www.seniorenwunsch-schmidt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:00:24:26:bb:f1:d2:85:bc:bc:c5:6a:ab:af:ce:31:de:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.seniorenwunsch-schmidt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:24:26:bb:f1:d2:85:bc:bc:c5:6a:ab:af:ce:31:de:28
Serial Number (int): 348497197054139604460653697107949039771176
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:78:db:4a:93:0f:da:9a:c7:17:0a:cb:00:21:0b:f0:85:2c:69:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:7f:3e:62:3b:bc:bd:56:6e:72:41:d2:d9:b9:86:37:3c:e7:ef:6b
Fingerprint (sha256): 8e:7d:11:5a:b7:c5:d9:d9:56:05:7d:37:20:d8:97:e7:1f:fb:85:be:d3:e4:38:31:a8:cd:09:a6:89:48:7d:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.seniorenwunsch-schmidt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seniorenwunsch-schmidt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.seniorenwunsch-schmidt.de

Other certificates including the domain name seniorenwunsch-schmidt.de

(limited to 100 certificates)
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
seniorenwunsch-schmidt.de
www.seniorenwunsch-schmidt.de

Certificate

The complete raw certificate details for www.seniorenwunsch-schmidt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISBAAkJrvx0oW8vMVqq6/OMd4oMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjIwNzA2NDVaFw0x
OTA2MjAwNzA2NDVaMCgxJjAkBgNVBAMTHXd3dy5zZW5pb3Jlbnd1bnNjaC1zY2ht
aWR0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WPrfkvNzac7
P0Mds2w12T7zy8lFYwEY6HVa9bIbU9o0ILjyitY3nC5dhBJtKKodzyMXZiSc9x3W
nfPcjmAwaWcLB4tCgYHQTWqzl2bRVI/40ggXQRD8PSMFqunjUgXKnucxvr2IBWeU
T6XqG6gtGkeYrCGC0L5sKlQFV/Go7BMRp4evQWuyT17dJpSbqf5BMxoyMfxsAxzC
7Kae9LGyYoYl66zhP8H3FtqKRBUuu7gld1xvEC66t6ZJxOwqQOuWhBSIK79XUVLL
MNEUbcHxiSXJRBiViqNUwaBcLzYHgjCJi8c/9eFH24PFBLF0mMiXwkr2O7vcQPv9
6lDhZBHHlQIDAQABo4ICcDCCAmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTIeNtK
kw/amscXCssAIQvwhSxpRDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCgGA1UdEQQhMB+CHXd3dy5zZW5pb3Jlbnd1bnNj
aC1zY2htaWR0LmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK
KwYBBAHWeQIEAgSB8wSB8ADuAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV5
5hB7zFYAAAFppHAfAQAABAMARjBEAiB7i9wtm7L0Kn/uycOzZK9wGoUncEyqHq3j
X016JhPcqAIgfPgWwOmTuzxoBRfTMa7RMl4V/vXNb3S55Y9yFCurGw4AdQBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWmkcB8TAAAEAwBGMEQCIDgq
XQLDNIuajlQPu50irAQkLPp9/FAmO11Zp0xSIhyVAiAOVWx5sApp8mGX5Jidv8GB
48ZebTj1tC6EeyF07QS5izANBgkqhkiG9w0BAQsFAAOCAQEARJCnZv4Yczze/laM
/CspbRF1cXXyCrPlg+q+JyA05McZyzQkVrHMlT5Cg47FEUsBdoKy4Faao/l/yf2m
i9gO3pC3W27eBLDfnbTrY3SS+ZbcNFN01qh4Mq6bB57CMipdJhrDzy9VLPS5YgTh
kSHx2NwnPkDBDSXrq6inuZC8Pt182PSc3QrNBTgHBtpBHujFb0NyIPOaseeC9Kc7
Sw06F/rTLVdsLcUsoqK9Hre86WlvhnHiYYpy5ZTVlwOV8uo+2C7NCc2tFF1m9ZS/
uhyTMaiDRlqyJZPsWAVBrB6d05NoyHTMOOq0mKSIc7v00jgml6vIL6BfONjkRIhk
iWKQfA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WPrfkvNzac7P0Mds2w1
2T7zy8lFYwEY6HVa9bIbU9o0ILjyitY3nC5dhBJtKKodzyMXZiSc9x3WnfPcjmAw
aWcLB4tCgYHQTWqzl2bRVI/40ggXQRD8PSMFqunjUgXKnucxvr2IBWeUT6XqG6gt
GkeYrCGC0L5sKlQFV/Go7BMRp4evQWuyT17dJpSbqf5BMxoyMfxsAxzC7Kae9LGy
YoYl66zhP8H3FtqKRBUuu7gld1xvEC66t6ZJxOwqQOuWhBSIK79XUVLLMNEUbcHx
iSXJRBiViqNUwaBcLzYHgjCJi8c/9eFH24PFBLF0mMiXwkr2O7vcQPv96lDhZBHH
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348497197054139604460653697107949039771176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 07:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 07:06:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.seniorenwunsch-schmidt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27442984514696173644766511780797400710721732569180845911531584216188579666749797935210096658856500358489819686370402673137601833095143070764685438174718358269904064317501075924510395693325128078491340943563104968474089120608068724202644624827412153319956458840879869015961559782511669379378390304809315939353849801546614399589633440150993913365921895517764970702666079765040523553449689603735517847939527166908831783496836897026937445495682428343892437701130421202527469866405730742796200435156344788682296284574560222499053136756272790044327259145459766483750350734364225606770595270516540190848760139307415160080277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c878db4a930fda9ac7170acb00210bf0852c6944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seniorenwunsch-schmidt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a4701f01000004030046304402207b8bdc2d9bb2f42a7feec9c3b364af701a8527704caa1eade35f4d7a2613dca802207cf816c0e993bb3c680517d331aed1325e15fef5cd6f74b9e58f72142bab1b0e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a4701f1300000403004630440220382a5d02c3348b9a8e540fbb9d22ac04242cfa7dfc50263b5d59a74c52221c9502200e556c79b00a69f26197e4989dbfc181e3c65e6d38f5b42e847b2174ed04b98b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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