hommage-leipzig.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:e6:e6:68:aa:92:85:f3:c9:e0:d6:a5:e4:a1:77:3f:0b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hommage-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:e6:e6:68:aa:92:85:f3:c9:e0:d6:a5:e4:a1:77:3f:0b
Serial Number (int): 331401661804265851768011569491511627693835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:72:c3:bb:ce:09:20:0e:d3:42:b6:2b:31:77:2e:cf:f0:0c:0d:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:2a:c5:d9:d0:17:2c:f6:d9:08:95:c8:1f:0a:75:24:a8:73:8c:a9
Fingerprint (sha256): 9c:55:85:80:aa:ed:ae:e1:be:bf:04:c2:23:79:57:0a:8a:0f:68:34:16:c1:39:05:fb:a9:b9:64:d2:7d:41:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hommage-leipzig.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hommage-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de

Other certificates including the domain name hommage-leipzig.de

(limited to 100 certificates)
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de

Certificate

The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331401661804265851768011569491511627693835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:11:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 00:11:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880190473545770603537349376221966390850728307792686315187410072725659457530983963156441208160597166109674751818764262466327965722676572760289094406953335140008319945543633595426849551967612974174379923922494111852507323748215881619561924962922699672562915638510166482710568951902697929559435585573169264201920572157883160851327978754101460910396960305077420929018513990492220070147302549621207521398786570073307464719407347018850517639210649589094809026550261649035551158381369712805706348417839885134515659142888525923514694013688900107673467725120615263282482685480125453182659163710783615904152313330126966755497428875688788526798845010844543549760549253978543533528455716215960215886164072986221489877582892697105193650202253540604520493475730763637544055539695687284905148780497053734445416174343403978215588663931399111133957414096766959352204997839166878727230712113938282397902288427816626265813227579049933355828855940045142637634214788941900798834138769694705843144286296644612925200672365445628079050479566786471669001845048692419311624654371751846955556470135996544690353408684109928292588285501128291869664109272393025181582281701926210662234432911277743433949694836498043177501063498039489413380457752757000162661226019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2772c3bbce09200ed342b62b31772ecff00c0d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714d0b33440000040300473045022024261e205418964461dee150f26aff14fa469e3d9271f07994da2fae6d4824a6022100a086aee419b535228599e3937e90a7655e3b4a29d8ce71f01a2f4b76741cd3c80076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001714d0b337a000004030047304502205420c3257db5af9d30855eadad5f0e572ce8c33a88c5212666bbf80eba9e57090221009d1853b0ee6b31fd870f54d355479ac1d0cb3ee218c34c9ec58c36c81b9ff716
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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