www.digum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:4f:a6:71:5d:5e:e3:97:d6:a3:91:66:08:b1:db:ac:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.digum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:4f:a6:71:5d:5e:e3:97:d6:a3:91:66:08:b1:db:ac:d0
Serial Number (int): 298533509021918428653311596256312895974608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:99:32:52:4c:fc:ff:41:b9:03:d1:d5:7b:3d:34:4c:2d:36:61:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:fe:ad:90:4e:4b:6b:9b:3c:e8:7f:fc:bd:98:3f:86:48:cc:24:e4
Fingerprint (sha256): 98:cc:63:d7:3c:f0:cc:c2:82:bc:21:c0:f7:3e:56:0a:ab:dd:ae:e2:19:43:86:b8:59:8e:ad:f0:c6:0a:bc:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.digum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.digum.de

Other certificates including the domain name digum.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.digum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298533509021918428653311596256312895974608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 05:22:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:22:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669688542081401427816860218922643404982467570139004864722794590203128542672963235981468760098495707723367882539725225735650032795872996399991874713221592277986583841519319007916049366053381370300461365013071724742201346964510819374918727008989690232319000531839705140720294450397372392915296320771950578253720095512271561182290658258075613813215747616802677783677695105878830323651304270315348806214794254732404393129171361676041561966542691907074927439948519933360292048817655078761664826219578334297637110826575463989819076868590146349592221432951498660421902705217821537663512331479501510458827934699855849098667265298189387883683233074990322419074681678299043052030323197793512105786891217958116143363067817689739492451334237176424446171024293618973353664175309254898243140340294552906871377191869902450697258881413432607860062766817699933558774376891804363287829383555526485994978905945505928487917014045211179895621792609161773279444466208107225271692704688875174677090247372112121825063275488642187354047701378649494358389244686756501185465531630363424066505570425062408940598541613019883151743680585644178560720298952735620738528033338664505305401960765693868449622044896373984090744122378019180914160584757656669922714030971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							239932524cfcff41b903d1d57b3d344c2d36610f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016daa08d37600000403004730450220756e4e1e4c57e5369c0976dcd3d43a9507cdfa5d8b6de9ffc9db74e22203e2ab022100ea131dd8db3330db6476439725b27af89f7b6f71b0e0173ace7c3260a5a6ae1c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016daa08d39c0000040300473045022022abaa97f7fc6063b8f1bb2b08eaf2d7938f12b50c297458477de601f09c9e36022100a4b8ea891377673d46c9ce03f21c5fe1cb965987e4bc43367ccf4605f10ad9f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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