tg-verlag.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:6e:b6:11:6e:09:9c:93:f4:c9:7f:73:54:27:e6:a4:a8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tg-verlag.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:6e:b6:11:6e:09:9c:93:f4:c9:7f:73:54:27:e6:a4:a8
Serial Number (int): 333283597646682385610158676319178645218472
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:bb:63:05:1e:79:46:53:e9:43:64:7c:30:79:91:aa:e1:19:2a:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:be:e9:43:ca:cb:84:dc:72:f9:15:e2:54:d8:ff:17:97:f2:8b:d2
Fingerprint (sha256): 93:2a:df:96:34:73:91:2a:dc:44:44:e3:97:9a:01:c1:c6:89:21:08:b1:59:08:2e:31:73:62:9e:a0:c2:2d:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tg-verlag.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tg-verlag.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tg-verlag.de
www.tg-verlag.de

Other certificates including the domain name tg-verlag.de

(limited to 100 certificates)
kundenportal.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
tg-verlag.de
tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
www.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
extranet.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de

Certificate

The complete raw certificate details for tg-verlag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333283597646682385610158676319178645218472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 08:12:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 08:12:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tg-verlag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724150976081653382738235532589570067394929674267543680437193859141875782114907673401166747647216679479449240333576611179313255460369326270461547573776665466780588613602370520535942967117560672467876651124593554780679545300598333324696891470776567055652896291862490382229506665933718454111350379209401657305895045467353762506923143424812224107425987741641798464766093944770461155373011703201404222006864316592503159524589907300147102425326969087311900727889855242898273830599295379980856180249339725850116741597543737883424515195960952768882900838471822035582887623153595458306366545193587022563071504444979033853224965318439857575626185597509162714653332884170345630998719041874332490701613777499274805279494851053344526644525432929581212945561748947435838586678912915616985510078143085713956340226620285499682207250530283256532871737277751751202532926681441705481283180727501013129257424505706926682057609522717110076168925612520444628385291854102477685764894844285029762606902294202754751436449965027005165407725081217398097453993863610232590485887019012993118574170531330006696964260972642752662681096598933309440212935757191213786181165504504472604684292723499230994527159569868950615183641430489184074426244676234720763192584303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5bb63051e794653e943647c307991aae1192aca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tg-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tg-verlag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001703385b4090000040300473045022100a786429c74682a385898bc140d0e9c7d058a33173ef5d49c83a623b3fad86e24022023b92d82424ee94175bbef52f07b358a159aa25ee3c722a0b5e3f968b01079e7007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703385b4090000040300463044022008f9be724ffb197701704dd03411f4f00baa83a9fa4087ce43e0dd123abcd4cc022039f8bbb2aeadff9d6066cb8f4f0892a22951826524ecdb94fb6c68516377dfa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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