fuer-jeden-tag.de
Issued by R3
About this certificate
This digital certificate with serial number 03:9f:e2:5d:5a:65:77:4e:90:33:af:51:2e:57:86:1c:68:c2 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fuer-jeden-tag.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:9f:e2:5d:5a:65:77:4e:90:33:af:51:2e:57:86:1c:68:c2Serial Number (int): 315742644379821022792741871487856834013378
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:03:b7:23:88:15:8c:4a:a4:dc:95:bb:86:12:f3:27:e0:09:22:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 35:3e:9e:c4:78:21:07:92:7b:38:5a:85:c1:a8:b0:59:cf:5a:68:23
Fingerprint (sha256): 8d:b7:e6:8d:b7:a6:47:ba:70:5a:3a:30:18:37:89:ff:f9:1d:7f:17:7b:3d:f0:77:85:55:e9:1d:c2:b1:2b:39
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fuer-jeden-tag.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fuer-jeden-tag.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fuer-jeden-tag.de
guj.li
www.fuer-jeden-tag.de
guj.li
www.fuer-jeden-tag.de
Other certificates including the domain name fuer-jeden-tag.de
(limited to 100 certificates)
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
aktionen.fuer-jeden-tag.de
stage.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
plus-testen.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
aktionen.fuer-jeden-tag.de
stage.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
plus-testen.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
www.fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
fuer-jeden-tag.de
www.fuer-jeden-tag.de
Certificate
The complete raw certificate details for fuer-jeden-tag.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISA5/iXVpld06QM69RLleGHGjCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMzEyMzQ1MDZaFw0yNDA2MjkyMzQ1MDVaMBwxGjAYBgNVBAMT EWZ1ZXItamVkZW4tdGFnLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi04rrWhkP32fsjz4l8aeQU199NF12DLhaJlPsSk9myPH7bujp1OMpooLRURO dDDPbcleRZSotJMbPhMwIuBxtO04HyC9dGqusnUlSUUC4dAzFOGJD3wT6WGY6yqq 4h8JtXHXYuPaq8lUY1MZaG91mnhHpL1cy7fIvR7X0kYqDZ501KjCoAe4FegzzNvX bMhbyZ0AbkHU3n0yjtntS8xGeM/TMxOymtbt/OeSpkKQAUPJxz4WRU1f1E9FUDv8 YCEeLZ2SakVWWCx75uBLIcEWPfCIlQQK9Ur457+4YAqcTg39xss4f4svMoUAgZcp /MSZNTMQjeEnuqD9/eCNpQnQbQIDAQABo4ICMjCCAi4wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBS2A7cjiBWMSqTclbuGEvMn4AkiTjAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzA7BgNVHREENDAyghFmdWVyLWplZGVuLXRhZy5kZYIGZ3VqLmxpghV3d3cu ZnVlci1qZWRlbi10YWcuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frU FwAAAY6XHfTnAAAEAwBIMEYCIQCeYZFRdJKJr1Wq3c3m+SAOFA2+rIitdoTBhB1c Mqz9FgIhAO4ffvvR4jjICY6EU7YGSDXHNA5Em8N24zpd1nzLQqlIAHUAouK/1h7e Ly8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGOlx31ZQAABAMARjBEAiAharJK W2QbsRtzs/Q6SMdqPtrffzlG8DYDjDyWcIHZTAIgBcSrYwumDWVQa0NfMM1+NsKT 9PwmKGQOsWHsmP/QCp4wDQYJKoZIhvcNAQELBQADggEBADl3JI+afxwyJoVQbka9 gyeW5mWdyIKBGZK4e21CaEiEHAgO6/SQEcomsNcSa5ajvqHuw85ZY11A9JtqQBsD EWlCW9i5ApL7ZlRz7d98J+4qvW0uCSL+sWGndKgdU8HDUqyBClMpvUUArcCBcL5+ ayQhZ2p/H0ob3qT1TzJCvEAoMW5vM0ft4aEG7/GskjSrR427VCy5JRTbwAd1N9Pu bAAyyRwNO36RrC1WuMigtxxImMmdIoz4hFUVmIKvuV5Qk3nm1e4FwOd3xg+R+fjD 5hr2Qh+XHmH+ShoLwegAniZdAR7xrLo5gDi1ZQilyIjvLS37BH22uAuzsPcje+P2 LPU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi04rrWhkP32fsjz4l8ae QU199NF12DLhaJlPsSk9myPH7bujp1OMpooLRUROdDDPbcleRZSotJMbPhMwIuBx tO04HyC9dGqusnUlSUUC4dAzFOGJD3wT6WGY6yqq4h8JtXHXYuPaq8lUY1MZaG91 mnhHpL1cy7fIvR7X0kYqDZ501KjCoAe4FegzzNvXbMhbyZ0AbkHU3n0yjtntS8xG eM/TMxOymtbt/OeSpkKQAUPJxz4WRU1f1E9FUDv8YCEeLZ2SakVWWCx75uBLIcEW PfCIlQQK9Ur457+4YAqcTg39xss4f4svMoUAgZcp/MSZNTMQjeEnuqD9/eCNpQnQ bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315742644379821022792741871487856834013378 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 23:45:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 23:45:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fuer-jeden-tag.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17585671757091825213025706766783429209886727770201864627151666952921227380554830010867266685391768870268845138103817505402921669439458834604087847741955951164166799637408290365283372995583068323488393143613047526822492372868303004462481121808090238791696302249856118109793438198609190413132102080271120156855083703061189751362349842395610636001339717307409554818202969961745574149968410686645891137243449366790811834730438301946526995564565442777770996545831353724685572706720027194404018838098762868086282734917388972812388769314611600736067051936817752790608219406306971080751785686396169386940568391017309632319597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b603b72388158c4aa4dc95bb8612f327e009224e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuer-jeden-tag.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guj.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuer-jeden-tag.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e971df4e700000403004830460221009e619151749289af55aaddcde6f9200e140dbeac88ad7684c1841d5c32acfd16022100ee1f7efbd1e238c8098e8453b6064835c7340e449bc376e33a5dd67ccb42a948007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e971df56500000403004630440220216ab24a5b641bb11b73b3f43a48c76a3edadf7f3946f036038c3c967081d94c022005c4ab630ba60d65506b435f30cd7e36c293f4fc2628640eb161ec98ffd00a9e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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