www.schlittermann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:f4:18:bd:cf:a4:52:a5:e0:ab:53:2f:19:2f:92:10:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.schlittermann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:f4:18:bd:cf:a4:52:a5:e0:ab:53:2f:19:2f:92:10:bc
Serial Number (int): 299432660619427533880639116194693015277756
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:53:7b:19:cb:05:58:f3:61:f4:32:3c:b4:0d:d3:96:14:a7:ad:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:b8:17:c5:2d:c0:85:4f:89:bd:87:c9:f3:57:11:a1:39:19:7e:38
Fingerprint (sha256): a2:c2:12:c7:ab:71:12:08:68:a9:00:b9:b2:4d:8b:89:e4:fd:23:42:6a:8b:b1:b2:ae:68:bb:99:8c:3e:69:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.schlittermann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.schlittermann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.schlittermann.de

Other certificates including the domain name schlittermann.de

(limited to 100 certificates)
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
rric-cx.dyn.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
w.schlittermann.de
rric-cx.dyn.schlittermann.de
hg.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
muli.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
pu.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
mailman.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
w.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
muli.schlittermann.de
chat.schlittermann.de
owncloud.schlittermann.de
www.schlittermann.de
owncloud.schlittermann.de
fubus.de.hs12.schlittermann.de
w.schlittermann.de
fubus.de.hs12.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
git.schlittermann.de
www.schlittermann.de
icinga.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
lug-dd.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
git.schlittermann.de
roundcube.schlittermann.de
www.schlittermann.de
otrs.schlittermann.de
git.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
mailman.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
w.schlittermann.de

Certificate

The complete raw certificate details for www.schlittermann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArOlNaHVtGZAfIIOwW0A/
Xg3Xwj8eZqvu6DGuImCpMz1Sg/jRqsY/rr/jxsvSj5H4DM4nUTgDorRasTz1ugMM
MMNdUYxIMsgxds3eA8JIXcYCGGG/AiMj8u0Iewk2scfRj77XDVV2EP5QI2uttg+L
eJn3MOhdfcPhWIWNHTQ4+KIniUHS2TUtWrIcm2CDd/0pP4lIYFzOony71Kgu7SG9
i5ryYutuzPb73tUi7lQgv7J1VkpFH0EpVnKocAvyGBhEyJEF0SERtE+9+jMmQzb8
xSJWS3it4Z8y4YpBYFC/xFp2PxzTlR6JhU63Eg7yBnE/wu4Yi4tZJi3XH1LgxK8t
vb4i9mjcnhBantovhbt94OuhPfT6COVfvPtvDHfyenPaIWxB6wgfF2coy8/0bgrC
EG/fSrv2av2YEKPRwAq0LVs1wNxQfL6V8y/A8HecTAnjZ5sb073EehVrVqnLSRkE
JW4Q+JKRAsX70T0h5MrhYwNuZ7+AsgS+qmQBzWtBNow3COM3x8yGqSG37ZGuSv0w
c6K7lys5cZnuSWdoIA0sjbWrLKA8hAkLXs5Ov5raGZ+kowWE/Hs+GKfbYZ8+OXVf
D7/voNOCuK6WUkHLjP7XPApUjPRKIRudMQC7eFkjHYyZa8OsjX3e8MDHxsxbxk14
qVSOKFeKvGlgOUzaIjHYwaUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299432660619427533880639116194693015277756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 21:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 21:00:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.schlittermann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705416711929499288138805572653295397864171012746721987323298441708865983910638068336828418501462095435971075632085794036174828365113653134216592013455389666615440304523833163496088426616043390861975576941281036567807876790348802323178017674891139764841327439506022403298232695080232072018143647703521157261481658954620039870820028863471563805868712514911564897505385020088800544955603401595786789273767040770525246244853653113968803643019771860183329236394067911683885660953787498360801907022400120052725761642428985513407043664075231829390395783569341970963874760665030129201879637201402761347881131019284698716700687048747544070304155035206220764868594022580697116201613943591295033437021359760453024786279630749284023122875343765131106451960421572544957038793527423902101349728552601680354120497959274240778779155432203781432392271909769471702518341266214352768764956465998035733823202770057036886572017624926914295215404120129305360119954962319466091598838427061549548487117819080593514051188409796557195549066464680960472121425345658173001250647561241781149904303461200676418318819127905543611030544512392365048289193916503654410587484892887893595296936380435173570895489592416431390116211105420472652141542540007730534036324773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff537b19cb0558f361f4323cb40dd39614a7ad6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schlittermann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d79e3e3fe00000403004830460221008f00e798dc319a9f60a249b292be47776d20675ca74a2a5bdfcb520e44a18bb5022100f9c593b577bab2e1d1ae2b198de0723eaff16c9e4227120f7c87fc80ca99548b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d79e3e5e6000004030047304502205983f85a855baae7a0f1a54d069478e6cd7285a5ab13e24eec79fada1b19ae3e0221008d4c79641ff25f2d265a71ebeb3b9e7155f79f7e411a40127659afcbd29b54d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005882ca5f0975fdba1d3f20f391877fedf4270fe926d7490f3dd7808f6050dc7deeeaa99c9badbb958b982d1852862b3a992d9e25db0c579bb7b595e8d848510d78560b5455f573688874813bbf8173b7d89294dc3895afd0caee9b112d4ba408356bbf611dbbd16532ea6bcc58472dcfd98c3638e6d8365bdadcaeb4d0e8e557107a3132977d93b95252e2f9b17df5d4dc2c5dceb1e1f763b958fb31467598c637450067cdee02698a07ece646b700e0b50ed65238aaec1e527a75200e393b5442656025a3ab572ff32e09a820297c8b749b288d3c96fd325bd260ca77d90970c663e96491adf3eff52cc4b0bca543b5ec90340f1870abc034cef210310f0fd4