DV SSL/TLS Certificate for cloud.dierckeschule.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the cloud.dierckeschule.de DV SSL/TLS Certificate

This certificate with serial number 05:e5:ae:11:10:bb:e2:89:6e:44:4e:71:46:c5:7d:f9:0d:61 for cloud.dierckeschule.de was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for cloud.dierckeschule.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:e5:ae:11:10:bb:e2:89:6e:44:4e:71:46:c5:7d:f9:0d:61
Serial Number (int): 513717465963413641624558643253836668013921
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 93:9e:bb:be:da:93:e7:10:3c:cf:3f:a3:71:35:32:1d:1f:ba:d7:03
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 39:bf:e0:a8:19:e7:25:66:b3:11:80:9b:7e:21:3d:54:f3:e8:5d:5d
Fingerprint (SHA-256): 83:80:45:d5:f1:a4:be:8a:88:5c:cf:16:52:86:51:1c:00:28:ab:62:3e:d0:41:b6:56:de:b1:7d:37:fe:c7:43

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/98.crl

Check the revocation status for certificate cloud.dierckeschule.de
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for cloud.dierckeschule.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for cloud.dierckeschule.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotgjm/zVMGXU7r/4OpwL
FP/4dYWkQ4v2wNZiN7pskPIWbiuVDGJo2cl2vFpOzzxVATmzCzrdPMO6mRb7P+R1
2Xs3R+VSRIqbftJ2g5tS4YQG23ynyOZPtfZc4bpSEqaoWuIFjFcgJYP8jOofemkk
Gy2lgCAUzpVqyC/o+5FnybiUYEEwVpJrt80tnmOnULfXNXIWpuflL2OQyLJ/xTO2
ClXDapBZZ6F/r175gu4juz1ghTyCP8qIytACMkOk6G8VzyF6yhycnmTGXAXKW8fG
reMDm2kcq4yNPDY8Na9EfI0Xp1qzJIVgKLEVxSlKxn7pxs9c2WsOsQ/Lt3bsFpJw
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 513717465963413641624558643253836668013921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-01 18:28:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-29 18:28:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.dierckeschule.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20557187566556599668401501598642529626559411064869968140831978070358243416274910533114751161321707901196698310103363865817504408771711539154928546507712286908113129300499799421487106884492678859949389292040898097184881903361436652242367127454556451504002447823720960835971167995540838334524713756517305389705869904548809738523660234142562134580729747782709686267512549639326067141480928938963379553169594826264721118294069001250253252116424825910457096410551915927820545086904883132616005876026819606486890662301386954153306366930421424478978755481993631080188491638024487782502135267918842958217783414119244919631903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							939ebbbeda93e7103ccf3fa37135321d1fbad703
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.dierckeschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.dierckeschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.dierckeschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimbra.dierckeschule.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/98.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197c774cbec00000403004730450220713feebcb20ebb4cd3ac67bf085f9ad7d6129c6bbbcf6dadbff41f90ac47a9a4022100917c4b531a6c9dcdb6fdbbe0319bf6c1b47124f3cf0075212e6417f0e105ea8300770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197c774e34f00000403004830460221008fcf4c8401259b34851eda7bbfa2572ceaa7e7877345186efe7a8cd99ee2d918022100ab95d106d729a556fd238b8d650201122824348dcd83e179c291303d87f0baee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003eee5d264142393ccc8895c4478fc307b05d1fbe5e21651eb171d832c0c84148aa07717bea41c1cb2f4b1f4010a2bfe63d8cc325ddede9439c8e1578905ad1009c4efbe26f4d0f7d95219fee6e7dbbcdba222cc33922c824d15ffef1085bf961922ec0abe468564ee633ed30f9c079417cea92dc463da9367ddc38b9a9bbdd106ffe23de6882c712d50c6387ab5857bd336c60294e3491ad18081cf2f914850f0d1be5db46c90ec28fc8f7732205718a3b8be933eb4c3bc0987fd707ebf0459d8aa320a65a8761b5c1410ae16dd37ebe869e1549748fef6957d483b9fbaacf2fa275a632ef4950a93b9b6b4add6afba12b1296af6866357fd45ec1c03183b179