nc.r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:aa:cc:5f:61:54:52:be:5d:44:71:97:25:41:ef:82:ce was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nc.r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:aa:cc:5f:61:54:52:be:5d:44:71:97:25:41:ef:82:ce
Serial Number (int): 345273349980214319637596362597580430869198
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:21:19:4a:05:e8:98:57:cc:4c:65:98:72:6d:8a:1a:cd:2c:ea:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:b8:19:fc:b6:e3:d1:a2:3a:d7:08:12:52:52:08:f5:bd:06:35:8c
Fingerprint (sha256): 85:2f:b6:05:05:c4:a4:a9:04:48:aa:43:2c:71:f4:f0:b8:04:b9:bc:cc:32:7e:cb:06:e6:09:b6:cb:cb:0f:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nc.r13t.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nc.r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nc.r13t.de
oc.r13t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)
oc.r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
mail.r13t.de
jabber.r13t.de
nc.r13t.de
mail.r13t.de
blog.r13t.de
dyn.r13t.de
rc.r13t.de
mail.r13t.de
r13t.de
oc.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
r13t.de
r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
nc.r13t.de
r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
matrix.r13t.de
matrix.r13t.de
nc.r13t.de
matrix.r13t.de
rc.r13t.de
oc.r13t.de
www.r14t.de
oc.r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
blog.r13t.de
rc.r13t.de
matrix.r13t.de
r13t.de
kibana.r13t.de
graylog.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
mail.r13t.de
dyn.r13t.de
nc.r13t.de
matrix.r13t.de
mail.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
rc.r13t.de
jabber.r13t.de
r13t.de
blog.r13t.de
matrix.r13t.de
blog.r13t.de
r13t.de
r13t.de
mta-sts.r13t.de
dyn.r13t.de
oc.r13t.de
matrix.r13t.de
seafile.r13t.de
r13t.de
r13t.de
oc.r13t.de
dyn.r13t.de
nc.r13t.de
nc.r13t.de
oc.r13t.de
seafile.r13t.de
oc.r13t.de
matrix.r13t.de
oc.r13t.de
oc.r13t.de
dyn.r13t.de
matrix.r13t.de
matrix.r13t.de
r13t.de
oc.r13t.de

Certificate

The complete raw certificate details for nc.r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345273349980214319637596362597580430869198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 20:55:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 20:55:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nc.r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743262949932179371526558902491133295336397474859890672493934411493018994754858081780608957169629201367058095023197643292827944097788451071136129362549409421477166748227744260203744365183978327662558381239119686889328564300353758623894370710306868678575309144978448524552416697699834603297410801356913621023783019017008003793510528075624010880353395701021232693910060672824356871997253375788409028027475325879809128266950773942327317901996359815638465740663708680156024559673231081679412783162432710388217814920545520918071689963898448948251380052679578421441690249343387084149283895614832927644882555223618247905469388285042973331669100013589746232278379787112107196822034369043428379289169240171159519423150147538095233627735414404912762925085770604412340660341857573264208302149554128352036473935059880763447439249012770473003159753518729792617322667808405466756182060687353242307669350815358264835226437010744008148700195886492704709882345740098479891590103385171265777669565472244398699020955959999380872381206494786637114439696195146981089546210195556092075152552977400719375089702039218988477084976663615479353474255301168945806236119505448813835486984107766607447624851414306033968208322257810670225687733809280341585374298891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b21194a05e89857cc4c6598726d8a1acd2cea2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.r13t.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.r13t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b150a1f050000040300473045022100ac9e401e2ee2c60870f6927a4a84221c1c66ce9e399a9dac6fc98b84bab8816e02203ec87ee17d4cbcfa601668b2807cc598f81f2b891bbf2fec18dd7e2f70f8eb7e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b150a1ef300000403004630440220656d16adeae807e4d4b23b4ca6d5925926107c8138dc797c8dc8515985cc5e7e0220164e4b494a940a37f207648d827473453c6db4d4437dfc3ca4ebac85ba348764
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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