friedrichzweiten.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:b8:43:a8:2a:a4:67:45:92:a9:c5:e1:ae:77:6c:90:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=friedrichzweiten.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:b8:43:a8:2a:a4:67:45:92:a9:c5:e1:ae:77:6c:90:1f
Serial Number (int): 288464094027972101536142304222065617309727
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:09:50:ee:dc:2d:ed:d8:a9:a7:d8:a2:02:15:9a:d2:75:1e:41:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:60:68:05:16:90:4d:c0:f9:df:46:c0:8a:db:49:44:85:2b:0d:f7
Fingerprint (sha256): 9c:de:54:88:1f:45:d0:46:39:26:a3:66:6a:52:52:a5:1f:4f:45:22:e2:79:b2:79:9e:5e:65:9b:e7:61:db:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate friedrichzweiten.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friedrichzweiten.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

friedrichzweiten.com

Other certificates including the domain name friedrichzweiten.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for friedrichzweiten.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISA0+4Q6gqpGdFkqnF4a53bJAfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUxNTIyNTVaFw0x
OTA4MjMxNTIyNTVaMB8xHTAbBgNVBAMTFGZyaWVkcmljaHp3ZWl0ZW4uY29tMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtJdGPn9tFK1dtPiSM/nI70Q8
XK9lgAHVeYfJJNlnWL2iVA4kY9mfoybFmymEXIDSRoDgM26bXkEASRbQ0pURnVZ0
v1HCJRF+yjl6uO5t0pnWnkBBia4d74IRCv7zDu+qHgncNJ69Nf3Vg8AFK4p6g/YA
KC4Y03vWYS3CbXuGI3tnr3R5PLZRUoWTykOdN48NcK4T3728D5N5Btg9WjdsKqTu
tdcArP+Mka9nwLEERPSO9m1U/QJ2+wPmiwFLbe89jWMVAc8CL9szcpo0XHjigZDS
rdz8z0AsEGwJmAZLoOLP3vL9iUtUqidK+9sSaqU6+HJVkJev4IbIUZovWiP59XDb
23tYT71itOabOjybIiQ51XF/Wc1Tb0SJlSYMCA0bUTBaQSfru+y4fQ9u2B1WFHT4
9VKJ8VHPn+hPZw3oPqv68KPysW8fmbryAm51ifVbQZtEpvPpTc2OAFJRAdStHnmJ
gLnkFhcFH9xaesJCBkmSof1LvfPdUpZKw71TjIHuGU8EqsyPkNuJoh1w2GOBmnAL
CTP6iR5/03aEIkj4xRGEsgdRhH9Imw+ZQmTXJTVvq++KBDX1BHWgub6+D3OE322z
rLrDo+ynsY2kr36i+Ak7G4AR+m4iRjNJ+cEmTAQEvKOohRKLs9UbF96SyhDMBjzL
zXEIS/Y8uGPzvcqHdTECAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU0wlQ7twt7dipp9iiAhWa0nUeQWMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRmcmllZHJpY2h6
d2VpdGVuLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d
8dv+AAABau/NYgUAAAQDAEYwRAIgHXb6aE1rb8/1hAaAG6/RDGy2f/Tsqc5Vlm2O
u4MH5BECICrSfdf4lVntZRgX56U6PFcLvLzLwHbmA/PbM4rT82rjAHYAY/Lbzeg7
zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFq781iJgAABAMARzBFAiEAlJ5d
EL/WdJn/MybRyb/EYxXE47PKlysskxQV1qz3U7oCIBJm9VuaJJ2IWoQGasWDNgwc
pnWv6qm7/wOYHTE4WSdSMA0GCSqGSIb3DQEBCwUAA4IBAQCDK2XBDlJQhFcC9bco
ILqz4PPibk7y5S5q08Fbs2IhC6MJ+M02gcpzy+++dEXlAxB2B2UAX6+JimZBvsYh
wjlMv1kERBqtC824ofXnt9RK02QKQ4w5K7D8yatTsYG2ONnN0XXCY2oX9Q/ZFQP2
j1Rz7ulMltBqXguX3ckN5ktcNv/1enGRv1zOPBCcLt0aoCg4QFkkLve+CO0h8LGm
Rgd8QvVB+bmSKBs5BxkvQ8txhmB/I5lCwNzSxzHuVfqr+6EAVfFWKNSz3NwFVAqK
GbsSq22Wgqv6j/pSLQb4p9/LQTZElKnaxiyBc5C5tP2Ql72MbMgWbR8n9jogEfrW
82VP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288464094027972101536142304222065617309727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 15:22:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 15:22:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friedrichzweiten.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736746657526662319445771345293386208945491663714368783605371101362816453055567591664223420773901678412719193634742695446872678157975852904404253354587772799600700869387152554668023549110346227220459297118756366232846731655558189836110318589009536347242152203838633864827619506656326695670873005574277250455948213293026164903043592619440245687452470225693722135867258621796550852316363520552942264229906574335281301442450180360075918718169002240979727676818959068452561138297937363491557449950446616273681046768383806661165009635266406190730195465995797227475353705581574861169902813684794335450214568943331757091702803228514573286298904063241080525737373467613660007766581341078506308271245306895148786505211991124047055892533770164177055246918445976985273393911509572163872427728406051658478266712283522692956439686018834537157342723441261116132095832938490829860853693363458772373332177146884564193458806881890880331010354587852941715720736143216918009365955810563744760115557935503711437905691624314861329011630640299916184991894284118609784797502795177705456137902359984252271587731584492242661603660766493005086966135809200217687554811144314151321484516809294896091499949224802365505623566090095846055932043894881986950388479281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d30950eedc2dedd8a9a7d8a202159ad2751e4163
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friedrichzweiten.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aefcd6205000004030046304402201d76fa684d6b6fcff58406801bafd10c6cb67ff4eca9ce55966d8ebb8307e41102202ad27dd7f89559ed651817e7a53a3c570bbcbccbc076e603f3db338ad3f36ae300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aefcd62260000040300473045022100949e5d10bfd67499ff3326d1c9bfc46315c4e3b3ca972b2c931415d6acf753ba02201266f55b9a249d885a84066ac583360c1ca675afeaa9bbff03981d3138592752
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00832b65c10e5250845702f5b72820bab3e0f3e26e4ef2e52e6ad3c15bb362210ba309f8cd3681ca73cbefbe7445e50310760765005faf898a6641bec621c2394cbf5904441aad0bcdb8a1f5e7b7d44ad3640a438c392bb0fcc9ab53b181b638d9cdd175c2636a17f50fd91503f68f5473eee94c96d06a5e0b97ddc90de64b5c36fff57a7191bf5cce3c109c2edd1aa028384059242ef7be08ed21f0b1a646077c42f541f9b992281b3907192f43cb7186607f239942c0dcd2c731ee55faabfba10055f15628d4b3dcdc05540a8a19bb12ab6d9682abfa8ffa522d06f8a7dfcb41364494a9dac62c817390b9b4fd9097bd8c6cc8166d1f27f63a2011fad6f3654f