www.graefe.net

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:17:5c:0c:dd:a3:90:43:bc:bf:7a:44:30:36:fb:ba:ae:7b was issued on by Let's Encrypt .

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.graefe.net

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:17:5c:0c:dd:a3:90:43:bc:bf:7a:44:30:36:fb:ba:ae:7b
Serial Number (int): 95061136149487706612145683796461922987643
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 42:d0:b5:db:5f:50:8f:29:f2:94:b3:6e:95:6b:46:d6:7b:f9:ad:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:1d:09:5a:e8:2c:f5:ac:04:c0:75:2a:c4:f5:21:95:54:89:19:ee
Fingerprint (sha256): 02:50:03:4d:4c:43:87:55:ae:7d:09:fd:cb:c2:35:0c:7e:45:54:9b:ea:73:d1:8c:cc:fc:ca:f9:dd:44:b7:6d

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on www.graefe.net
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

old.graefe.net
www.graefe.net
graefe.net
relaunch.graefe.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISARdcDN2jkEO8v3pEMDb7uq57MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMjUxMTQyMDBaFw0x NjA1MjUxMTQyMDBaMBkxFzAVBgNVBAMTDnd3dy5ncmFlZmUubmV0MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxf/lBlSiExpuIq6LrPe8qOVDJNunPO19 xpygJCOEGrSsw0buRVUIv5jlzrIyYuWhGJZzr1JcbFEjn9Zf4GTUr81jsUJerwnz OjGYLnlq01LDTpOMvii7SQRFjemKo82nVr7ch5OVgqASgbjgDvugbyH0l6ZnfGGR BGZiYo93626ZWJOVAFubZAPohfmW8aaHiYMSdRa9XsO/0zUZ8OGBCMLHqaf5jcyC 7cHJRqVnxbtftV6tq2ivmVunzaWPdajlhOD9SomB625a3uQGst+fdKsyUW3UGG4d O1oL7YXAG3nAYZlm9trYUoC3kcIRivMg2c7lVxfaZDDaD9UivE668xYTdJqaX4XE fl7UhmrDJnlddwUYNeBETDhq8jOPieVvwEMhgvjBrbFrfuObj92tO4CdLDB41QCy 1pwh+RAciD6/PMuolb0yc1isPsTuCWzgRd0MSh9YJnLDCf/RWCheLgb7580P2EUG BfBknNvTJXf19EIP58GOGU5fH1OhJOWE90Abq8W6svoKNheVKq1CbaAmFlwR31Dg jMU2EmO+pErW/ojBKmIl13X+EZtd7DdqD7nM73on90FARUjlW+4tbMnoEtSmqfRV YK6rnhtK0ReivA13DOT100NbPeamZYyB15MuhIs30++zIYFAHngoGncjGenx3VbD SkXnQ6NglO0CAwEAAaOCAkAwggI8MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQtC1 219QjynylLNulWtG1nv5rYswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgxLmxldHNlbmNyeXB0Lm9yZy8wSgYDVR0RBEMwQYIOb2xkLmdyYWVmZS5uZXSC Dnd3dy5ncmFlZmUubmV0ggpncmFlZmUubmV0ghNyZWxhdW5jaC5ncmFlZmUubmV0 MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw dC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABy7jGrcZwq03uEx tzTtLGjetpNPug/cLHTMb2jWDje0Qs8DQjYoJh4FUWXOon/Pd2zb7fJk8wV05rUl yzQ1OK2wt3xZe8SU2VQ2LU+nT78WX//AOXl8CkIWTqt1wLJXpbNeqfQrRniKvldD grx7l9J0tDmxv+vi7zVETtxCgr0Z7rU9H3r6ZXBpnhOc9nqdZUy1uj0BhLFi0mUS Y6NxK3DRN7Z1zMEbW8qDSy1YZohk7viHzFIzzKKvqrD28NYfuHbQspRzd+vGl4BR 8J2uORbSnnf8ez3ASYcRw5kBAyI0nfiphUJc4SWU49Cnt75S3z4e9EbHeSvJP/1G 2iIbixw= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxf/lBlSiExpuIq6LrPe8 qOVDJNunPO19xpygJCOEGrSsw0buRVUIv5jlzrIyYuWhGJZzr1JcbFEjn9Zf4GTU r81jsUJerwnzOjGYLnlq01LDTpOMvii7SQRFjemKo82nVr7ch5OVgqASgbjgDvug byH0l6ZnfGGRBGZiYo93626ZWJOVAFubZAPohfmW8aaHiYMSdRa9XsO/0zUZ8OGB CMLHqaf5jcyC7cHJRqVnxbtftV6tq2ivmVunzaWPdajlhOD9SomB625a3uQGst+f dKsyUW3UGG4dO1oL7YXAG3nAYZlm9trYUoC3kcIRivMg2c7lVxfaZDDaD9UivE66 8xYTdJqaX4XEfl7UhmrDJnlddwUYNeBETDhq8jOPieVvwEMhgvjBrbFrfuObj92t O4CdLDB41QCy1pwh+RAciD6/PMuolb0yc1isPsTuCWzgRd0MSh9YJnLDCf/RWChe Lgb7580P2EUGBfBknNvTJXf19EIP58GOGU5fH1OhJOWE90Abq8W6svoKNheVKq1C baAmFlwR31DgjMU2EmO+pErW/ojBKmIl13X+EZtd7DdqD7nM73on90FARUjlW+4t bMnoEtSmqfRVYK6rnhtK0ReivA13DOT100NbPeamZYyB15MuhIs30++zIYFAHngo GncjGenx3VbDSkXnQ6NglO0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 95061136149487706612145683796461922987643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-25 11:42:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-25 11:42:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.graefe.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807767846245806007850848158598321275375133046325165495009951782184897799532973045133477925193742357820331319836322760285917684737396088039615110036503729757568428947642786732325841955234080047518096581723039543000661022330644083468092182292442245962486636266578391483508784956264050847234936110076047492411085252626277607742583418914489535935222733501777653041816070202715337089445971724501278091261673778805206753037110548944544001556466368760877504358944864554263423717159494743410382865770489230826618390028152746670799050341427945652383810822609844596567587420683517010745965137196594921370220392701762893164470520965279847887345000498947340501401839360084503125343348385762534457427410508238176645639232865963464698319123406645518587196306757362300413127186087137690819098334012050611355615768062184967208175616220795254821924343353637470401748702109691524868256662383212293926467673571127954293187575739180230689794182878909176924519926820613623103839357638315672518638760663008672429667255129089219027207022750700789624436602038182609017051367975153093623279561143398938318645754857224491025267827161473805243988478378420395236330640255807885091510292071485361066376508722020232276992956942717119031060757403695519720687047917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42d0b5db5f508f29f294b36e956b46d67bf9ad8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.graefe.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graefe.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graefe.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.graefe.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001cbb8c6adc670ab4dee131b734ed2c68deb6934fba0fdc2c74cc6f68d60e37b442cf03423628261e055165cea27fcf776cdbedf264f30574e6b525cb343538adb0b77c597bc494d954362d4fa74fbf165fffc039797c0a42164eab75c0b257a5b35ea9f42b46788abe574382bc7b97d274b439b1bfebe2ef35444edc4282bd19eeb53d1f7afa6570699e139cf67a9d654cb5ba3d0184b162d2651263a3712b70d137b675ccc11b5bca834b2d58668864eef887cc5233cca2afaab0f6f0d61fb876d0b2947377ebc6978051f09dae3916d29e77fc7b3dc0498711c399010322349df8a985425ce12594e3d0a7b7be52df3e1ef446c7792bc93ffd46da221b8b1c