www.godbersen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:30:52:e2:44:41:f4:ac:db:f4:21:06:e8:02:20:ea:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.godbersen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:30:52:e2:44:41:f4:ac:db:f4:21:06:e8:02:20:ea:98
Serial Number (int): 300873845659482175315478402731635462171288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:ee:ac:d2:79:3c:23:33:87:63:e3:0b:3e:c1:84:d5:3d:0e:aa:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:91:fd:17:d9:1d:c9:82:6b:8a:f0:59:ac:9c:b4:7a:47:3a:b7:4b
Fingerprint (sha256): 97:d6:c5:91:c3:45:da:54:1e:42:d2:f3:d5:38:f5:fc:65:b1:34:a6:8f:05:12:2f:1b:9f:01:1e:8d:6a:4b:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.godbersen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.godbersen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.godbersen.de

Other certificates including the domain name godbersen.de

(limited to 100 certificates)
mta-sts.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
mta-sts.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
godbersen.de
mta-sts.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
mta-sts.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
www.godbersen.de
godbersen.de
www.godbersen.de
godbersen.de
mta-sts.godbersen.de

Certificate

The complete raw certificate details for www.godbersen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300873845659482175315478402731635462171288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 06:15:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 06:15:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.godbersen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791720047084168259489734633182229278482612240257308817593473491668926911588363931109594897063426858549959788725466636249900293414903327132068685556400652187432468020730860063892140898016856625090485079742613471787176145511781102115858246774401543577468597813827251274308033351735252325645905272590309194197870655679401704032344408724142930623664622537490332833262722184289368196818366752112810917849008102617958113799571686255318474671775679454674532022819586340605165704360096596782531455141782964427840879863715789427801670652034837053811959188475117036010950101727579887010238323345602034814890037893000104895715580735143137914743100775215205844763809196970447882739462003266694737718423716101288953912632594298009155556456728184225734861289534220606960185718504823544501383168265010750808915393890055940298863857427386196126639328041349589769607749341879194897513978319715095362320273242130023597371827884604822444276719005130615899844414111314870678860612551128702414305447543608477479018189868491179095109528236111005563602480103887402490989661719538064591758923679058435485363110811218957615160039662792464197584025189927731435572489328982836419755856041882985203772082334935816779202837157334548207954274436744386817340537071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5eeacd2793c23338763e30b3ec184d53d0eaaa5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godbersen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c1daf2c3f0000040300483046022100d98ce527bd76d4f65825f5b1fd0d3d84cbe945b093ae2f9240e1eb83aa1211a5022100d0e7e322d0a794d7615d4d42f14e845a0655f6649b0862726762ba4d36c2d082007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1daf2c3e0000040300483046022100a04017c1fa3d8d745ef09b5096f5cc8c5400b87207c5f757a38c852d988b05ec022100c967fbf46dcdfca48209c6f596e04538a763b3d249f69d907bb20cf14a0a7915
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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