afd-nordsachsen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:1c:57:fa:dd:d4:de:43:b7:0f:d1:90:d7:c5:77:13:b9 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afd-nordsachsen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:1c:57:fa:dd:d4:de:43:b7:0f:d1:90:d7:c5:77:13:b9
Serial Number (int): 328410159280591991768561037488949472727993
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:8c:b7:a1:cd:91:20:82:b0:90:97:50:71:c5:65:d5:b2:4e:af:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:29:25:6d:fa:03:1c:d8:f6:2f:2e:cd:87:ed:95:59:6e:b3:d8:7c
Fingerprint (sha256): 95:ee:73:1d:33:96:94:1c:d7:59:4d:c9:cb:ba:3c:9b:f0:d6:24:8c:1a:0d:13:19:a4:17:11:85:29:77:23:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afd-nordsachsen.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afd-nordsachsen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afd-nordsachsen.de
afdnordsachsen.de
www.afd-nordsachsen.de
www.afdnordsachsen.de

Other certificates including the domain name afd-nordsachsen.de

(limited to 100 certificates)
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de

Certificate

The complete raw certificate details for afd-nordsachsen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnjCCBYagAwIBAgISA8UcV/rd1N5Dtw/RkNfFdxO5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjkxODQ3NTVaFw0y
MDAzMjgxODQ3NTVaMB0xGzAZBgNVBAMTEmFmZC1ub3Jkc2FjaHNlbi5kZTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALfp8NqQJYL27ICAGs2JWCcDC9k5
hYcZaKhwpOJFosRncrmQ8FBEtDoQsf/TZ0CCFYbJGBe8lpSUYiNGRhv1VbPSFUEg
pPTFE82kAADmdlWXiqVfK16lTJCqZ5F8Jimeii6rLprTMGi9cnQAKGZcwBxBcHgr
ilzmorMUCEBuXLp2Y00aYbisR9yxFEWU+Ejp23H9s4gI2e0F/WJmop96rGowdFBs
TROleHJBa0oucK2jhOuLTt3lE/vRmzdbjajwJhTb6ZS/EIX5x91jJcQ+ixdh6uRy
BGpGYtsgtQquv+BOz5grWlgmWnNtSqMd7UsQU4RXQ9ApO/ulChtcjJCUXoTYkXHp
sLzDVDc19a936EswZmFBybbtIARv90heWpOKdRQYY943KDq81g0ePo0Z6l4Rafvo
hPp/pud0XxCj6OUazS5ScmUK7OZnL/c2o+SZHM32lYydpBNrg4VMSAvRQPVI3CbY
dzsxhjES3hehJuJl2uIRrR4SVePpu4D9YEynpZNXXVAvPGw7aE4Da93JBCAQc8pT
svn5WKZlRuxFZsGUFay1IDECmEvcuZNJfdGz6qP73Oba98qKCsF+VMzMFZw0ycHW
IXGbT+aKI6nE61MGdVDIDd3WBgq9UcCgOYzXKe7oOXzajC54nl0Llph6JuxPGyOE
dNtgiZbtFnrwy9h7AgMBAAGjggKpMIICpTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FKyMt6HNkSCCsJCXUHHFZdWyTq+AMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wXwYDVR0RBFgwVoISYWZkLW5vcmRzYWNo
c2VuLmRlghFhZmRub3Jkc2FjaHNlbi5kZYIWd3d3LmFmZC1ub3Jkc2FjaHNlbi5k
ZYIVd3d3LmFmZG5vcmRzYWNoc2VuLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAXqdz+d9WwOe1Nkh90Eng
MnqRmgyEoRIShBh1loFxRVgAAAFvUzNprAAABAMASDBGAiEA8mcT3gbWXPMPBEXI
2br2Ze3YQCEpr9QmT3worSH96OACIQCrbRYvfTBNJhDC9jdUYuKYB6v3uqqGosy/
xOxpA9QMNgB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb1Mz
aaMAAAQDAEYwRAIgdd3Py5ojBA1Wd6j0cJSMlDWWnte/Vn360FhHh+94UUwCICZP
aCsDJ40fzB3gISl/5rNkG+3qaA3PdPslpRaC5wxPMA0GCSqGSIb3DQEBCwUAA4IB
AQA4aU6JYPqsf0BWo3ki/GxsnNM9oRU5ykB/tdP0BbXE9qowy36nCiigyM8goMTM
mACeLE12Wdnk59Ey0NHILZ4FJSwfDtda1qCeKfcka8oJRTitgVNJX0y7uZHE2i8y
PMa8fBH0/XVPVe5ZAWD2JTey500Vgq1H0OIx3RJYmReHMRsAQeNwG7r8Cu3lH3TQ
e4zq7h4ZbyzzbE3X8AC2Vsi3F+gGMkOKlY0lSGJ60icIS3xtO+wq6n5QSucOSGCZ
MDc3fPeHRQTMlRv6Cq+8nl9Z9HejLFbn0dIseID1OuZ/omtQy3pTJGn9amaNNpl0
8KksaFzFtn0I9W2djsZeVJq0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328410159280591991768561037488949472727993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 18:47:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 18:47:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afd-nordsachsen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750302971243805585866049105052242953175651494981833599608786647615454322515299262876305405525306963905574917400499859539100746461299699876835930464623800385294906803808089839863940503821133933992276965161903010356494564946356426085596530473163041911285796914258311377337333721330246748987630207052719792267853038294425699078004912507880606012101826908198653794196082411353151992680633865589284361146324042334681448812727587259810652769063404586571504637545220951018505185552466138266507538182961128474031911984490675286002226659478050051895126594191138313349589992958866543025209094520733886243490898175242417806331202654730577418243350278710614521894436377710708212750317427328885551967194152159468134468800616828684057509663412964866894411886379605044955880600961316491430273674493947414843209095381656691617731224771156771335630388120002735726876840399143974367452247498533397317911723225967863117653254386058837065650421933674579148613544550840024883958443063597203092866013596675272630958346108707389742032179090017257353983418015346071687573461555409654286454794735074293267236314467409043536549501045755195089700973790153678978910487544419733672451396324549062083981368256275515512726883776825800034203210012348314249872529531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac8cb7a1cd912082b090975071c565d5b24eaf80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdnordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afdnordsachsen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f533369ac0000040300483046022100f26713de06d65cf30f0445c8d9baf665edd8402129afd4264f7c28ad21fde8e0022100ab6d162f7d304d2610c2f6375462e29807abf7baaa86a2ccbfc4ec6903d40c36007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f533369a30000040300463044022075ddcfcb9a23040d5677a8f470948c9435969ed7bf567dfad0584787ef78514c0220264f682b03278d1fcc1de021297fe6b3641bedea680dcf74fb25a51682e70c4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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