afd-nordsachsen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:bb:14:f0:0b:4d:0d:62:42:ed:3a:d5:30:a8:67:50:19:25 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afd-nordsachsen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bb:14:f0:0b:4d:0d:62:42:ed:3a:d5:30:a8:67:50:19:25
Serial Number (int): 412109777281629442179912607000860948437285
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:31:44:ab:a2:a3:59:b0:d7:73:b4:b3:c2:63:f4:83:12:27:18:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:a2:ab:4c:a4:18:ca:79:df:51:f1:0f:a0:ac:26:40:12:76:93:61
Fingerprint (sha256): 9e:78:fe:be:66:6c:9f:eb:fc:6c:2e:91:e8:8e:76:8c:e7:f0:da:d0:86:fb:3a:ac:e3:c9:5d:ac:04:df:4d:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afd-nordsachsen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afd-nordsachsen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afd-nordsachsen.de
www.afd-nordsachsen.de

Other certificates including the domain name afd-nordsachsen.de

(limited to 100 certificates)
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de

Certificate

The complete raw certificate details for afd-nordsachsen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuJWXpt5TOXirZDxsdd51
5N6gWU6mQaYt6TBGY44nuFpi5ZaP+hjBelN20vTnhDFtdH0x025rF0yFjrZH7OLW
Ww1QUUECJgS1SIgpXrBNSaTLEQ6XmJ9Ama/anT1bEgk7ZLayNQWzRE/Jc1AaEdSV
O9OmM291+vm78Jp9Gd3Pv3W/zt6opyOJzY6CFFUDgAYMfJ2fLmF/oluurJC6Fijt
H+8AnoURs6Fi4SASQs77Asst5w+LkvtwZmOyc+iX5PmGYgUUHLw3U8xxcmFFhUsA
wey7ou6KAMr2qvl+5nP5r/uYIXyzRl/1EjCPoVARb06vSjv90V87XN2l/rxsjmyG
l1Y8uq+ZqJRGXmCB4nSLprgBFZxALxsDCD+53dZeY4PX6IiiXhva30dQU3BARkS0
iHtA/ABwENFlwvwAHu3ckGaV6/FGUl8e5Y/+/yNdpKUXGQEPkwf+NtDLyVcbQDVu
glIo3wk7Qv+lna/RW2JdGQtwxs5tf3XqIL74ZrONy2AlzmA2OyfiDX6gdjj3Xk4Q
NdxBsqjm/pJaDmxgv+H8LCLQOmtQjbCJSCYcdBcnMLAA3j4cTHi9+vcUtjASfYk2
dCtRx7g2xPe2DcoDA8YUjDgRdI/6NNAltN6YLhul2Xcm0J+9QC3Y0RHs8L76s7jf
bWJWsFh4pTNwyV0TZzGvmkECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412109777281629442179912607000860948437285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 23:29:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 23:29:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afd-nordsachsen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753038429243530261533781268371120946139374472989487376588537617336385616593483438979321711056168635554669703609930516653523306993166862683718204497782952826144020227292757040434103813003646109717802126662168665420789302301234461754053954005991264451826011336473999140611979387372042088994958805666547229189694311225567794690479060694345066831538617856019588714429182908442157048250061133957154696942551192346280878530334441695661597206331481164241345213683997588576222301724093939946718408356302043614668691479900461287538608309074389755615855034027606036141635857299339454648254675696946694624715385253772646588576531048141773775664301723854758190433142545412482519791386305070620243565861669241132380660257583663219827548210291454527581848045791005662849706417885743718904977516725024844820121833849690664760358070505077932466610990797254460181093248676093426230136943586294653814470454791785945800190076652043985480320542107738319067863412498825425004590655653314317913162698094675958121226333700984300372063266298816196123994533041937941972198883503140694294908579897804650826470472499432436466556568341161966675398350648223394608185333034515025037830906031595776274344674253711340665323431141286309288851956249175788886393068097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac3144aba2a359b0d773b4b3c263f4831227186d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189bdf2cc4c000004030046304402202e5d96048b399a2c7eb01633e316c61c94e72a2160cd070be575b5294708e8fc02203b1e2f86a08ae791c730248823a9bab997ec2d60f9328ff6023ba9220866729b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189bdf2cc720000040300473045022100f95f373e22477cf62fde715fe203c8ebf815359a52dfa760b36565c188e623ea022078c0372876f74515d517e1bfe47d196b8a867d3c3b0dbfb232baf9689a29b8d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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