hrs-rosengarten.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:14:ce:0e:ec:05:aa:f6:6f:e8:e6:b9:27:de:aa:3f:76 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hrs-rosengarten.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:14:ce:0e:ec:05:aa:f6:6f:e8:e6:b9:27:de:aa:3f:76Serial Number (int): 289267666358519585346512706242850436300662
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7d:98:a9:18:d8:dc:65:dc:7c:7d:73:6c:42:18:d7:fd:6a:8b:4a:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8b:68:80:87:93:15:18:4f:d1:6e:f7:0f:55:56:fe:40:14:39:6f:f8
Fingerprint (sha256): a7:c1:d1:41:82:0b:72:90:15:1a:28:03:b4:06:be:9f:55:8d:7f:d8:23:18:94:17:35:11:5b:89:e1:ed:7c:43
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hrs-rosengarten.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hrs-rosengarten.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hrs-rosengarten.de
*.oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
*.oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
Other certificates including the domain name hrs-rosengarten.de
(limited to 100 certificates)
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
admins.hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
admins.hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
oberschule-rosengarten.de
hrs-rosengarten.de
oberschule-rosengarten.de
Certificate
The complete raw certificate details for hrs-rosengarten.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISA1IUzg7sBar2b+jmuSfeqj92MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTUxODQ0NDdaFw0y MDA2MTMxODQ0NDdaMB0xGzAZBgNVBAMTEmhycy1yb3NlbmdhcnRlbi5kZTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL7P5wXJPoP7u+FX9ZxOlDCjvewl RXqpKj42CsaUWEtj+zIJoa02i8aohVplhOlx/wV2/McOuggMk7ovqbfRq5bZJEPN CEMACwuTcYz+JEONp2qPgXeK3UddtEZoTnMGrgYC2vi1RU1Yp8rUBSiDvYUSucvh IZw+TrTfINse68vOJS+tPqtnsgu04eTGQEvjhI+0fvhI2YO1KYS0hb430KHD0LGy BiwtfWZyHK3CFgCtziYswd70VA2GKMLq56QBB0NV/RXQCTrKbKPFmLbOq8bcJTL0 3C60cN8TApnznKhg66gcMKZ4P/t5yQxNtfaEiJ6wdy/0Kxv2dpGBhU6iH/cCAwEA AaOCArQwggKwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfZipGNjcZdx8fXNsQhjX /WqLSj8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzBrBgNVHREEZDBighQqLmhycy1yb3NlbmdhcnRlbi5kZYIbKi5vYmVy c2NodWxlLXJvc2VuZ2FydGVuLmRlghJocnMtcm9zZW5nYXJ0ZW4uZGWCGW9iZXJz Y2h1bGUtcm9zZW5nYXJ0ZW4uZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBep3P531bA57U2SH3QSeAyepGa DIShEhKEGHWWgXFFWAAAAXDfujZbAAAEAwBGMEQCIEH8JNIu/nb8sjSk5xl6imPG WSZuCleVu6zh/0OOaVkRAiBeZGxN3zPaJMip6P87Zy+ARUiAdGQD4XL/OPtk62k8 iAB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcN+6NkYAAAQD AEcwRQIhANz5dkfyBBuaLp76/2K3lHZfLcMWgNGFnBBo+d/4pNLSAiAOllkZ80MX RLKESPCLmEA7W56cx/XgSBGz1EMZYfTicDANBgkqhkiG9w0BAQsFAAOCAQEAHzFs fl4WVozTGp5S0tTApvPUx7OAxOOe4IyD3rBjz9Y32Nwe4rA3zqMW74Tx3BauuouK xShygvaU6roB6Vi+xmoui4yhKed17iYrvY4sf+citp8DxwDKF9RNVVVqakOf2PX5 BRokVZFdgxE9XYGz+t14tf/LdFFWxvDQvUPerz1Sre8vt7Yc+cTx3YHZHw0Pzl2Y /OisDoO/mBrPsx8o6hC1xiMXlBPQB6I4V2ERV29Q1aTEri0sLkoNPBC2LhOMv70x aXaMd4mdlZ4berovHqBGAZQczg5RGp31tq6Dzm1YcQYn12FG2yrq/PW69Pz702Fx zSjLPlDkrCBhabOPlA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/nBck+g/u74Vf1nE6U MKO97CVFeqkqPjYKxpRYS2P7MgmhrTaLxqiFWmWE6XH/BXb8xw66CAyTui+pt9Gr ltkkQ80IQwALC5NxjP4kQ42nao+Bd4rdR120RmhOcwauBgLa+LVFTVinytQFKIO9 hRK5y+EhnD5OtN8g2x7ry84lL60+q2eyC7Th5MZAS+OEj7R++EjZg7UphLSFvjfQ ocPQsbIGLC19ZnIcrcIWAK3OJizB3vRUDYYowurnpAEHQ1X9FdAJOspso8WYts6r xtwlMvTcLrRw3xMCmfOcqGDrqBwwpng/+3nJDE219oSInrB3L/QrG/Z2kYGFTqIf 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289267666358519585346512706242850436300662 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 18:44:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 18:44:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hrs-rosengarten.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24087798453781329277399779642101894421535065111434413575265954441071185992036571694182601330504192889239924725511074613897275194675929629152351757770334591177136674922361645053647418199193210353899967326658489445592721956915686821480892703178868198666551997063704063310246128933229421532084823356773817673288326220364145649043071623190948532643272935146431554932346648985642731369134837321703351122748938575558293551200386212406621562066580848718868225889517721456414410521323105453393441208971337051808451303664075988173873908680404186142360918394475877500346117111975592100041629467787603685259917455042024506007543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d98a918d8dc65dc7c7d736c4218d7fd6a8b4a3f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrs-rosengarten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberschule-rosengarten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrs-rosengarten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberschule-rosengarten.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170dfba365b0000040300463044022041fc24d22efe76fcb234a4e7197a8a63c659266e0a5795bbace1ff438e69591102205e646c4ddf33da24c8a9e8ff3b672f80454880746403e172ff38fb64eb693c88007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170dfba36460000040300473045022100dcf97647f2041b9a2e9efaff62b794765f2dc31680d1859c1068f9dff8a4d2d202200e965919f3431744b28448f08b98403b5b9e9cc7f5e04811b3d4431961f4e270 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001f316c7e5e16568cd31a9e52d2d4c0a6f3d4c7b380c4e39ee08c83deb063cfd637d8dc1ee2b037cea316ef84f1dc16aeba8b8ac5287282f694eaba01e958bec66a2e8b8ca129e775ee262bbd8e2c7fe722b69f03c700ca17d44d55556a6a439fd8f5f9051a2455915d83113d5d81b3fadd78b5ffcb745156c6f0d0bd43deaf3d52adef2fb7b61cf9c4f1dd81d91f0d0fce5d98fce8ac0e83bf981acfb31f28ea10b5c623179413d007a238576111576f50d5a4c4ae2d2c2e4a0d3c10b62e138cbfbd3169768c77899d959e1b7aba2f1ea04601941cce0e511a9df5b6ae83ce6d58710627d76146db2aeafcf5baf4fcfbd36171cd28cb3e50e4ac206169b38f94