mc.kuratan.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:09:cc:63:84:a7:f4:11:b4:46:a4:fb:8b:07:57:89:55:d0 was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

mc.kuratan.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:09:cc:63:84:a7:f4:11:b4:46:a4:fb:8b:07:57:89:55:d0
Serial Number (int): 90446506473162517171168981363677016446416
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 72:5b:ac:1d:93:53:18:7f:f9:d6:41:3c:dd:ca:31:c0:44:07:d2:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:ae:73:cb:f6:76:6a:1b:dd:25:6b:d9:c6:a9:ed:15:69:cf:5d:9c
Fingerprint (sha256): 11:69:66:43:7f:7f:23:32:a9:8d:ae:d7:cc:6e:a8:9d:4a:35:7d:f4:66:93:ab:e2:65:6e:91:2e:68:e6:3a:17

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on mc.kuratan.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: mc.kuratan.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISAQnMY4Sn9BG0RqT7iwdXiVXQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTkyMzA4MDBaFw0x NjAzMTgyMzA4MDBaMBgxFjAUBgNVBAMTDW1jLmt1cmF0YW4uZGUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC4J0V7/76Z7719svx/S6YL5QMsWfPMRzuU 1bA7CahxdUoprz7jln1JMXN+5jzj7ApglpxD+Lx1eFIWRj736U3Abq7h1ca1CblE GXzEn+TJ+FeUNFxvHVuwiBuuAcXwSALMos7Q48uZSb1QMd0r83rOAdApbiUYgLKU 8eqypqIqv/diZ/SzhlIc8ZT1BIxpeX/A1dhoTO8F5chDlLRgnp/M1kjjhEIvA4Fs L3Su2Ga5wF08+su12HLyzWuWeIT/TL0155LrbxwXSsGJ73GKlVbT2cY+oXlEf+nD g8W/dd4TlThcATp3nwmlKbNpYshFWGyaZKk8KiMebEfSHJqnUS+kSjSB+/LzJF92 DK4kxXCtB2Y2TQ3M9SvsyrI84yF7exPIrT4GLFj5YN7PEiiqtFNirQBEncQrURwa HY2W3ZG2hqaHMwDKk14QtEET4jeaj0Z9PZXwik1RI2iN52+SG4kvKSijZg7ZdWHO Ky7Wu7DZPz2hEKE0sU5RfR7L28G1WLhCx3KFjMRKb+KXL81wGOBzX1hKBHTS6aRc QZ+ea7YJcRgsqjUiO7T1L7ky5FuB5+NV0Xtrnhl2Y9o954OZsQzDakWZch0498IY EGqzr+G4rVV5KfvvwSY/Hl5xOBdMHQSjEEzpX30GPlrDZDE2RuEhiOhkoaun9z97 HapqIbzhOQIDAQABo4ICDjCCAgowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRyW6wd k1MYf/nWQTzdyjHARAfS8DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14 MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzAYBgNVHREEETAPgg1tYy5rdXJhdGFuLmRlMIH+ BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAK1/nsENUPE1T7+w+pB J5o4F16RsYBYUldaFvynLlhhuV9gJkJQJD+Zq1wMbRE/N9zqpwYuG7OOg54XpxMk pt4/x9VbzppxndEdklkhydm2CCu+Fc1mSBDQM6FYevUk9Aong9cjmtmO8orVVHgR +LQaobXiGlc9v0VdkomTus5EgiLBRiphWfuaSFtRfcfBpoYIa6JZoH7uKjSsxudz 9axJWvchw0w0/2RvOSps9U1ymXWadBzbZNIzYlVuaYGPicfprnpAhYmlrq9TtC2V QLnqhrKE05i6u11HwaKAna9Antku3+uPeTQ+2lJiTiHaYI7PUFV1gyoiSHkGU5uX Zs8= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuCdFe/++me+9fbL8f0um C+UDLFnzzEc7lNWwOwmocXVKKa8+45Z9STFzfuY84+wKYJacQ/i8dXhSFkY+9+lN wG6u4dXGtQm5RBl8xJ/kyfhXlDRcbx1bsIgbrgHF8EgCzKLO0OPLmUm9UDHdK/N6 zgHQKW4lGICylPHqsqaiKr/3Ymf0s4ZSHPGU9QSMaXl/wNXYaEzvBeXIQ5S0YJ6f zNZI44RCLwOBbC90rthmucBdPPrLtdhy8s1rlniE/0y9NeeS628cF0rBie9xipVW 09nGPqF5RH/pw4PFv3XeE5U4XAE6d58JpSmzaWLIRVhsmmSpPCojHmxH0hyap1Ev pEo0gfvy8yRfdgyuJMVwrQdmNk0NzPUr7MqyPOMhe3sTyK0+BixY+WDezxIoqrRT Yq0ARJ3EK1EcGh2Nlt2RtoamhzMAypNeELRBE+I3mo9GfT2V8IpNUSNojedvkhuJ Lykoo2YO2XVhzisu1ruw2T89oRChNLFOUX0ey9vBtVi4QsdyhYzESm/ily/NcBjg c19YSgR00umkXEGfnmu2CXEYLKo1Iju09S+5MuRbgefjVdF7a54ZdmPaPeeDmbEM w2pFmXIdOPfCGBBqs6/huK1VeSn778EmPx5ecTgXTB0EoxBM6V99Bj5aw2QxNkbh IYjoZKGrp/c/ex2qaiG84TkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 90446506473162517171168981363677016446416 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-19 23:08:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-18 23:08:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mc.kuratan.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751280342223550945121689662817060294487474374062912150554274415645845844399102417773800766696465003642744492194154803797088110141380977935090828611880847947417894861754083271826995791394601480504050408508397779284230932831183588107137147723210344611307328230589171533168002244157356735780679365532755472029101387995814407667071187555896110504407152867301889146247348602815392498021032376895082137098116282658342620932416637411286862622245574185055613017656561500100621076542112917286894668068688340088290010820493978514858838857948140029645760572350216904331591248063637768838015171961002845803965389265387012648876734457444800214047147378944010608369482395016256337588636141567998738674149058712021042817918625126425786751778625339029255771703062086218137280641850285694293982005739288585934994006461270234053009196932773718351938715491308705747840911072402838510639351397470849310138265429648214694014447603240786732096036670955126388710754436137085497723882633812185375129250154544697067861846874735147243458924772904590377219149253480426121009102396665787710110550524656421401484225388407398095830609392083709173702153618341590691767009163362267576417695449411447511848708923179042314054395036973261472736001163079176041938084153 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 725bac1d9353187ff9d6413cddca31c04407d2f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.kuratan.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0002b5fe7b043543c4d53efec3ea41279a38175e91b1805852575a16fca72e5861b95f60264250243f99ab5c0c6d113f37dceaa7062e1bb38e839e17a71324a6de3fc7d55bce9a719dd11d925921c9d9b6082bbe15cd664810d033a1587af524f40a2783d7239ad98ef28ad5547811f8b41aa1b5e21a573dbf455d928993bace448222c1462a6159fb9a485b517dc7c1a686086ba259a07eee2a34acc6e773f5ac495af721c34c34ff646f392a6cf54d7299759a741cdb64d23362556e69818f89c7e9ae7a408589a5aeaf53b42d9540b9ea86b284d398babb5d47c1a2809daf409ed92edfeb8f79343eda52624e21da608ecf505575832a22487906539b9766cf