ssl.vdivde-it.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:e1:59:0a:4c:b4:71:87:5e:df:71:35:7c:ad:4d:53:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.vdivde-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:e1:59:0a:4c:b4:71:87:5e:df:71:35:7c:ad:4d:53:12
Serial Number (int): 426673344374309191327926501216074230223634
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:1c:78:0e:b0:ae:5c:f7:e8:07:c1:04:cd:a9:92:53:59:54:a3:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:32:e0:28:ae:0c:27:7d:51:df:d0:77:4b:ce:c3:90:1a:da:e9:d7
Fingerprint (sha256): 90:ca:f9:0e:8f:e6:91:83:a7:68:dd:d1:40:4d:4a:d5:29:d8:58:8a:66:22:27:59:66:85:bb:d5:1d:12:e2:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.vdivde-it.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for ssl.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426673344374309191327926501216074230223634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 14:31:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 14:31:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766878937787468362201322205199832301128891407953098241344758532740716189813250798075247358530657118538929500764989056753550798088183194131735717916224798399182635837737868303709873905577975821427355150105602131812999078997802264166605153017696274276231778189638209845748606804710182952911707909545771791416729961853610314477214559102148227277546299083023646848843287445441304345769898540543653726155016389306049894185867265131769552679031526813134670947635541676225626156270885573327103022788912539233992274976071002540480832035596857675999807113114399043824282064494032942885698090648300129490511418154444084025832104598610448041290189791533378471036551589122427031270848926024889564292639714902852672561776005348459242508449858137102317902065728602260659646041216056529884301011149441817364449817133670216162355912278989963981905372435864893009695180218449804220769115078321168951935852139948051816021387703849490743092207181602802838341692572091723490467423204565555255699630185191821998802310508640842313958397604051046774351039900693980268689244862214579142986098069115634054629328054430941318366123514991160971397694596104213441773047194684801194798781184218247831739173132485504783362042940642861888233048521302524360751910527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca1c780eb0ae5cf7e807c104cda992535954a31b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cafa790af000004030047304502210098f0fc831eeffcf0600469f9a8bf61dca9415c5b9fdd3cb570fb5b9dddf67ff7022076e34f0195f36706a4ef9d6b593876efaa6b5e29175f1a8f1ccb259be165652b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cafa790b200000403004630440220268192b05fdf3a652cdebe8bc81fa6f8b7193339980e854628bf66ea996b01800220235c830ee2386dea9fe6e2ff2545f9b9d76cfccd23fd19ccb120e790845b12ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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