rosamontis.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:1c:d4:f4:07:a1:b8:f0:b7:7f:83:fe:32:42:22:d6:eb:be was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

rosamontis.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1c:d4:f4:07:a1:b8:f0:b7:7f:83:fe:32:42:22:d6:eb:be
Serial Number (int): 96923255615876245927502757329573432978366
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: c1:f9:ba:0e:72:4d:85:94:42:da:6c:b4:df:b8:77:4c:60:7a:55:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:11:29:38:63:4c:fc:47:ae:62:27:34:a2:37:6b:26:1d:c6:e7:2c
Fingerprint (sha256): 14:77:0f:da:1b:94:3a:a7:0e:43:63:c8:1f:e4:4a:d2:75:b3:b6:94:b8:9b:c0:f5:59:92:f3:41:72:6f:1d:25

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on rosamontis.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: rosamontis.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISARzU9AehuPC3f4P+MkIi1uu+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDYxMTMyMDBaFw0x NjAzMDUxMTMyMDBaMBgxFjAUBgNVBAMTDXJvc2Ftb250aXMuZGUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC+RykpCWX/6FL81yiOQ2Dnw2dpVKK7Xf8A JczuBAQ+1w7/m1TnTPbX9BKub6ohG/tmrlGMGLd7pZCOuTgOv6N7fDYyH/HzVZsv 0yaVIpI003FcaLflODoWJyifoZJq/Ubt94NE8QTPyKk2Y1s6s1XAUEk17KENp9rZ Sbp9BrcZ0WkJt0H63q2mhKb6VwUAZyoV6m2tNsZtecfLjtf6ozdC/wsJnxFEXwUD gbLnWKL/Av67icTrgoc7p6Mh4ubzUbQvTUJULUJ61NBdecChUfLEtytTaeCoy1EX caY+7LrOf+phxMKweZHbpIsrN0vs1uu7VSKRLc6o0IAYw5VBh4gA4ZMuN2OKIcYX 4ShLjxdu/g+cK/JkDOlrccE9gNHX/KyDGbX0ZKO6Rp3EdWKeSOr4H6s0Jz8d0QmT XOInJ0GtGnYCuzHa91ORvUVehcUJbJMscwmmI993aVy2qO0ec0pYV/YryvqFmbEH 3z60PrA4e7vzhcIfYHKNdHrXYfHoSP3rkRGQvgx6bitC/UxbrLcZky7cLmBotzE9 WPxr/iW9tU91yAWZHuFuND8tJQfJIetctpV522bvNGzHo4jC1SGabIrmmGPG7S2K ygGGNb/CCq2Ed+NAuzO5fTJTVuDeQo3llzRO5zgqA0ooGEsEsh2h1kQUoNCdkPtL agCrt5UFqQIDAQABo4ICDjCCAgowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTB+boO ck2FlELabLTfuHdMYHpVjTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14 MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzAYBgNVHREEETAPgg1yb3NhbW9udGlzLmRlMIH+ BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAdwcpcAh/5JcV8UVGsa MRbKP7xEuevAvGvhfxNfdfpli0EkGcXcSgGX/YWOCCfIdI1tDAWPVALheCbHFvHx lTcQKsO/MQeMwXvuSzpBJF8GvG7B/Kv0K1dwNbjxQqnBjH2eYZ5DrThxKXPFNVbQ 1lTfJgzG9pJ2DPfPy+L8kDmpuq6r1MFsr5EtUskO/4+DkOijMO5dvKbVgJDbEJhL iUertRgYsIuXgTNWPK6V+9itsBhGK9qSUgsVDwhgtxNfSvb/ZoJ5PYZQx1o9eVVG M8gAVG66Uj71EejOFPCidDr/HowS1+nAwUtwa09Lc5NDp64Pe4J1Hs7rFnoNUga/ j0k= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvkcpKQll/+hS/NcojkNg 58NnaVSiu13/ACXM7gQEPtcO/5tU50z21/QSrm+qIRv7Zq5RjBi3e6WQjrk4Dr+j e3w2Mh/x81WbL9MmlSKSNNNxXGi35Tg6Ficon6GSav1G7feDRPEEz8ipNmNbOrNV wFBJNeyhDafa2Um6fQa3GdFpCbdB+t6tpoSm+lcFAGcqFeptrTbGbXnHy47X+qM3 Qv8LCZ8RRF8FA4Gy51ii/wL+u4nE64KHO6ejIeLm81G0L01CVC1CetTQXXnAoVHy xLcrU2ngqMtRF3GmPuy6zn/qYcTCsHmR26SLKzdL7Nbru1UikS3OqNCAGMOVQYeI AOGTLjdjiiHGF+EoS48Xbv4PnCvyZAzpa3HBPYDR1/ysgxm19GSjukadxHVinkjq +B+rNCc/HdEJk1ziJydBrRp2Arsx2vdTkb1FXoXFCWyTLHMJpiPfd2lctqjtHnNK WFf2K8r6hZmxB98+tD6wOHu784XCH2ByjXR612Hx6Ej965ERkL4Mem4rQv1MW6y3 GZMu3C5gaLcxPVj8a/4lvbVPdcgFmR7hbjQ/LSUHySHrXLaVedtm7zRsx6OIwtUh mmyK5phjxu0tisoBhjW/wgqthHfjQLszuX0yU1bg3kKN5Zc0Tuc4KgNKKBhLBLId odZEFKDQnZD7S2oAq7eVBakCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 96923255615876245927502757329573432978366 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-06 11:32:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-05 11:32:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosamontis.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776266398954596138294141008991685455179205242796647874625843135614382931787636755488875595148365494913814138361975573798648502824728176348508265610427217622216791846606324267535514174271263391112196812282303165446874485547046423737110501053749329250582191846555004486528194919421659002508094528738111480099979507751617578819001681669330716275507286675303131896243435089569733675802543538889088607612889190541165204594875740371311256823339671139468817687838403870624813290982576869843954545712410034905755491098019955088113393384009999862037119185020917949038533099504300989984910541014815403552861625082386974650195415017977291981720512709250000731074007471358488009754984018787158106755630139963043197255368837015395730348003725235956345268430896965493357936567612398315904535088282701215863908775079975104666704093494735429831956275389977684662718906904056107815974685921639377701216808189340142177711379896251116542669425411408710391880675437490644757882755866718337058194104130904918158471986158228670027648675836776615176488270562142705466415608107818786655017073855006098301572401567365437127467948964278236258676727330109600470927356360774511533958879623531237770123753962841004650654067024823742272238789233659732899149448617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c1f9ba0e724d859442da6cb4dfb8774c607a558d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosamontis.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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