www.deutschland-spielt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:35:b3:99:78:2b:3e:d7:42:ac:55:45:f0:e4:bf:30:e3 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.deutschland-spielt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:35:b3:99:78:2b:3e:d7:42:ac:55:45:f0:e4:bf:30:e3
Serial Number (int): 305644947112646451151298932361171388281059
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:ee:8d:a1:a7:3b:55:92:ee:9e:62:aa:fc:52:bb:44:89:9e:fd:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:af:d1:c1:e1:79:be:98:09:81:4f:26:0b:71:3c:f9:20:19:a5:f5
Fingerprint (sha256): 84:00:a3:26:38:37:35:eb:0f:b3:72:bf:41:3e:01:c7:87:de:b4:b5:d6:e9:3d:e9:50:55:a8:c4:f2:b9:24:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.deutschland-spielt.de

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.deutschland-spielt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

10185.deutschland-spielt.de
deutschland-spielt.com
deutschland-spielt.de
distribution.deutschland-spielt.de
m.deutschland-spielt.de
web.deutschland-spielt.de
www.deutschland-spielt.com
www.deutschland-spielt.de
www.deutschlandspielt.com
www.deutschlandspielt.de
www.die-schweiz-spielt.ch
www.oesterreich-spielt.at
www.schweiz-spielt.ch
www.screen-seven.de
www.screenseven.de
www.volks-spiele.de
www.volksspiele.de

Other certificates including the domain name deutschland-spielt.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.deutschland-spielt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305644947112646451151298932361171388281059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 14:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 14:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.deutschland-spielt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807413503669947085040912059612445336567331312601705546850446124515713930656652081997740720436157025873162679413126744843326004361951628103635676388222778484102748663427206035669344237557910059919804013719834750620071977734198913774131059707904490008977441821464650300471402705305211474225109570459280174214768462929652846125703586487708703059323310041600010204564907096232591008326109324428937906047451723957322129588915975514912430309749699714912662557571690351269325884379641952266764420356999824257748554402528570309889039617065667842292838066385848079078954673861895373600485824086962326683776160290086940004725909127832213639720048252813073497547846848484103021477402959258878019755754385539897984184521758944068928242552711988748319881864392225898444931110847785666765010972517606007521565767756043756436506268518534519639174294045811205509182729103267705547746932558350803655996900783567659679887511915879477417132040795036111444726049393037272057568899907802866946737874072469308435980928950636412968382106820125799686333422945448802721752491245712346011558555706127411234042238013456071687946860118877693443247688988486523622020574588434670380765809665205876791852270176486076341188542197362644512864581113765300420318140201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4ee8da1a73b5592ee9e62aafc52bb44899efd7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10185.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschland-spielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschland-spielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschland-spielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschlandspielt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschlandspielt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.die-schweiz-spielt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oesterreich-spielt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schweiz-spielt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screen-seven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screenseven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volks-spiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volksspiele.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cce748c1e000004030046304402204af37bb31d63f44e7db63ba40c41200d9974fe0f319f38e94cc8d85703a4955f0220683bc8cddd5655c4a1ec4c4da869c3214181cff5d98ccde304c01e822fd9971d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cce748b9d00000403004730450220691723511b75b3cffcf225cb8c383c144ac40b4001b56e21d5cf44ed033df4e60221008d524b7d5a576dc2b7b0c319f6cddeb3f1e1f8a27749468492b811c67946d233
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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