faber-network.de

Issued by R3

About this certificate

This digital certificate with serial number 03:31:3c:ee:26:4f:d5:15:0f:09:fb:19:8c:78:d9:eb:15:69 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=faber-network.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:31:3c:ee:26:4f:d5:15:0f:09:fb:19:8c:78:d9:eb:15:69
Serial Number (int): 278091683997862686433871001727371053831529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:3b:2d:8b:57:24:a5:a9:a1:03:d2:2d:3f:2c:99:c9:98:21:7e:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:ed:f3:6b:90:1c:99:f9:0e:0a:00:f6:41:58:6f:26:62:66:b9:43
Fingerprint (sha256): 8f:34:b6:69:c3:90:f7:a0:93:87:4b:0b:40:54:d0:9e:cc:de:02:5a:1b:1f:ba:56:5d:1d:e3:03:35:f7:4e:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate faber-network.de

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faber-network.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.faber-network.de
faber-network.com
faber-network.de
faber-network.net
faber-networks.com
faber-networks.de
fabernetwork.de
fabernetwork.net
fn-agsb.de
fn-agsb1.de
www.faber-network.com
www.faber-network.net
www.faber-networks.com
www.faber-networks.de
www.fabernetwork.de
www.fabernetwork.net
www.fn-agsb.de

Other certificates including the domain name faber-network.de

(limited to 100 certificates)
assist.tenens.com
returns.globalamerican.us
data.faber-network.de
connect.warditservices.co.uk
connect.warditservices.co.uk
connect.warditservices.co.uk
remote.ukcloud365.co.uk
support.originfilmtv.com
people.yourchildcarebusiness.com
wiki.faber-network.de
assist.rydercragie.com
www.faber-network.de
git.faber-network.de
assist.hardsoft.co.uk
www.faber-network.de
subscriptions.profitroom.co.uk
faber-network.de
assist.tenens.com
assist.higgins-group.co.uk
data.faber-network.de
data.faber-network.de
assist.rydercragie.com
data.faber-network.de
assist.shinetsusilicones.eu
assist.shinetsusilicones.eu
connect.warditservices.co.uk
remote.nimdasoft.com
wiki.faber-network.de
data.faber-network.de
remote.ukcloud365.co.uk
assist.hardsoft.co.uk
helpdesk.faber-network.de
hilfe.dgfkt.de
assist.rydercragie.com
assist.rydercragie.com
connect.warditservices.co.uk
helpdesk.faber-network.de
assist.higgins-group.co.uk
remote.ukcloud365.co.uk
connect.warditservices.co.uk
connect.warditservices.co.uk
faber-network.de
assist.shinetsusilicones.eu
assist.higgins-group.co.uk
connect.warditservices.co.uk
assist.shinetsusilicones.eu
connect.warditservices.co.uk
hilfe.dgfkt.de
faber-network.de
it.elnetworks.lv
assist.faber-network.de
connect.warditservices.co.uk
helpdesk.faber-network.de
cliq.astaris.co.uk
it.elnetworks.lv
helpdesk.faber-network.de
support.originfilmtv.com
*.faber-network.de
support.originfilmtv.com
*.faber-network.de
faber-network.de
*.faber-network.de
hilfe.dgfkt.de
remote.nimdasoft.com
remote.nimdasoft.com
assist.higgins-group.co.uk
faber-network.de
connect.warditservices.co.uk
connect.warditservices.co.uk
assist.hardsoft.co.uk
faber-network.de
hilfe.dgfkt.de
*.faber-network.de
connect.warditservices.co.uk
helpdesk.faber-network.de
faber-network.de
data.faber-network.de
support.zynctech.co.uk
support.originfilmtv.com
helpdesk.faber-network.de
*.faber-network.de
cliq.cp-werbeagentur.de
www.faber-network.de
connect.warditservices.co.uk
assist.faber-network.de
assist.tenens.com
remote.nimdasoft.com
assist.faber-network.de
data.faber-network.de
helpdesk.faber-network.de
it.elnetworks.lv
assist.hardsoft.co.uk
www.faber-network.de
faber-network.de
data.faber-network.de
it.elnetworks.lv
remote.ukcloud365.co.uk
connect.warditservices.co.uk
support.q1c1.fr
assist.faber-network.de

Certificate

The complete raw certificate details for faber-network.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2StHNSKePBT/UXJjaKGL
K4W4ixfKxnbwaU/7jgFdUfgiVh7y/95DkceqIkeZuiqJl18YANVVrj2ZQ/8c1UUk
W7J8RVdIDw5MWMy5tSjlmkTfIuizU3/VTP7FQEZkP6FHHElxAYqxa1gTd2L+fkwD
G4BNRqRp1d88/awSLvE3wbQ1dJD3AXb5o1MCDtitGKVFDOm7UWQIowaDNyh33Wrc
0MuMYYAHqH16VtJFoFAAsmW456CkC9iZuorLAb1XF7X0qYgkhn99a0xJ9g6RS+wE
TjpV+BnnWRQlad6DTn94I7SIuFlLLDsjtrWCip39XI3V4nInVbvn3fQdKYk27hha
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278091683997862686433871001727371053831529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 14:13:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 14:13:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faber-network.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27415053431032486269888637511532999233988859163922201656624925727561427694481999493864282920995893612829590534430543214975534394230632173907524257682448170109314379499082885846614069009254186445536593402930130901554729318923381033856314433497076307307792699780293590534815603353540402999675111319436570529160151382583036515638816580691747088181027813870014958972633861698197784118883888095494954171598220350745194311455228866344799395746860531695374856629447120142800910406542619048373089495539889711662462941874378269244651012844391996248877418884245421228434357324269502834119789400788259958056071558917763370605211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a83b2d8b5724a5a9a103d22d3f2c99c998217eb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faber-network.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber-network.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber-network.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber-networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faber-networks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabernetwork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabernetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fn-agsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fn-agsb1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faber-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faber-network.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faber-networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faber-networks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabernetwork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabernetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fn-agsb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fdea94d970000040300483046022100cdeaf9460a60a2e1f4a02f4ff316fa47239bec9a7c19dff09f97c177f7eda8f2022100f2cf073a0b344af5e9e2acf8e57242ed5a8f078b1d305e078a29a2bed6c8be9c0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fdea94de90000040300463044022026a9fd9100c1313f7cd11a3f038b4c83645b0409cdc1f3be73231e3f56a2971b02201af362f931be29c65eb8e954bab1f83acb3046d4c9ceb3fbe02f7947b21c6e91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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