fchcompliance.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d5:12:7d:43:ef:64:8d:57:90:3c:de:9a:58:7b:50:8e:c4 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fchcompliance.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:12:7d:43:ef:64:8d:57:90:3c:de:9a:58:7b:50:8e:c4
Serial Number (int): 420953864400120418301960620760197659397828
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:bd:54:61:d5:f3:d9:ff:85:4f:fa:b1:5a:54:0b:ff:a1:6c:42:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:88:62:fe:f6:a9:0f:6a:21:97:20:08:48:dc:41:fc:c7:24:22:61
Fingerprint (sha256): 8e:ad:fa:33:ff:f4:20:23:e8:be:fc:b3:66:f5:a7:db:45:89:87:7b:ed:e3:c8:74:75:73:bc:9c:18:20:db:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fchcompliance.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fchcompliance.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fch-compliance.de
fchcompliance.de
webmail.fchcompliance.de
www.fch-compliance.de
www.fchcompliance.de

Other certificates including the domain name fchcompliance.de

(limited to 100 certificates)
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
rechtsmonitoring.fchcompliance.de
fchcompliance.de
fchcompliance.de

Certificate

The complete raw certificate details for fchcompliance.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsXDEDR8+UTKjM0Bxklh
krteTz229y9pSa+9IDEa841AQgDp1d3TwH8yTq0uHHP9NuBeqnY3Bi2BakRfx2Pd
rBrMNDYLC7IQ3CX4f9RhRzBNZsOlAhjdEGw1OB8q8o8VEQjJ5CRWE5576RLUDCUl
B0oLoBXgQMqJUDD5613RcPZogv/m9ZtyAFwMUdAwu9e5ZFZn5G/gwPgYTvZZPOWq
WFnBR+VHC6bIewWUz9zc+dm2Cigs8Iv3dUubOWHd+w2G8OQRGwSPFiGXzJPmrH/r
/QjM5p8qsJWPkUwFdo2OAEEUEq6PDEe9kQTftDbd3hOXtzx/b182uktLHWNyF5Tf
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420953864400120418301960620760197659397828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 08:31:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 08:31:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fchcompliance.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24082798003617601423066678379640857030760231643112125992922240092875801963686990995849411446278144015046006735875010093029058421604345974891708916705573109563564217738362697157994064701295150916891491676886036342678067171044964831160078772696090660279635693915081437266608211903006121896241469295691292934482638105874455346619895201678877829185668565187206147424682505455951520928465364136295906720374664215475175457799144083703786656202853253177469509453250679291966991006200320621263802234419943089627145134027214133073406307550807156164873936333843470985611692842241546194799340453705977555180233621124720692092903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6bd5461d5f3d9ff854ffab15a540bffa16c42e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fch-compliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fchcompliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.fchcompliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fch-compliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fchcompliance.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b455d78f000004030046304402202fe2e22e51633312580ba481bd18ed48428f1c14bc76231f008e74aa521ec687022032d5383a0295c3bb2a519e18a649a12f85959ece076d3068dfe770db3e6725a9007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170b455d7980000040300473045022000907b8891aebca4d0bbf658c55a5ad2b7a3576b5f0569b2995403820e1a81d7022100b2e7e73a083e72d8847c653a39d7733290d0209c172dd46c26bf0abfd9909cfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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