www.oldtimerfreunde-hillensberg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:ec:48:7b:7f:1e:df:55:41:6b:de:3c:d4:0a:eb:ba:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oldtimerfreunde-hillensberg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:ec:48:7b:7f:1e:df:55:41:6b:de:3c:d4:0a:eb:ba:af
Serial Number (int): 332089381905101968962212204467794830146223
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:21:3e:ea:e6:92:d6:f3:39:fa:79:a9:e5:f3:33:9d:82:e3:45:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:0a:46:24:76:c8:0f:07:db:03:de:c7:2e:82:6e:32:1f:96:41:9c
Fingerprint (sha256): 81:82:be:ec:0e:ed:54:65:37:8a:34:2e:02:ab:a7:fb:4b:ea:0c:ea:ff:ac:4d:fe:ca:7b:34:9c:65:7e:90:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.oldtimerfreunde-hillensberg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oldtimerfreunde-hillensberg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oldtimerfreunde-hillensberg.de

Other certificates including the domain name oldtimerfreunde-hillensberg.de

(limited to 100 certificates)
oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de
oldtimerfreunde-hillensberg.de
www.oldtimerfreunde-hillensberg.de

Certificate

The complete raw certificate details for www.oldtimerfreunde-hillensberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISA8/sSHt/Ht9VQWvePNQK67qvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTcxMTE2MjZaFw0x
OTEyMTYxMTE2MjZaMC0xKzApBgNVBAMTInd3dy5vbGR0aW1lcmZyZXVuZGUtaGls
bGVuc2JlcmcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2k1E
oEPY2w5Ki35/KU6SZAsbqNLLK1XMQgMQG628fo5YXNNaTiZeofPEhU4Rl9Fl+XV8
g8qzSGyA3SQPYh0PgDvwCHDp1CjPbiv2t+5XzTBpOEmGrT8EwC4/oTjbTPt73pub
CJpraCNvMUgcbGBFVOWO5ouOcReOzdpiJaxaLGEHceew3ZwRB34mLFstjw04Xgdp
EQ59N5Zji67LrX48YBbLKAsc7/0IKP+2C+ngGTuDfk+IWar0kBLZ2ThYmKRfTJdS
BC5QHuJ0q70CP3kHMIzkqip74e1MMpwvXTPVpTpyxOwShhAcjGX1bOQgTI8ad3Uh
XRRIlgOKznyjDIRzAgMBAAGjggJ3MIICczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FNwhPurmktbzOfp5qeXzM52C40UdMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLQYDVR0RBCYwJIIid3d3Lm9sZHRpbWVy
ZnJldW5kZS1oaWxsZW5zYmVyZy5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+
5/50iPukjyiTAZ3d8dv+AAABbT8nDFQAAAQDAEcwRQIgP2X5GT1Uj2eZYyy03gEi
gwh5VFSGpXS6a3x8T3dLimoCIQDFYHBl/hkuLORk1CDx4iXcgwSvXKaAjaezfU2f
qkK6FgB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbT8nDH4A
AAQDAEcwRQIhAN87Nt4XAvOqTn8ITUXbaAtFdAhQ5SXUqYks+kzBbT1DAiBJKvnf
hnKcqPLvMgc0GUGu9m9wh1/70ScnWZehPEiEmzANBgkqhkiG9w0BAQsFAAOCAQEA
KXNeRTEcTXhleIUmL61Ws96iN3LjoYdhS+dWw6IcaMwvO3G1tN2cxcQL7xgV47UH
6YpjeYH6CtI/mSQP3e+GGIBUg+LL7QXxdgt8TO/9SuQ7JpCje0Ix+7Zj2iBxTT8g
YBno4tVAqUPcWiuAjtBbXCG+iy8WxXz88K+Mop1tYPRtkVV5Q4IYr1dLta5OJdc9
bY/Lh/quMWnNtENtkhU5umkaCudkbwu41YgVPHmeHHX3I+Eraax4W5iHG3uOAjrd
lCDjSZrgup2yNyEa0Wucj2E+Y4FHQEqwQivCD1i9byNG8+/Zg/iXEbb0d+BUONID
pw6spOiAN4FhR/JseFk8wA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydpNRKBD2NsOSot+fylO
kmQLG6jSyytVzEIDEButvH6OWFzTWk4mXqHzxIVOEZfRZfl1fIPKs0hsgN0kD2Id
D4A78Ahw6dQoz24r9rfuV80waThJhq0/BMAuP6E420z7e96bmwiaa2gjbzFIHGxg
RVTljuaLjnEXjs3aYiWsWixhB3HnsN2cEQd+JixbLY8NOF4HaREOfTeWY4uuy61+
PGAWyygLHO/9CCj/tgvp4Bk7g35PiFmq9JAS2dk4WJikX0yXUgQuUB7idKu9Aj95
BzCM5Koqe+HtTDKcL10z1aU6csTsEoYQHIxl9WzkIEyPGnd1IV0USJYDis58owyE
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332089381905101968962212204467794830146223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 11:16:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 11:16:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oldtimerfreunde-hillensberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25481547941881815018503225125503424872076296771372784123182645861066609206292674056900529700408951042932312446430324296197545805747472764927514838858864149087327889941899319195891833992611065223677662199781117139559478351774616733132934183390184456788141070516403870730043875875872831127861290887203614926672601132925383683759814628957525312783055545759596434338098964296356667149577621359157230313215865112851407747498058468729176035063540713202395396814554615492701006450374882793800934527730566340424899742034431839041131729136297615439327899573935759170533089551052606179539273385912112458959119425806593828881523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc213eeae692d6f339fa79a9e5f3339d82e3451d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldtimerfreunde-hillensberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3f270c54000004030047304502203f65f9193d548f6799632cb4de0122830879545486a574ba6b7c7c4f774b8a6a022100c5607065fe192e2ce464d420f1e225dc8304af5ca6808da7b37d4d9faa42ba1600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3f270c7e0000040300473045022100df3b36de1702f3aa4e7f084d45db680b45740850e525d4a9892cfa4cc16d3d430220492af9df86729ca8f2ef3207341941aef66f70875ffbd127275997a13c48849b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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