ditsch.de

Issued by R3

About this certificate

This digital certificate with serial number 04:89:57:3b:8e:98:b9:1e:9d:01:9e:ae:2b:d6:e4:fb:c7:5a was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ditsch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:89:57:3b:8e:98:b9:1e:9d:01:9e:ae:2b:d6:e4:fb:c7:5a
Serial Number (int): 395183780068559633473488969212442309281626
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:3e:a8:0d:4a:3a:0e:43:9f:87:93:2d:50:47:12:34:2a:7b:ba:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:61:a1:47:e8:0c:5b:c6:05:1f:ee:d8:a7:f3:55:15:18:0c:91:58
Fingerprint (sha256): 86:58:f1:bc:cf:3f:31:37:af:80:80:06:52:ac:3f:8f:49:99:72:8d:f2:20:c3:23:bb:4c:42:04:97:0b:22:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ditsch.de

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brezelbaeckerei-ditsch.at
brezelbaeckerei-ditsch.de
croissants.de
dev.ditsch.de
ditsch-brezelbaeckerei.com
ditsch.at
ditsch.biz
ditsch.de
ditsch.info
laugenprodukte.de
oktoberfest-bretzel.de
oktoberfest-brezel.de
pretzel-king.us
www.brezelbaeckerei-ditsch.at
www.brezelbaeckerei-ditsch.de
www.croissants.de
www.ditsch-brezelbaeckerei.com
www.ditsch.at
www.ditsch.biz
www.ditsch.de
www.ditsch.info
www.laugenprodukte.de
www.oktoberfest-bretzel.de
www.oktoberfest-brezel.de
www.pretzel-king.us
www.xn--brezelbckerei-ditsch-hzb.de
www.xn--brezelbckerei-hfb.de
www.xn--brezelknig-kcb.at
xn--brezelbckerei-ditsch-hzb.de
xn--brezelbckerei-hfb.de
xn--brezelknig-kcb.at

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/W3UCSgf8zYeN22eZgt
+ja8kChbxKv4tGR5ZDdOYomvaViBkOwNgTSVHpcjN6glAk1Pd+DkBk5zW8keyq7x
IfjulAothuuu/6SkkLsqNUZ2Y1/6y0+T2dMjGua4T37Ngr4UEyG34Ty7pFZb3oH3
gmzHIXCUu/v5U7G4yODWOl/TnhEFvPdazp9cg0RkYPRErHhs3oJnbXaL+ayOZQWc
t2jORJsFzJ3kTpTHb0WKytHBN9RSnCSfQ22g/SSnZt8UJlewv1nBflw5kzMcbrgv
EXOLLJf9FyJ3Zy44QEOofk7ecbxDET2xtZe+h8aW+qIDQYYbumPMalZmTB86WWJI
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395183780068559633473488969212442309281626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 21:00:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 21:00:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20698010817885870829506573162827620163377502829397820535566111942016518919114736792336955383344855631506962485623405301344106220294582578014522174140611216110403349641998626591861598278778150941858755693865450917974611401076815743048355633473001750863365018898763442721054417239312833005807845055440313136779849562754264869501876240918702270852095678582973299354897204060727509442517260587045622906817742289472912832703600058938215304297660908876279434335307662684984347846038936510601643061518226684715825650923336553617872267861424920389672447356980188938545122996039413799948658165200576054798382144567760144976041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da3ea80d4a3a0e439f87932d504712342a7bba14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (697 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f0cf92c0c000004030046304402205035a736deb1faa8625d35d66cd385d4082f8a023b91da964a04cf2eb5e8b0c902202a088b3c43a4c42ed394701a0553f63d3b158ebd87a3f7c9b6969214e4ec5608007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f0cf92cd30000040300483046022100e14954c04c282e3da25d2655879f4364b312d61238525a4d213e2ffd51e48f6b022100b0be83c68468b0290221a8150c4ae8aaae25c983fc6a2d3b42f442db7eff3282
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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