idgard.de

Issued by R3

About this certificate

This digital certificate with serial number 03:5c:71:18:bc:f3:74:75:62:0f:99:d9:64:73:3c:c2:df:74 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=idgard.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:71:18:bc:f3:74:75:62:0f:99:d9:64:73:3c:c2:df:74
Serial Number (int): 292793166763036870054023524482678905823092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:51:26:b4:8a:3d:30:5b:d0:35:4f:f3:b4:fe:a8:09:cd:37:9c:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:1c:81:0b:07:29:c4:42:2e:84:ce:2e:e0:41:65:8b:2f:0b:b9:4d
Fingerprint (sha256): 86:14:b7:38:68:db:ed:3b:80:32:91:0f:ca:23:ab:80:f9:58:39:38:c1:88:0f:8a:5c:07:77:5a:89:8e:57:55

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate idgard.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idgard.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idgard.de
www.idgard.de

Other certificates including the domain name idgard.de

(limited to 100 certificates)
www.idgard.de
www.idgard.de
idgard.de
zoho.allgreenhosting.eu
idgard.de
support.itmagix.nl
idgard.de
support.subrosagroup.co.uk
*.idgard.de
*.idgard.de
support.viveflamenco.com
helpdesk.bau-master.com
support.axondevelopment.co.uk
idgard.de
servicedesk.resolutecare.co.uk
support.viveflamenco.com
idgard.de
helpdesk.bau-master.com
support.teletechnics.com
test.service.idgard.de
support.itmagix.nl
www.idgard.de
support.bitexen.com
idgard.de
help.someday.com
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
support.bitexen.com
*.idgard.de
*.idgard.de
support.itmagix.nl
idgard.de
support.jackbaker.dev
support.newlink.fr
support.teletechnics.com
assistenza.amotive.it
support.newlink.fr
assistenza.xsystems.srl
assistenza.xsystems.srl
zoho.allgreenhosting.eu
support.jackbaker.dev
idgard.de
support.what-now.co.uk
idgard.de
*.idgard.de
helpdesk.bau-master.com
*.idgard.de
helpdesk.bau-master.com
support.itmagix.nl
idgard.de
www.idgard.de
myportalsupport.thingco.com
support.axondevelopment.co.uk
idgard.de
support.itmagix.nl
servicedesk.resolutecare.co.uk
*.idgard.de
idgard.de
helpdesk.articad.com
servicedesk.resolutecare.co.uk
support.newlink.fr
assistenza.amotive.it
idgard.de
support.subrosagroup.co.uk
support.itmagix.nl
test.service.idgard.de
idgard.de
idgard.de
www.idgard.de
support.what-now.co.uk
*.idgard.de
assistenza.amotive.it
support.subrosagroup.co.uk
servicedesk.resolutecare.co.uk
helpdesk.bau-master.com
support.viveflamenco.com
assistenza.xsystems.srl
support.what-now.co.uk
test.service.idgard.de
*.idgard.de
idgard.de
idgard.de
support.itmagix.nl
idgard.de
helpdesk.bau-master.com
myportalsupport.thingco.com
support.newlink.fr
zoho.allgreenhosting.eu
help.someday.com
www.idgard.de
support.axondevelopment.co.uk
zoho.allgreenhosting.eu
helpdesk.articad.com
myportalsupport.thingco.com
help.someday.com
support.bitexen.com
ithelpdesk.beaconedu.uk
www.idgard.de
*.idgard.de

Certificate

The complete raw certificate details for idgard.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292793166763036870054023524482678905823092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 13:26:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 13:26:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idgard.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814292714714160604059772829375581879437259670591478453788778910368380699049413010687755838589989505529710531720127083926536904751611860976364771169130034228163828387748514968069883385981457493333928701493162037938813668572589373106598251094040641732430983054857598733987660520462979519008587504938698262256571158978967978063482720534655489255740052197134839707520686554862327568906286536975395492966434818993856454319056838158118069728274604764587347423372911776070554896793213965805898914436095731785673922976544011445334632567403850288596695302990470876535593199727109173469612588967336203602723878310813490522845911017817953690694420248918169260549618357743664553555026239295668223005354870336595809599218250198933354320778055314318948231332319557288799829600841802642245704071487625299284071124711519606371902198939556352142966450621708722115619185872874377210965032804073060168915641978728431721475517696435705403228140236098563183270431940715093489372212846345046590761581633747510749040914758256968617623775750168892522918986851003910167136235756342812275868232579844466908276839532956593206694417560631049169254158660812107842071788912436858247504202005200182253713585377496195136024828866021581826320240610944953884558349527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b5126b48a3d305bd0354ff3b4fea809cd379c94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idgard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgard.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a2d16a51d0000040300463044022044e95a0cb1254a12e32a8aa8e534a5808fe102a1e56626c6b1697562c7e486e202205974000b9ce153df64355f9640ae8c5c1925061cc769870a2c9de768a7bb3f7c0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2d16a5210000040300463044022008c59b4832376d0c42d6162807d017bef3a04bf84e3b2fa92b905a04881bd25e022031c87dc7622bbe0e05aa5b1cb415672bfd10bb99700451b9acadea84992e27d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004057f1130bd7f48536f689914f0345cee3bf4759fa6fd6aa5aae99edd2ae6a74b24b4bca21739ee5458791dbc377be6a0880a814e089adee9817e3dbd6780ba88ed60384e429b122bf17ad819bb8dc975863716aabb03b13af2f3eda1167c67f09998ded49e71dbbcc10f2ce731d7cbde9b419c4713e2ae37d301d1ba0f284841639d5d20a05b9fcb079dbcc512b1c974f236c2f454713e841baa80438f7ad334b98869702beba77ad095c2f394012347accea6e2156b6bae9ffe9f11caf01717e4d8bc4935697114b71db9a131a1975b7a8caf37aecddf74ebcc2ca56a18dc9256d42a9321021d35ee7e5408177348a9638832575968929c292d17743e3cf7c