store.casaio.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:12:9c:7e:3e:fa:4c:2a:d3:d2:9b:87:bb:45:31:bf:92 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=store.casaio.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:12:9c:7e:3e:fa:4c:2a:d3:d2:9b:87:bb:45:31:bf:92
Serial Number (int): 311042822028545034993406030956985968607122
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:a8:72:07:ee:cb:7b:1a:9b:98:ef:46:0e:34:5c:b7:3a:57:76:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:c6:b6:cd:05:81:e5:95:77:08:90:69:52:de:3a:ba:1b:53:1e:a3
Fingerprint (sha256): 87:a1:23:77:7a:7e:6e:87:07:fd:43:3b:96:48:29:f4:ef:ef:cd:97:51:e5:07:bc:37:ea:cb:61:58:b5:db:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate store.casaio.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.casaio.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.casaio.de
www.store.casaio.de

Other certificates including the domain name casaio.de

(limited to 100 certificates)
casaio.de
sni95466.cloudflaressl.com
casaio.de
store.casaio.de
casaio.de
casaio.de
casaio.de
sni95466.cloudflaressl.com
casaio.de
www.casaio.de
casaio.de
casaio.de
casaio.de
store.casaio.de
casaio.de
casaio.de
casaio.de
store.casaio.de
casaio.de
casaio.de
www.casaio.de
www.casaio.de
casaio.de
store.casaio.de
casaio.de
casaio.de
casaio.de
store.casaio.de
casaio.de
www.casaio.de
store.casaio.de
www.store.casaio.de
store.casaio.de
staging.casaio.de
store.casaio.de
store.casaio.de
store.casaio.de
staging.casaio.de
casaio.de
casaio.de
store.casaio.de
casaio.de
store.casaio.de
casaio.de

Certificate

The complete raw certificate details for store.casaio.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311042822028545034993406030956985968607122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 10:32:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 10:32:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.casaio.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891593958877879560792308733437941739017966995337009912035322081630154341524305630934512321059543202732689285904401305196540897276675239181841595937493882210384036819108644813140166012872498275157363181044612311102360846160029154796849740475925876740023688807703091158156561049480717504459567145187850202526178296118792424011728390176406447385570724494804584111219933322354037216997940284312827406260707938501411034418369350215836215460283855323492975419057975388551761587133357973547465417550337899874031667422656334561503059226838652073549952327874877473196593106230917279100812252647321138615801726587233743273293471428817016036609461552999313142355120112305178457150684906972008632192672075876975772699393595640554222281959341757081775302364175960730549417358092222489697914076907546643098165719343440551834508850783072610953510773899361100214902017234553735855930766685045895319408242754489711011746110152410898080245293913581241710673174494695829923995764724557028706436313065623046619568442033512533186548996628070988880495633582069744005678395872181178840310597156975546262975544669793732908815972032740059804934519090059369194976975361427152861582955971713079677603288560661034474883290911749266025865710109851689378506210109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21a87207eecb7b1a9b98ef460e345cb73a5776ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.casaio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.casaio.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001685148eb230000040300483046022100f80ef701cdeaec97d99ffd1e1761c9f580b61a121355318b38a686ee167e8bcd022100cb449bd9262abc58e517dab842a693a583a3529868fd6ae34912298e054d9c81007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001685148eb6d00000403004730450221009d64060ce06510d7a5868cd2d054c8f364b4ac33dbe1df458801d02399cd67bb02207e0e645011d71d302678af33b1d6f24409a1e5f3a20f0be6aefe6934df13013f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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