marktplatz.jofodo.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:78:af:64:20:47:c8:f5:f2:07:43:4b:65:ad:f9:1b:a6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marktplatz.jofodo.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:78:af:64:20:47:c8:f5:f2:07:43:4b:65:ad:f9:1b:a6
Serial Number (int): 307095113004929405491476508924761693821862
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:c9:41:eb:dc:45:71:fa:ea:98:f5:60:6f:26:3d:cc:08:61:9e:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:8d:b5:4a:58:df:10:34:bd:f5:a3:69:71:81:2c:b9:60:0f:fb:8a
Fingerprint (sha256): 8c:1e:4a:d7:2d:e2:27:5b:c8:62:f8:a9:12:e9:df:4e:07:2f:b5:b5:59:bb:17:4b:57:55:03:a7:d5:4f:f9:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marktplatz.jofodo.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marktplatz.jofodo.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karriere.jofodo.de
marktplatz.jofodo.de

Other certificates including the domain name jofodo.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for marktplatz.jofodo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307095113004929405491476508924761693821862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 08:19:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 08:19:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marktplatz.jofodo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649129015571404615544989923204762927764774905207733579244666896749685470949300450647548331796436142901766115412550466986530663479353062529482121864402752321771841135401586789089849163333023743197768931670688842655716647358671664748389920211211047945105373888098039723803606260185126274041559233574057426715111707574543678791253205026423708596707536836012178235049196949196285081845742881537765007288963644193531940195246910312222457333716555191145284251346057205619035900911597624432414397042547403816306758365876720043183422056267535247340295160547973865369301424022312741946387108769060409588277766331974798483267228383374659724903761600112573888239441617265797319133401347834294709161435292297794076672329046911718864573935356370369921788938924589107736563804943314584752781740976340558742656147752977166061698022159351277695433859426119655011286216576002610461601601515083215229634962057826462877421143941568477746642117323193142930195010255894896346550067850767006543394312301715890808685965715060107703110281532230507955695625516789516366421945394313845645720928240997314041513407716368564987287248971924183222640895601579303520308309891355111059406880360770401307164095388502654392224730833448414310636019627848737375141278913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6c941ebdc4571faea98f5606f263dcc08619e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.jofodo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marktplatz.jofodo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166a03864410000040300473045022100d26bd6c0212b2621599f87ada19ea06a74b2acc7552696dae5574e89b7ccf74502206423818d6c6b42e11499b41fb2ce0755eca49587fd45c3b6bf19de3c13c5b033007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166a038661d0000040300473045022100a881692a9f3fd6938cf65be0a26272e1157aad94b12a54e0f75165481741919f022047a3c94ac09ab826841b073003fb10d9555eca51b71d901b7bd1a314dae71452
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001cfea02492cf4d3726bbad8eeba415deecb44c6d60134a1b27887838947c3730c1ea1e6a690aa9df421c75879de0fe5e8cb335ba9050f8ff715e8c950c279ac049c63f1cfaa1fffeaf848f5e18db2cad8ababab600c69f8bbc6f5457140a496e38b6f867922054cc43975fe736bab89afd130d7b0fce67d0e27d36932b220670be243a31ffe1fe3100320bdd4c187fab364c801d620af4c4580e39c5c218f079cdec67698e68f5e241683180f08dbdc5bd400deac045ba4cc2d9f9583357e4abb271ea3cee2da7d9b3770b66c242d96c5998e2d09a0bcb1c51c19107e56b7af7211d73c66cad66ce68a4ae3d5752e73ac8482a58247e280597d51533c8781dc8