www.rokar.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:7d:e9:fc:c8:63:e0:13:e5:46:16:b5:8a:9e:e8:3a:3c:a5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.rokar.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7d:e9:fc:c8:63:e0:13:e5:46:16:b5:8a:9e:e8:3a:3c:a5Serial Number (int): 391295462238379388208118041882544884563109
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9b:c7:90:c3:82:ed:9a:91:64:f3:5c:ae:50:0f:77:be:dd:eb:9d:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a1:a0:76:23:63:22:4b:4e:f4:51:55:01:24:5b:9e:69:d7:33:60:0d
Fingerprint (sha256): 9b:c6:5d:d1:d1:82:56:cd:e8:e0:c1:97:56:d5:d8:d5:d6:4d:fd:c5:65:9f:35:e6:f5:f0:9a:ee:54:8c:08:75
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.rokar.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.rokar.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.rokar.de
Other certificates including the domain name rokar.de
(limited to 100 certificates)
disbohost.de
allesistfuerdich.2ix.at
*.linderclaus.de
*.flohmarkt-horst.de
shop.immopano.eu
www.rokar.de
www.rokar.de
stag.zorn.mobi
ninogemser.lima-city.de
*.rokar.de
www.diaryofpeng.lima-city.de
www.goeger-it.de
uipzakqndbnvdao.lima-city.net
www.rokar.de
www.rokar.de
www.rokar.de
www.poodo.app
lc4217.lima-city.de
www.locjul.lima-city.de
www.rokar.de
www.rokar.de
*.virtumax.de
www.rokar.de
www.rokar.de
www.photodownload.lima-city.de
www.verwaltung.sg-meerane02.de
rokar.de
www.rokar.de
*.rubber-queen-ana-lucia.de
gamerhosting.lima-city.de
anon4lulz.lima-city.de
www.rokar.de
solawi-luisenhof.com
zd.innovationskarten.de
allesistfuerdich.2ix.at
*.linderclaus.de
*.flohmarkt-horst.de
shop.immopano.eu
www.rokar.de
www.rokar.de
stag.zorn.mobi
ninogemser.lima-city.de
*.rokar.de
www.diaryofpeng.lima-city.de
www.goeger-it.de
uipzakqndbnvdao.lima-city.net
www.rokar.de
www.rokar.de
www.rokar.de
www.poodo.app
lc4217.lima-city.de
www.locjul.lima-city.de
www.rokar.de
www.rokar.de
*.virtumax.de
www.rokar.de
www.rokar.de
www.photodownload.lima-city.de
www.verwaltung.sg-meerane02.de
rokar.de
www.rokar.de
*.rubber-queen-ana-lucia.de
gamerhosting.lima-city.de
anon4lulz.lima-city.de
www.rokar.de
solawi-luisenhof.com
zd.innovationskarten.de
Certificate
The complete raw certificate details for www.rokar.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISBH3p/Mhj4BPlRha1ip7oOjylMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTQxMTE2MzZaFw0x ODEwMTIxMTE2MzZaMBcxFTATBgNVBAMTDHd3dy5yb2thci5kZTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALVb6Cg3W3sCNOnej0KP+GoI9ZWmKbcSMDMm JE2xnr3ecnBw0R8kJglIJpPGosc6Y0ZuwDwHShes9evusgnhbvJ3IfpRm5f7F9XV 4ZZnE3cDBtXeKxsMh8Ofp09AygCw4d67OUHvNNCULsZBBvgNaKlVQbXFw6QL9Vwv nhA5l0ZpAoD4TUGjmJDurv9Rn7h/B4K7b74MTYE9jQhFuQSC4SmDIaikn60hwAsm YXAwzYaDIK3Y7WxE8z2Cb00e6TlwuTN3LsGcbmXYsCwog8SgdCGk5OUYtT1tRDBS M9UoIX405LbxCt4VF8IcRzZYrrcCu7t+0RZV+ssXwpeHNrq7yD0CAwEAAaOCAxQw ggMQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm8eQw4LtmpFk81yuUA93vt3rnYAw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAXBgNVHREEEDAOggx3d3cucm9rYXIuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwB AgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRl IG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQg b25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBm b3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQG CisGAQQB1nkCBAIEgfUEgfIA8AB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j qh0HE9MMAAABZJi4qhMAAAQDAEgwRgIhANvO9ocjpnJw3klTfNcj6jQCOP0n93nn J1LD6U8mdA0RAiEAuph9yTEvxvSOF7ZOJgAAQZn44mY+JcgI03V+0OlgxgcAdQAp PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWSYuKn9AAAEAwBGMEQC IArDqlZAD4+a3bJE3AYykRyiU+N4T/73Ffn9GIVYRW40AiARh0V9aUeCDjT8sRWM dKJKe3bLUy77J17WYRlSb9XO8TANBgkqhkiG9w0BAQsFAAOCAQEAfXfwlCro2iTZ +xW6Sdp1zqymRb8nUgiNGf1xtNChxd66eVIFAys7tvUM9Us58auGxCB9wpmmPJO2 VXsho3zrj3N9iBfF8Dpz1hM2weJgxOnI4N4zFwVC6rNaZV0mk463sT7amLEIerAZ c3NHp7IubXzzIcbr5ZRsXTQqvUu+i7aNueoHs8NzvlOWSOdZqJN7tcTFeaISAM3T R3FusY1XeIPsPmP1vNGs1rtYO2+FBgJr+SDUhfS7QAR9qOCvbEdqupxpTiue8yPO dM78dDmMoFV+VHTOjtWyTxuhsmop6SdWRSHCOTiVVNmcM4D1lEU0LunuXsPUrO/a I3cOn7VrAQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVvoKDdbewI06d6PQo/4 agj1laYptxIwMyYkTbGevd5ycHDRHyQmCUgmk8aixzpjRm7APAdKF6z16+6yCeFu 8nch+lGbl/sX1dXhlmcTdwMG1d4rGwyHw5+nT0DKALDh3rs5Qe800JQuxkEG+A1o qVVBtcXDpAv1XC+eEDmXRmkCgPhNQaOYkO6u/1GfuH8HgrtvvgxNgT2NCEW5BILh KYMhqKSfrSHACyZhcDDNhoMgrdjtbETzPYJvTR7pOXC5M3cuwZxuZdiwLCiDxKB0 IaTk5Ri1PW1EMFIz1SghfjTktvEK3hUXwhxHNliutwK7u37RFlX6yxfCl4c2urvI PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 391295462238379388208118041882544884563109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-14 11:16:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 11:16:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rokar.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22894454162458422074932785420694174327448298010021895011809432991022687188043147022843282303677972803557325958871524405745209507158908684002808413596934954601408209542241835998812355115299315702572147422365341653513207787328300890651821782299787970121856772829945514105286833565567232413470978548738393261193450775479109646165126837713262540126726418949451352848670279721240282315238452872604706255394272246278441836075649139215249233774248702667243470342003471826215822479136776229746348752042163226820014027491281260880323205807514313063135633112333655296884842884562320238638804416458482342592376122563719310592061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9bc790c382ed9a9164f35cae500f77beddeb9d80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokar.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016498b8aa130000040300483046022100dbcef68723a67270de49537cd723ea340238fd27f779e72752c3e94f26740d11022100ba987dc9312fc6f48e17b64e2600004199f8e2663e25c808d3757ed0e960c607007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016498b8a9fd000004030046304402200ac3aa56400f8f9addb244dc0632911ca253e3784ffef715f9fd188558456e3402201187457d6947820e34fcb1158c74a24a7b76cb532efb275ed66119526fd5cef1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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