web.zalman-it.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ff:9f:a5:73:43:66:3c:7f:69:76:12:28:c8:14:f2:1a:3c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.zalman-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:9f:a5:73:43:66:3c:7f:69:76:12:28:c8:14:f2:1a:3c
Serial Number (int): 435433353610008786556641258566842502486588
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4c:0d:78:14:8b:99:f0:36:fe:a6:e8:cb:1d:d3:7e:6e:be:fe:88:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:4c:ef:bc:f7:b0:a7:bf:32:99:b6:b3:13:7a:fb:58:cc:c4:2b:0d
Fingerprint (sha256): 8d:6b:d7:96:c1:0d:d1:eb:5b:47:e1:5b:00:36:d2:94:62:d2:ee:d9:c0:3c:9b:6e:0a:14:81:86:0d:e8:3a:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.zalman-it.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.zalman-it.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.zalman-it.de
www.web.zalman-it.de

Other certificates including the domain name zalman-it.de

(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de

Certificate

The complete raw certificate details for web.zalman-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrxKqWOYTyun7UR9FBAy
11c5KVq97Wr0z4Fv+7CxZM+VddhwXWMboTkJxl+x4E9MvyJ6ovx0sKZaGTMGKpxn
P7LGdp0soTI6ytObqn6Yc3tmISPGSZvRgUi2qFdzAPdnpArXCA67qJCfFW0BzJKW
Dxdz8rRCZerKaKFgxrUCqmXF/KtdANxcMYNURwokDesgUN4hjUcmUOmcEIrsUREq
pBhcr9wFFNTEmN/KDiXQavMaDFpfWJQKKL7vCojYE1yij82v7izP9eVotd4h1w9D
5piMdpyZAj8RLIKPd2gNE4Tg8h1bSmiqx8HBEHsTZlal+Y5ON8t8U976/fp6ngvV
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435433353610008786556641258566842502486588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 14:12:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 14:12:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.zalman-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21553361916019884725919109539618327528877708691824277934880435993648949352223961320048832024500294774015701070446633823933949445054074069596435982127447801249155056439336631363053698876237043052374198397641829547505496237107408297594312324270867098296969162346513068658738488247046952708541978806334240774288725026986080247882827483174692053436992763151926446865889970177323429332042383655660358967841080487472210019794271814064328547847310453404130684197535195722689352899611644509418602177256076065446286715255592636787725238278392801982852945729994521219433231388965551356705691452350405972342008728779740855129431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c0d78148b99f036fea6e8cb1dd37e6ebefe88a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.zalman-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.zalman-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e6552faba00000403004730450220506ac3875cf589bf9647f536fc8c8507005707e2dd6c43f2d6c5f5251da98348022100ebbd670b1819fc5063d064dfac502dd9de7e7f172fa96fb861cbc2d63804cd1e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e6552fabb0000040300473045022100edb28410523a2cc428182f48c9d63993da2ad2daea70183faa6a7013467c00aa02203c9294f2fa5d48a256c6cc29b775794d1ea7f710109556eb3bc21873566cf51d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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