ferienhausfranken.de

Issued by R3

About this certificate

This digital certificate with serial number 04:14:d3:d3:4c:e8:75:64:74:58:a8:17:5f:2e:81:df:ed:5c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ferienhausfranken.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:d3:d3:4c:e8:75:64:74:58:a8:17:5f:2e:81:df:ed:5c
Serial Number (int): 355536355307087918722572688506603668761948
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:1e:25:9c:00:ca:19:24:35:d0:31:ef:19:54:c6:0a:ab:f5:8d:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:df:b6:2b:c5:ea:91:7e:62:e3:05:85:3f:2f:c2:b5:e2:61:15:41
Fingerprint (sha256): 97:70:05:22:76:81:ba:ff:44:54:bd:2f:9c:f5:02:ab:ab:fa:7f:18:75:b5:13:d8:24:e6:61:5c:01:6d:c9:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ferienhausfranken.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ferienhausfranken.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ferienhausfranken.de
www.ferienhausfranken.de

Other certificates including the domain name ferienhausfranken.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ferienhausfranken.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355536355307087918722572688506603668761948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 09:29:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 09:29:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ferienhausfranken.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671972260891973180454580238487533118954848186732097263745325780706287966146604547896879557305317824912715736745293501785840860953452894153654880764632319234524103289495209218079374666690426097450339078057905048568525220893606221143318656245264439526926914960192653600235047895652765489073271611429267558576639604339205857368693519643819688155557016643484246278769457289653608256229503980833812632464308193226534008014037700621077945065864130667170280839645427890440212341957381255060875090062084154841630980801248473614071522608819715498711101725893672759942368753652999788490911771079522354939697727730129336496514788260452557215842280073144469417529387979444920102463722447379311215980092016534445789253799387154397761164084504111794299411810530016635350798083365851139791287146185126482264337558303031341571201226932818216334541154474081549969856505948197410118804568786743593090121163877092729423179832790398866303841592495854827397952447259143809788333273163404188107906350649382374102940511151772973771179864696300795239176506105960251390703694296173133885897656831040252114180288086939314977976935285681881378482129156164331817831797478689889970644496655731173884649452031738226968809462846752957109768348161559041861711236013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							311e259c00ca192435d031ef1954c60aabf58da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienhausfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferienhausfranken.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c00e0836e000004030048304602210092f6859d019edd0ab3ba8a098d2b0a5169a30c4450a1573cab329927004c8d010221008789a56f308ba10997e0802c477d9aaa738f6fde2096f01ee95436d471a99fbd00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c00e083a80000040300483046022100d1a1ddbfe4870600ecc9ab9687bae6e73452f66724ef78a21e4220a0715d5956022100849c1d90005c6f76ce0ad9390ed851efaba1f522aff5b168c06018940dfc0515
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016fcdaedeb3677c2486ab6f0853d0933e37b98efba2e5260b032c8b3f21c9e9fb651fd9139e8fc132e8cf54f631cd32f93ab495e5aaa36750931f8e222cc61e29c8df8d3e4447afb4a1501e79779922a6612917dcde23ff5c753aec8d18d79c9433d76cefeceb94ffee12cf33162fdc53730936b3488a4faafe66011e3f589b8bc1c4354033dd25d78381c2b935ce2bc83d2d494c8afef27d90426bd809e24bb0368f6ddb9a260f213aaf71e2651ba2c6058e676bcc78bf8fbcc2abb7d51ad16800454e7f528ddfb485fcf5995e114bf21ae781d025e289507f8208cf6897e2559f399f66b893d9cc3f5d9ce441deb6655602c3a14f825e798fdbdc8f1d69199