hommage-leipzig.de

Issued by R3

About this certificate

This digital certificate with serial number 04:45:26:4d:2a:f9:15:45:88:fd:44:39:d4:1a:f9:6a:f9:46 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hommage-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:26:4d:2a:f9:15:45:88:fd:44:39:d4:1a:f9:6a:f9:46
Serial Number (int): 371979538386879273617789751076464766941510
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b2:fa:09:c5:2f:dc:09:d7:f5:9b:14:bf:aa:8e:52:13:9d:d7:02:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:7a:c6:d7:fb:66:c9:90:5a:3b:21:f2:6c:55:46:9d:ab:58:8f:dd
Fingerprint (sha256): 98:f7:3a:e2:48:f5:27:1c:20:67:95:10:e5:b4:94:78:09:02:66:a2:b6:ec:d2:cb:33:c0:ba:16:ee:62:e1:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hommage-leipzig.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hommage-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de

Other certificates including the domain name hommage-leipzig.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgISBEUmTSr5FUWI/UQ51Br5avlGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTAwMTAxMjdaFw0yNDA0MDkwMTAxMjZaMB0xGzAZBgNVBAMT
EmhvbW1hZ2UtbGVpcHppZy5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALQyNQlL47KtaOXTWxe4aP06vjA9wxsx75M5S25QqX/zYmTLcGFLVGZvoHj2
3YZpwmoIzncp3TTolLnhSHz9HRyiOBoSiom+PJlI0jK7rbcA5GUVqsfIahiYwq2F
RQJWmB3V5qbAO8Ny+mr6j519rbrf7PI4xaTCCpb121FzJ83bX6KgWyXqBlATOUx4
L2QUZz07RGcVx2b+WNyRKoVrU4xfJ4C1goSrpC4YZsEQHT7zdRc6lKV51/2qJ59q
mb6zc6kGWhS6EfuIIL1HxyHAJHP5dTM/e5MX9oOXZFdV2MnoQfOim+anohjwo7wL
lbRqWl3yN1HcqbjJBMzetngHvCTcYggeXJrbEbiFbRYojgUjrAbu6BKm9isCmQri
jrItSjfWRZ+g3P5EZgSctGl/urZZDUZCNytncXWye7IVfAGSpF36466a8/Oo5Akr
hecsT6DvAkRNLNy/GI5NMgpj0LfEY78gXSiFoty6shaN2Inejp5ywLlZPWh5KjKT
TsroiI5okG0eJi9ZyVrpju67hZ2B1PEegYJASCZlL8X5WuJV2X9h0kC5pjBnwg6c
1yU40Fb+5yfiz/3rRO7CHlimmvd2Nto/j1SiWx5/1CCc0oCSKCnMdxC8zQS7o70P
gHXaAMLpu9UXLEMhjJd60ORkxm3sOl9k1IX3ERROdRMK//hpAgMBAAGjggJPMIIC
SzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLL6CcUv3AnX9ZsUv6qOUhOd1wKAMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMFgGA1UdEQRRME+CEmhvbW1hZ2UtbGVpcHpp
Zy5kZYIhaG9tbWFnZS5pc3Atdmhvc3QwNC5kb21zZXJ2aWNlLmRlghZ3d3cuaG9t
bWFnZS1sZWlwemlnLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA
AAGM8Rpj+wAABAMARzBFAiEA59Ig2B/jE0vV1Jr8tQ6G4N8iMzgpxmATXFWFC4si
nf0CIHB4Zw1za/fXsLZlQX2fH3tXjsRZYS3N/3ujvwZvzN2qAHYAouK/1h7eLy8H
oNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGM8Rpj9wAABAMARzBFAiEA2N0teH4g
aA2PPH2LvPyAtmRJit2lFC62tCcXHb1hqY0CIAsS11Z/JeAisWjHasOCTLRrMtLU
ya2Y4F2aVNN4hN9fMA0GCSqGSIb3DQEBCwUAA4IBAQABDmAK1nXRYvHB/op2dXd3
0BwUKvd9oXSH8d9PGwGt/6nZUpUwZ4Hv23z8yHOarv/6EnJrF7XayfepnFzi5aYj
5keX/X+PkXgeHr4VOV42/TymamFuONozqkqQPl7A8we3Xw509vbCHTwJQvrRrAjV
z7guMeWfOT0fGWNttLl2mAw0F7Yzm4vx40Bekci9k68CYYQ1Bn2AG/k2p+GiwBjp
51nF3zCdMvNmSNR3Y6M+4xQQjYVO4zpVmRVzcyssTDruT9gD9dCxY0SRK4pfMrPo
9pJqn/it//LffhXr4eZWb3FZCybw8uyoSB8FsyW9BJddBjv1RxqHDL5+7ckN7DJ0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtDI1CUvjsq1o5dNbF7ho
/Tq+MD3DGzHvkzlLblCpf/NiZMtwYUtUZm+gePbdhmnCagjOdyndNOiUueFIfP0d
HKI4GhKKib48mUjSMruttwDkZRWqx8hqGJjCrYVFAlaYHdXmpsA7w3L6avqPnX2t
ut/s8jjFpMIKlvXbUXMnzdtfoqBbJeoGUBM5THgvZBRnPTtEZxXHZv5Y3JEqhWtT
jF8ngLWChKukLhhmwRAdPvN1FzqUpXnX/aonn2qZvrNzqQZaFLoR+4ggvUfHIcAk
c/l1Mz97kxf2g5dkV1XYyehB86Kb5qeiGPCjvAuVtGpaXfI3UdypuMkEzN62eAe8
JNxiCB5cmtsRuIVtFiiOBSOsBu7oEqb2KwKZCuKOsi1KN9ZFn6Dc/kRmBJy0aX+6
tlkNRkI3K2dxdbJ7shV8AZKkXfrjrprz86jkCSuF5yxPoO8CRE0s3L8Yjk0yCmPQ
t8RjvyBdKIWi3LqyFo3Yid6OnnLAuVk9aHkqMpNOyuiIjmiQbR4mL1nJWumO7ruF
nYHU8R6BgkBIJmUvxfla4lXZf2HSQLmmMGfCDpzXJTjQVv7nJ+LP/etE7sIeWKaa
93Y22j+PVKJbHn/UIJzSgJIoKcx3ELzNBLujvQ+AddoAwum71RcsQyGMl3rQ5GTG
bew6X2TUhfcRFE51Ewr/+GkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371979538386879273617789751076464766941510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 01:01:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 01:01:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735136039258933524011313512417421854644182602261290448878575304902792342938636043956623013795059022519732611729923630339811799619207599465995580373893552509746430689898383166194583107712707377124499905640999995410635266298182497535493236206916815263094374025494701719664656235961553555937737483491270613817897778373599006673996649303125348327667842951383239200510788177942014188299952147779447077588223222426886154042901311190162444761277335652200925213550023373799804512443485045780834552086736266202958135865763298842433163306401208808988684743356809727619240698256764702352789878823854007739443763155182837077179538929610813269644565980461680082307821106639445115042075173141428777801947965203824082906974600952394257847629282638573543747857981965741093112069604125489343537268732016363290517238010752424980239398652307205739288623422146937142250983941554316656744970714529685988116217312162815218819384169400987310257869012215622993469580211192870967792601982205566962441461746719781958117864143566567269915890695358079501755710498276830873134516425521728090201545440993586490147791862131381431829536989556741173750872147169450448635454333518960985073941232122287448736300920077553098646774265445385504476808162694971476079016041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2fa09c52fdc09d7f59b14bfaa8e52139dd70280
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf11a63fb0000040300473045022100e7d220d81fe3134bd5d49afcb50e86e0df22333829c660135c55850b8b229dfd02207078670d736bf7d7b0b665417d9f1f7b578ec459612dcdff7ba3bf066fccddaa007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf11a63f70000040300473045022100d8dd2d787e20680d8f3c7d8bbcfc80b664498adda5142eb6b427171dbd61a98d02200b12d7567f25e022b168c76ac3824cb46b32d2d4c9ad98e05d9a54d37884df5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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