handballpost.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:de:2c:27:cf:7a:82:33:6e:a9:3f:6e:42:3d:29:94:5c was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=handballpost.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:de:2c:27:cf:7a:82:33:6e:a9:3f:6e:42:3d:29:94:5c
Serial Number (int): 288174200298692085703519864874486834238556
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:d5:8a:16:db:81:36:96:d8:cf:ed:79:a6:f9:82:89:d5:2b:1c:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:ba:ce:89:2f:b5:3c:7f:59:97:ec:17:5b:40:8f:29:9c:de:1e:01
Fingerprint (sha256): 9f:eb:7f:e7:06:be:98:9e:88:28:4b:6d:b2:91:51:be:ee:0f:c8:34:80:37:4a:16:57:78:6b:d0:7a:a8:ac:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate handballpost.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for handballpost.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

files.handballpost.de
handballpost.de
handballpost.isp-vhost04.domservice.de
hvs.handballpost.de
service.handballpost.de
www.handballpost.de

Other certificates including the domain name handballpost.de

(limited to 100 certificates)
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de
handballpost.de

Certificate

The complete raw certificate details for handballpost.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArJLT50UYtMuDCSwL6lCT
xHz4wnndVCQ29YUn3fPKI0U9yVVoEQaG15x1wfwOVZypAhVx6zdmyZDDyvN+APcp
wG2p4Bl1ZMnIwn51NBLQp3CDrDJeqyHA/7sfzStJUaxfy3jWoPlPjcIbnHRurVKI
/MWkKNPiBySz9Da4rCCUqb5n5cj2bZH6UBI4Ktf5x7fzAozA4VOPxbwMCoiruwqK
MlOuxJj11DZq9+SZsEROASGDyOVI6ekeEfdMb1yNOnQzXpBA8cTqUQjJZT0sYGrG
I0+C65PG1ph3GzuF4Vk9d0bKxH3DdFkLHgTGc/rhJoiy2s9FoumgMI6+VPl3P4I2
Yqr0tqo1PTNu97Ep7IUKRHlRxQCpzAZDSViW9WpF87qd6V0FKutR2BXJFWCsc0T7
bj1YFBYnYwUcn1j+fLG5kRaghEU/f5i3pjtliC/0dX6TR75lCrxlaE975GMacmO+
X5oUOFbBgVG9p07UGxPc5OwSUfoC5qIvmAHo9IW/VgtBhmFEW7bUrWld5QMt3pi0
WL+86ZsGhB8OpqhFofTmwDeHy8JE9GWbpcre/bODeU9WqwRz7V5BcAFqBhTIZ0fo
ro1jToelheH1fkxUDQKCmMHCBgtCZ7EyAKR8k+JiHd+5NpsaggAIncTrCfRD+sSb
jUqadghaz9nT67CrSWQxka8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288174200298692085703519864874486834238556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 01:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 01:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handballpost.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704038642784289824679962161827609467768252461230318419364540422324132373939623279294187135735166130255935674614058539319088657515563936085188673412966462505633849286460238917391480488683583665011063590242603847776439439384308740138733232969261487647262550166289968248273982248253526402401873379443670535109157082724422849598965796632309864145934869484004154834668747983790374521074203258568550504511667551315907280248989814214669574255819874260085522642401852288131215557859988012872991707970928001651698108938908186815684436376881067641512861943697009906488323916811956571376139242162185486358046346078139220011724314497212188124807570804868016569607138718409251013343477358474373912548951459416162342721546784728854869888607399648495813711580426588143856819252139538532096108098004671857433151231002889769768547559531135898682602066132937579957552671530140492355084419700180723675410845536207057103904153272307008838400224439774192247191198918330135393367011568627950621986994200708465504855412394801803671337554209235906178885826896501633779537597799597165028807873691636250632567582109019758659801795078537629167145268449203891478405566186904138045629920701181491299986523354463581915188169955219070861761627779805270167398748591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aad58a16db813696d8cfed79a6f98289d52b1c07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.handballpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handballpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handballpost.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvs.handballpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.handballpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handballpost.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b2c2922300000403004830460221008583be5e99cf6ff8589dfc147595901fe174f67f2029dca15da4b712f5441b41022100d3675be85e4febc111179612f87fcfcaa07f817e72f17da6b847a361033f80c400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b2c29245000004030047304502203779343d1bd02b38a4a0f8345bf0ba5dc52e44b1cb7b693869b2820bba6f4772022100c946c4881e169d4507c83d82150efab3c8727621bd5ec76399eaa44ae7075651
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00668dfbca42e211848978c1ee3e2202636f44b3f9a722e279c0af6811b7decfe65fd32a66b6437a01c3bc58852a68439e4c2f2edd5028fe1a0dac2aaf12e06720637e33cba732f68ac6b32e3ae8918e21a981e05317400eb69e07d3e95ef1cce9e362fbdf2eaa48fa5dbd1062eebe3c657e15c9c08950871b901166bb09a0f8098c48c6c02c654918ade8923387d30fbd3463d1f8dbfde482a7e6f4ef0c4f01f570e13868a9e754d3abf21e39754c4645d1cb61ebbd5a75c1f164c58d057e81c125199d9699398b6524dd6e2be2826bd2bc0a8e7fd68be6e9b64d7c88ddc99c1a218e53fecafa97d0f5c2ddc296dcf70ad01ef1f72133e7ab7147978c919bfa49