnhcO4DNYSTlpKA MymoThir0y4Z3ucEUPqJghkDbkuA0ZqLjW/iCj0KEn0r1Vhz4bcxlOedcvFMTlOx AIJw2CLxlx6NAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPFJ 0bNP3XTceONHiJcct0zw8n+pMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPcm9zZW5lZ2dlci5uYW1l MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFw3Lx6 bAAABAMASDBGAiEAiePVhxOm8ipxn8Cm7iWWE5esMyP97sFn7tlj0NKXa84CIQCp lwcMwpZAenWGth6AikZPDC46PARTk8y1W3SBnf5U2wB2AG9Tdqwx8DEZ2JkApFEV /3cVHBHZAsEAKQaNsgiaN9kTAAABcNy8eqkAAAQDAEcwRQIhAOaDT6UBI4bkoAg1 6uxjzc9jksXCX1mn5s7iWdF5nr69AiAmIrQA4knWWF0RS7/277QjZ0Cxj91al5Aq Idj590TLXDANBgkqhkiG9w0BAQsFAAOCAQEAWaNYLwuq7iUHQJcPxgBO6HaMq2Ly mdQtewAyQt3I7UYp+PREiYE9DHGvRTzbrSbDlyl4nezCkzIjI7bzCnbiovqEi6Sc wYbzdgcAJh+d+Zj4nLSbtNdWd6ApBbN+sw2GlKjYlpT0q2XEPcFYu8rsZy2zF3dR qWs7t6m7OLfgIVrSEuFF684im4yM537KLzMa4Gjxixy5AmZsguw5dSpWG7YR0DGt NnfIv6eddESFvUwXcgmsyiVtZWNJ4t0POAAuuGqa5yznyPaNZj0YSANVGKJt094J VsFpCaRl/BkFXRMGb/pYk5u9JtVkyAiK8tj31fw0rlsje1YLIlN46Uzf6A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl0o8/CXuU6hatvHagtXU cogwbxHFiSPqsoP5ARIv3r3HMitqlkJWdNXF67Ox07OUnypgoT29r4mH+F5QvqSH DALSS8S4FSj9PXMH8gAu/6fILRfOL9wVU0Xy9e44iPKplGfjSJYaa3ssqXJvWW4f 9aO+RGRtJNjS8nrjKgbIbXZRZr2pvF5YJLPF4vT2ZkwFsZgER6IF13pjd9vfkLPR gn+hS8xCSWRWGU3UEhoDEEV/U0V9Nfyt39/VnmAGzziACpk8rt7ua0uooPh9i90V moOx3nyg5cN4gGDRFaGB0Z4RpPM5Eo8c3rEtUTiy3WbgD3pGOEs8izw0tZSiBHC7 rjAelNm9Cm1Kfg0N5iFO6825tlR/tLRSgAw3Dd78rInePQnJIWZKEf8v5qf1V4CJ DAicW9EMKdw/e5uIRcD2ZX/1bHgbC2QJQUptgBfgLA3+ZBZewK2CLl4dwfbDQdAJ a/b+NqTGIFBBkzMbknl9rCTDqrSiA0MUJB3Zu/a2WY4HrwkftMrjrrS2ZFrqeVhx D16teMeQet6aJVI+zMjZvmTtx1+HaqxwUuJsO8kPgVxbbMTE8UhP9PUZP1wsmeFw 7gM1hJOWkoAzKahOGKvTLhne5wRQ+omCGQNuS4DRmouNb+IKPQoSfSvVWHPhtzGU 551y8UxOU7EAgnDYIvGXHo0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403705954804849905106341934385727693485456 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 04:48:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 04:48:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosenegger.name' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617209322723942962710744084199777962498272525105024108699046202216600799492081249006125774551122291245385417402337552438766867784471407196843102378537406295018340859859550646767328080610580539323956015316730321725845313997329037209303505464715490456172798572640177832032723618518539374924057728498428146583345437684279461590745970871389709600448321843380407791699597859206546290395149607781784542758884270680280708839731043776677149015694160653422960311297249817975019122865117570607564388501770052201770714082025003439377367973674586625435007574281727081863902772237315883665602336800444687385966240679079615123964924112179298063037005026923379415461834656302678216677383909093420194536392628770863380072087909085982939486342393012638433933537643754329416621939760281843123527049068355078988275946488109789786085846677249757556617612807815084134365154483094234389953156393211002438850298362953931140720397433778068009664294553985037738265200175323635231229853708807930297397453902601135410908428584523418388288351351174219125011026266059763207434347648420054895495864263681037838323886469184456818238647037736754804479898533269361941477989030085449823255243317505113652897908593995909240231734742388772713122554986431235240324701837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f149d1b34fdd74dc78e34788971cb74cf0f27fa9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosenegger.name' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170dcbc7a6c000004030048304602210089e3d58713a6f22a719fc0a6ee25961397ac3323fdeec167eed963d0d2976bce022100a997070cc296407a7586b61e808a464f0c2e3a3c045393ccb55b74819dfe54db0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170dcbc7aa90000040300473045022100e6834fa5012386e4a00835eaec63cdcf6392c5c25f59a7e6cee259d1799ebebd02202622b400e249d6585d114bbff6efb4236740b18fdd5a97902a21d8f9f744cb5c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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