kiga-sonnenschein.lima-city.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:a8:17:08:29:6b:63:9f:62:64:a3:87:b2:15:98:a5:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiga-sonnenschein.lima-city.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:a8:17:08:29:6b:63:9f:62:64:a3:87:b2:15:98:a5:6f
Serial Number (int): 273129888162253126689986261435896993195375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:b9:2a:e6:bf:9b:27:2e:f3:e8:21:6e:70:1b:80:d9:af:f6:85:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:26:a4:eb:ba:aa:2f:46:ad:d7:9a:ad:9d:45:d8:5d:d6:5b:28:1c
Fingerprint (sha256): 97:4b:cd:58:45:b7:6d:28:dd:b1:56:a9:d7:1b:ac:82:65:32:fb:73:d0:02:f3:13:ae:0c:4b:59:06:94:72:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiga-sonnenschein.lima-city.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiga-sonnenschein.lima-city.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiga-sonnenschein.lima-city.de

Other certificates including the domain name kiga-sonnenschein.lima-city.de

(limited to 100 certificates)
tobiasulrich.lima.zone
strohsje.lima-city.de
kiga-sonnenschein.lima-city.de
www.sl1nk.lima-city.de
www.weedman.cf
soul-guardians.lima-city.de
tobiasulrich.lima.zone
tobiasulrich.lima.zone
kiga-sonnenschein.lima-city.de
kiga-sonnenschein.lima-city.de
bastarto.lima-city.de
tobiasulrich.lima.zone
smartoho.4lima.de
beeck-eins.lima-city.de
kiga-sonnenschein.lima-city.de
adteam.lima-city.de
tobiasulrich.lima.zone
staland.lima-city.de

Certificate

The complete raw certificate details for kiga-sonnenschein.lima-city.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HK5aKEgJFHR+3FUke2O
noOeehMysENbHldSmkFAhV12ydW7bv5KgVpfSSInZFYiRmoeRoI5ixZ5s01/ROoj
+4WcDRnFS+RWGtoGMpTeA8ZviKU6/F42U7Czti74BhxAfbZgQNHxdZc9R6eaYU3y
1Qa1fNqb2/LVgOVh0GguVJhsJZhvGzZLoV1ut/3gUZN9Ge3W5wfoHrwzsxnXoZPb
t4TMCcpgx7Y6J4S8ISH36sQhd4CMgdZ2DMTjCTZIIn/MA42vFa8Fo5mjemKWZ94n
bIHQXDntilIKPg6G9g9VInBiSK13QO5lGngXYdPvldGeI6IAb2Dl4Wa2L0v7dGmM
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273129888162253126689986261435896993195375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 13:28:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 13:28:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiga-sonnenschein.lima-city.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27828999730063821070637086269765710982420805690696302093670390269860891738303022942284581940219096226659417963539617284165354138156042952843060594979316601902965467984281927575504627739318965296584696321289628940501295027784228762111371756070275113007977645050575647811025553107702940706716078895136637884743548956754434828078116785960165558536401164126040237978193148668661060417106419592464027167709907044673543123969617072531273860310583463018707656723579171071402775112600019132939972248499036998003986082251089592106087914373109588548165123131403511341665702867280920201642737163852691274386835869823508106808507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6b92ae6bf9b272ef3e8216e701b80d9aff685f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiga-sonnenschein.lima-city.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e31aadc920000040300473045022100f1543c5dff6b80a4a7126d826e03c2937d2eb2e66c9e49042b5965719a8236600220029889eef81534d40ccb461bdefdb730b10399be8635fa1e288efb00c174eaaa0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e31aadd430000040300473045022100f00a7961099b5da73ddca8a28611d655f96477b98387ca63cd61e7fd210b2f2d02206774c40df617f0525d9e30cbf155f672140b1ce3e5770e316828b4f213cffdd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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