riederalpbrunnen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:1f:a5:9a:04:82:43:58:8b:1e:90:cc:69:b0:25:f8:66 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=riederalpbrunnen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:1f:a5:9a:04:82:43:58:8b:1e:90:cc:69:b0:25:f8:66
Serial Number (int): 397151588117434483580232434504722805028966
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:88:60:87:f9:3e:20:8c:11:2f:fd:0c:06:42:f7:38:84:00:86:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:13:df:3a:4d:70:f5:18:62:2c:03:11:9a:46:bb:d6:12:42:63:1a
Fingerprint (sha256): 9f:d6:9b:fe:68:40:bf:d8:58:13:da:0c:29:99:27:aa:7b:62:26:f2:9a:c7:78:83:d8:81:ea:f1:d5:30:74:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate riederalpbrunnen.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for riederalpbrunnen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

riederalpbrunnen.de
riederalpbrunnen.server320.star-server.info
www.riederalpbrunnen.de
www.riederalpbrunnen.server320.star-server.info

Other certificates including the domain name riederalpbrunnen.de

(limited to 100 certificates)
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de
riederalpbrunnen.de

Certificate

The complete raw certificate details for riederalpbrunnen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwQ22tFv19cUwta7n676m
OIaCRqYlml0asVQN9u8cToqE3ZHC82KypbXacledkPlNwfYPf1aQpPLy/IHvwvZN
lP3dYD/TiupLrcy4uEJqUwvmAr16nTK1DfLW/YvBaHUjlYjgaV45HXGkZ6jbZAdR
kYiu3E4TSCKbf+5V2LzVdMXbqkU+sgbt+VWpqsCmZvvot7lgxGMDjtoFSDNO5bsk
hPf3j+piXzjX7g8kIVLElDhGgL2brQaohhLgAUzTUkZk9I+MkkGCxre0KhRhAP8p
Fc3bAL38muAfPfXqH9u3qivtK3UEBlYRUHgWuHRLSJZBW3zAycg8dzgqUSoydEOi
UIhumiT1ULdWuqMzxx3wLOkJzH8Fdi/ir823DxbtAX/TVJXrBCa/DNoyqIf++agW
SOuS7B/WGI8CN/fLaeA/+nAM7J/p1vsSNxFb5xMDONsBXaX9TqbtIRyjvF0Strp/
P05AxMLvbauIXf1OUyX+fZWsNyJoGhRB/7Ddq/u1TY9+urvM89uKjQ79wI9im5Sw
V7y1pIYjBCo5U9ap9b6wF0wn9q5BVE8SCiLO8x6ZCYRJNeshhBR6OSborSWeAqYz
MSXrCZS74I/2qBqGK9EcCQlnBdZXgJwsvAJEvjFjJ1tYvSg+qfhpH0VdEFW13ziR
XND+48JDC1O4tKkERTLOne8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397151588117434483580232434504722805028966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 01:12:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 01:12:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'riederalpbrunnen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787589847988344162763643199203738294113594925497414271574475547954117185613623340386580678851128458976323607655033124938827522446823460010620695383804976097750985186818975148789695914373525107201115427896733844881084112778920316411357968494818847932275159921893807997712659901736325472794497982350035992943535098931053788385741882046009662052044673867129814167021969992811522362799334132273626434621835839329380305909211097513869862279153025464337953706110395363000481623686765776998016493785315993266797025534978805490625118603711245099844541553949053454398703750235764708540702683045415832550645769041918616012602663713636774229851832035243539853609330522559135575969742508551289275734853340774282775874712143551946981049410039915807032945294649820876382985383257424338445588984817711592319027305326902190511393129966205839810420552728838112501929246585951748849512994301563689659043952034517535432976893764166025756742010628043957515616655461709626187993338162217649144000221066311671314241175392857314272328444349006488067202584652129350962086986364196928044551891657243153736160973482026748470245028833639324395805126253873846149602004433077827013494626426410078076409583701171803236000900651872871326105372122657642479094767087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17886087f93e208c112ffd0c0642f7388400866e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riederalpbrunnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riederalpbrunnen.server320.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riederalpbrunnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riederalpbrunnen.server320.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001869af1a1cb00000403004730450220501b7721a86e0bb0aa8e67c5b576e5f4f674eeb127939c0d3562ed70721cd39a022100e14c28c11b026a26c7c7fa93525f3d5c66f144e68cf41b28bbed3ffa60f0f12d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001869af1a1af0000040300473045022033d69f51adb92f70089e15be3ab67ff172bdb1c99ddb7570ef907110b27ba2dc022100f7d45406217f9bd14fbbf511081a6cc5b1387e10ba43c71246ff5a46aeb9c200
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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