hospiz-werden.de

Issued by R3

About this certificate

This digital certificate with serial number 04:77:16:c9:37:0c:fd:50:05:33:f2:95:e5:75:d2:ab:7d:85 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hospiz-werden.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:16:c9:37:0c:fd:50:05:33:f2:95:e5:75:d2:ab:7d:85
Serial Number (int): 388973033174770159985327906012472430787973
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:a8:15:f9:2e:56:bd:1c:68:08:8b:0f:87:0b:41:1f:ba:32:13:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:81:2b:e5:f3:8e:a2:04:d8:80:86:97:25:a2:cd:7b:53:56:e0:46
Fingerprint (sha256): a2:d6:3a:c6:7c:46:f8:55:8a:fb:f9:aa:2e:a2:1f:c0:68:3a:03:64:a9:2c:84:c2:23:4e:ef:6a:b3:65:0b:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hospiz-werden.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hospiz-werden.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hospiz-essen-werden.de
hospiz-werden.de
hospizarbeit-werden.de
www.hospiz-essen-werden.de
www.hospiz-werden.de
www.hospizarbeit-werden.de

Other certificates including the domain name hospiz-werden.de

(limited to 100 certificates)
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de
hospiz-werden.de

Certificate

The complete raw certificate details for hospiz-werden.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08m+UOVajebMh641Zs25
K872I70wSL/QzLOhU6IAFdTJrQf/Um/0Du7v6wWrwowPd8afo28zeyLHAs9mlRJX
U73faPzji43g40sZcfORaFrwBBCl7e6S4yHLHM5UP76gHTclNgNAom9p9dsZT70q
OSwb/24uzf7id+KLgYiUq3/mUH9XeHBFua4FvVXEMAG3yndy4PfNlgoEgIsWbNAD
F13KSJuCjg9acd9+kg8Fjmzr3K8CGut5I5srp5PltlHql7mwrCmfuqdZVejsUOcI
TghBSbrzhLXbgJqXvhg5eUkvjJN0SaxlLzLkr9CfU6T4yLagENMQCitS2U2vddZ1
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388973033174770159985327906012472430787973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 07:30:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 07:30:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hospiz-werden.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26735765736960966513783153421941609057570830168843928084227331093695976533456542503149653494864806268118969320953564409012278659912442009934639450707508992342484901790341028687046122963179444454303713097784451640131119515192387875709753401128831486541207305864452449589913866915382447450524033215010282466436907980460158738065898938574283544887204997329222772820729096104947947811069913459642675349428361354440470396369981580193411506942959977647104281010602948791765754154515307321882492715074693816754585890337634635830940968145165799957539707455741357227557487703056926507644805169148585309825711138977954615686537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40a815f92e56bd1c68088b0f870b411fba321386
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospiz-essen-werden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospiz-werden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospizarbeit-werden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospiz-essen-werden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospiz-werden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospizarbeit-werden.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a0ceac766000004030046304402207fcc79c2c975ac9aa495e825d3a2673f881da80a8c8e39958b8ddeaeea20cd2702202341b4629cd8cc348d4a66f414544256298beaca27f37b1b4b55ac0dbecf86bb007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a0ceac77b0000040300463044022044a513f0df30eb8a683d5cb126642f2380ee6f31f6843b29f5e20341dee6407d02205010aadf7a3f61b8d42211656f6cee59fb6c2a947404bf58c5e40fdad87d9501
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007e38899d92cab187e9835e1bc24964ef2aeb41c60729fda0e2a4ef6e6706c0aeb917242d189b4dd7b2f771927dde608d8cfee46cead397131b5f2886596c6e9146cfc0e452b43b693b95851a2a8d6029652776c51e6ad0e371c0b5dfdd6f03ebf3275ec5e79663a7d5efe49fc4ba03c629843838cd787dccc98be3077b816067a9734156596cdb2cf35a79c2ec24b78a244eaf0e9b2907bb1a5818bea4922efe3415698ab2a84c0f72a2359923b889327b27e6dccf557dd9616df742c249fe653faca88e334aa463e8ae9950fc0ee599381c5edd94a306f36b30742613146ceabbf3a5db6974b821ae5e69fd2031655dba9da7982be9ac0d0bd806b56ea49c9f