www.slauber.de

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:3c:1c:77:c7:78:ec:a1:63:24:6b:d1:57:f3:40:19:70:03 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.slauber.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3c:1c:77:c7:78:ec:a1:63:24:6b:d1:57:f3:40:19:70:03
Serial Number (int): 107567068260004821939310541621717112549379
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: b5:37:52:5d:d2:ab:50:91:31:08:b7:a5:c6:cd:86:54:a7:0e:cc:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:19:b3:55:c6:59:e0:84:fd:8d:42:05:68:0b:41:81:e5:7c:5f:f1
Fingerprint (sha256): 88:26:e9:45:bf:54:38:71:9b:ea:b3:3b:b5:02:d4:14:8b:df:96:d0:62:21:b2:32:b0:72:60:87:40:fa:f7:e6

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate www.slauber.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.slauber.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.slauber.de
slauber.de

Other certificates including the domain name slauber.de

(limited to 100 certificates)
www.slauber.de
www.slauber.de
media.slauber.de
go.slauber.de
go.slauber.de
www.slauber.de
go.slauber.de
media.slauber.de
cloud.slauber.de
mail.slauber.de
go.slauber.de
www.slauber.de
go.slauber.de
www.slauber.de
slauber.de
www.slauber.de
www.slauber.de
go.slauber.de
flugwetter.slauber.de
go.slauber.de
slauber.de
go.slauber.de
go.slauber.de
cloud.slauber.de
cloud.slauber.de
slauber.de
go.slauber.de
go.slauber.de
mail.slauber.de
ysm.slauber.de
mail.slauber.de
mail.slauber.de
cloud.slauber.de
dashboard.slauber.de
go.slauber.de
go.slauber.de
slauber.de
go.slauber.de
www.slauber.de
www.slauber.de
go.slauber.de
go.slauber.de
www.slauber.de
slauber.de
go.slauber.de
slauber.de
slauber.de
cloud.slauber.de
slauber.de
slauber.de
mail.slauber.de
go.slauber.de
mail.slauber.de
www.slauber.de
cloud.slauber.de
go.slauber.de
www.slauber.de
dashboard.slauber.de
go.slauber.de
go.slauber.de
mobl.slauber.de
go.slauber.de
www.slauber.de
cloud.slauber.de
www.slauber.de
homecloud.slauber.de
go.slauber.de
media.slauber.de
slauber.de
go.slauber.de
mail.slauber.de
go.slauber.de
go.slauber.de
go.slauber.de
slauber.de
go.slauber.de
slauber.de
slauber.de
flugwetter.slauber.de
www.slauber.de
www.slauber.de
mail.slauber.de
media.slauber.de
go.slauber.de
go.slauber.de
mail.slauber.de
www.slauber.de
www.slauber.de
cloud.slauber.de
cloud.slauber.de
cloud.slauber.de
www.slauber.de
go.slauber.de
go.slauber.de
www.slauber.de
www.slauber.de
go.slauber.de
slauber.de
vpn.slauber.de
go.slauber.de

Certificate

The complete raw certificate details for www.slauber.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107567068260004821939310541621717112549379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-16 12:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 12:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.slauber.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763786398678351372754994646427958492702459827226781443835133038333794887103160014908365281325973278784825345005408891794481606906476057494499391970123493389159590176936797111722794247096009797398646340091630772349783268015785134399001850192442511035709831564867887016823419888208564332628822432822927885994919288097274830412215488447436951566721341971747839136435487668222141824727523984709453353670819878669657443763438943828279657680133132663979355278936391795998035955790438767335983201056723681280497163443710838732884370622461110073773313772096228077510110397153958530736703345012852052087119435043322024507685036806134486980725525594659769629040124676488921454650770709510765278274181778583901990964680396972468186359907927078152567769808104231694333719373843075956446709298611079812631408027765424374083100908496365934809290621599128986955778969686903506122343790711665332498824600574005760034548562896097792372393987574248701003428587955292289700090450682179145034948621156769061280041710898585540504924917453162971481220857752357381139508125654649877489196288961780759798011469222566926767048285724363328992151371723797320916521547934029021325621079735127247380913171733923011518181962961262431642430192711479703220751309511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b537525dd2ab50913108b7a5c6cd8654a70ecc4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slauber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slauber.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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