mail.naoverde.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:b2:39:35:46:8d:e2:bb:d8:0e:c1:78:5b:d9:42:e1:b9 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.naoverde.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:b2:39:35:46:8d:e2:bb:d8:0e:c1:78:5b:d9:42:e1:b9
Serial Number (int): 305129900385889106633960523095388893405625
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:95:22:f8:f8:16:5b:39:15:0b:e3:96:fa:3e:31:40:ab:eb:fd:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:11:61:d6:41:7e:4c:6f:22:74:f9:51:18:82:10:21:e0:af:ae:f9
Fingerprint (sha256): 9b:c3:21:4e:36:25:0d:2a:34:86:d9:8c:9b:f7:af:21:53:74:40:dc:32:63:6f:34:eb:a8:6a:72:7e:61:77:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.naoverde.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.naoverde.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.naoverde.de
naoverde.de
netzpuls.de
www.naoverde.de
www.netzpuls.de

Other certificates including the domain name naoverde.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.naoverde.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305129900385889106633960523095388893405625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 21:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-01 21:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.naoverde.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696444993495328504337780200303690937327395037161376542017544647727302388525076327467331826552978242100812338237655737490157567605051689584645848979023882283343479557154712626778009332555946010952745985441037297534030084366787497456221186136435171521248174283190107014770966962387788423846622862411123428292150447221844401107022054910588301361269102472475606603925945385001982613891262810087778857133978295285113539561710444344948994647555004695657400746877959913031339266487872325783898040782161164956327904618600518575776540989033748813095975107632527091079106253388058360008570240626706945833887430916246397278460509835052598298852935741484339842321398422017379034080479644166471051739894172579116364261578716567384039043462901191762863290090325344966242016034827701685421947870466136613613947777099896895511262422791521872930939961394818330799150653509059955727481896365472514754996885302880950198123929248252177090612957104418141095540113175432553165116823434642011555084429955595898106562662421466991697679389003897168989536423650878133790016725554294563521114047676113457743890050006445088609074999255207662076656704096901642399514170431248939401361487799990797718424312762350512025423532379094184382157514421024391256183741143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							529522f8f8165b39150be396fa3e3140abebfdcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netzpuls.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naoverde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netzpuls.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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