secured.heel.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:c8:5a:dc:29:59:0f:6c:b7:23:33:a4:a5:f4:3b:85:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secured.heel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:c8:5a:dc:29:59:0f:6c:b7:23:33:a4:a5:f4:3b:85:6f
Serial Number (int): 267728257771137913870887366505838568768879
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:e6:4e:ba:78:3c:94:a5:f5:e0:fd:09:2b:70:f8:30:34:3f:39:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:da:a7:13:15:5b:5e:99:f4:e4:f0:47:38:75:09:28:e4:f9:73:1c
Fingerprint (sha256): 82:40:6f:0b:3d:c8:43:b5:66:89:6f:83:fe:e9:65:2a:2a:b4:10:66:64:20:4d:97:83:8b:25:1f:4a:66:bc:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate secured.heel.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secured.heel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secured.heel.de

Other certificates including the domain name heel.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for secured.heel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267728257771137913870887366505838568768879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 03:28:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 03:28:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secured.heel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859570412335164100251307332540268362872635084589538181307802961491277318373821290306459823537461441598327328536994874737879282056439841024477225738858895866423573549053879993313903222497557152713731806598027107769531500350320895139973194253995263275774668375067017530389424030597741424581260205523617364729517613484303770848053187257874487636851915864638780508245311090485937199369617069363214276307449505615235545304801713909850172473812646104883695334047671866722252850003710694829599207879210016079860853809570191578461030329276380266305021492361195027201074702511408497789356519046291488227990770170073029976380793019197414498035954862235569211761319628463525353625400050805877130834935923014211821057727607294465943346346836031187629103677698724958384425354069900252378107873826248539861322681365188422416734614187649865689004638564140787686452811515437312088518624457762950756287774974528901501154294699467164020474455973125288844753678078576526204019909738556407299715341425989899700518319276660452053463074095408520953660482331043256589164694289035146027379125140035188343870697749734154337416557189994816404539009727155706719697430674595879565015984442023816427040762641886376213822828027196963675658629020664237337641113191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32e64eba783c94a5f5e0fd092b70f830343f39c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.heel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001702834a72f000004030047304502204ee56b04e7076844cc811e7f0f7daa8240415ca2655fee4b84a75a911391941b0221008310f5bc24caa02aa65cf1ca6cede49c246921b98dbe344ec43cb4a1369ab12700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702834a7560000040300473045022020a140518475c72387e457e1cf1cb5194b0daa05afa89731c2184b42d5065849022100b3ed9dc0ab85b55dfabda5d027ff0966c5f5718794be6af7c376a734947b5898
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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