fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2e:00:f6:6d:be:aa:a5:23:83:eb:d5:12:cb:95:e2:1e:8a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2e:00:f6:6d:be:aa:a5:23:83:eb:d5:12:cb:95:e2:1e:8a
Serial Number (int): 364103412136320165241295957766137842900618
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:4c:c8:c6:49:97:61:b7:97:c7:1b:8a:35:09:c6:d8:46:94:a4:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:78:f2:49:2c:61:e4:a1:da:d5:1f:7b:1c:96:d6:a1:70:0e:96:c8
Fingerprint (sha256): 89:8a:8b:60:a4:51:b0:c2:eb:5d:62:68:67:d8:13:4f:d9:e4:bc:53:cb:8a:76:3d:6c:3f:43:c2:99:2a:1e:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364103412136320165241295957766137842900618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 13:42:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 13:42:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1035035955516369519831307597259224596298699125374524794212338736229628298094776994826945185493671466505888669252501979286725088633633745289624216102387620915979875321395873314363263115486297966398149912213800332519539854074756032719251776404397574240607969569055010652232972904636270662342824727134125774948531198067461938686036737589289822564198612916067026687003485747743272208813899949355462438754033959846273570268061515598007232340826190805766975468439392268800143146296513773774227589494279710790027926624329310017604677090505651264234783288202983874568398449975599704580063510389535371324411160922057293122051767333771996951074103224308742553635683707229512094711286946085623993013398355987863509136956134849656085935835771589037438088801738730387503531241538939707663319280586363886549399599992414772491337682482421228717588733082028593421971198634895016251206627523814169725149157248102905691659053908477916732518072155791936379120460954172916318647647874226948544804899797449882409983586920060226128166120829165103968437283138926309334790274340257310847314192283324662587050617935919731278368221582530596804232691323253014713301871432949076984205350713029702914065271401960863003847083281884449914557833590646709280509699193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f4cc8c6499761b797c71b8a3509c6d84694a40f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d8cebba170000040300473045022073a862bbfa9060faa8eacb5647932a76fb0775d01c3157bd8f3356c28872c8f60221008cd684f09e2c9cc7886f8538d35941bd6a2a12bb38c08f9b81354003d0708e3800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d8cebba0600000403004730450221008bf10062357e4eedc89046e65a9cb70f9e16bd2189f6ab97fb7d027102ad0c7c02201b29898fa35236c21c041e0d1e3589579221efd6656be372c0751facdf917cc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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