xrstf.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:71:7f:97:44:51:48:38:17:e4:9f:3f:37:0d:52:66:a7:a5 was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

xrstf.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:71:7f:97:44:51:48:38:17:e4:9f:3f:37:0d:52:66:a7:a5
Serial Number (int): 125733790771760301038169718887309438789541
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: f0:1d:d3:ff:e8:b3:24:c4:43:d1:22:57:aa:0b:6a:58:6b:8c:ad:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:5a:db:fb:49:d5:75:cb:a4:e1:1c:6d:2b:18:64:8c:4a:09:f0:e5
Fingerprint (sha256): 73:52:b1:93:e3:4b:b0:cc:e5:2f:44:8a:c5:0e:0f:28:74:e5:29:a6:35:cb:2d:e8:7d:ec:eb:f9:8c:fc:18:0a

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on xrstf.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: xrstf.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAXF/l0RRSDgX5J8/Nw1SZqelMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDMyMDI3MDBaFw0x NjAzMDIyMDI3MDBaMBMxETAPBgNVBAMTCHhyc3RmLmRlMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAl5zJhe3AkroXzS5+XHU0XCGDTGLQGEost1KnTQyf AJqLeVnTL5CH9Rgb/PL5BMen+JGJoN36cTMAhaIVVvRPy/1RQqiIz9X6VhiO4yKh ewJxvbUkQ5ETVSOEB9Tu40W1gDWTj5NLw6crwysl5kXYTdtUCiYRvczflQlPOD79 T3HjASDmCAnsaiVuRfx91qInQRhmggc0a2mrOEUTMJbV2iiPUl9dQhE1WBj0cXPc TR1ayoB5WB81zG0N1RjGLNrfBmcLfITF4oXiXs3BPu10XF5hDYo3MlAX0pnpposS M6evIsG4K/CFytiP98vJ6Rr5NteCFfj04ELC/u8VbpYL0MlJgMSvNgU+fJY5xgGK x0ALDJlYwUDKu0bc7M38UIe2/u5yXSCqXH1bb5XyjXR329QzDP7YDcTLpHFvyxzR ImxPIbKFXKf9ixv155FEMZrvstuxZIUJjJxTwdczT7do3XWieRwlCDY/eMK6Rats TMW5D2RZ7NYlOFZDo4pH4IeS9WoSBu9CxUT+EFTx0ttmuziikVyJMewm0+vk4PQC /OVjSwQc8cKjhPEnR3DKN+kzldRrt7sZNerJYyYVVk6Q8dCPaUJfjbkxHTXyk/gb tQylFhbah5jSnYGunLhxIcbLDgWHkYENMkPE9jO11j/EUgEL5QckWiUDMc1hFsjD B38CAwEAAaOCAgkwggIFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU8B3T/+izJMRD 0SJXqgtqWGuMrRowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYI KwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDEubGV0 c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgxLmxl dHNlbmNyeXB0Lm9yZy8wEwYDVR0RBAwwCoIIeHJzdGYuZGUwgf4GA1UdIASB9jCB 8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENl cnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFy dGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRl IFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0 b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAdFkLuKYHNhuGsQSQR2gtLnK2fxXMT/Gk odVwtT8GmLvpQz48CG1fG14eYSmN45hQ0zxTEiqRCJaDO7Xr+y6jEcPuUevWXXtC 1kNfm+KSAU14vZfRY2uO17jr4bq0bllaK9kQiaqArpObCoDwI1LWPuLWDHpw7HKF CUuPcnSS+7dKk0IJCiLL+6aAhL9QxuaeiC8bY6MVfb/C7YqiI80Nok3u1yaGhLIj iQ0NiGe81vGpP3NWcYJqNXp4kXL0r/W+hQCyK6CH4dDp6D8IsQog0O9W/TaDz5CU LQ9Tbp3vKLghIeDYRPpX1cecgATFSJc2zEkrkajFeYY5t5eV2RNujg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl5zJhe3AkroXzS5+XHU0 XCGDTGLQGEost1KnTQyfAJqLeVnTL5CH9Rgb/PL5BMen+JGJoN36cTMAhaIVVvRP y/1RQqiIz9X6VhiO4yKhewJxvbUkQ5ETVSOEB9Tu40W1gDWTj5NLw6crwysl5kXY TdtUCiYRvczflQlPOD79T3HjASDmCAnsaiVuRfx91qInQRhmggc0a2mrOEUTMJbV 2iiPUl9dQhE1WBj0cXPcTR1ayoB5WB81zG0N1RjGLNrfBmcLfITF4oXiXs3BPu10 XF5hDYo3MlAX0pnpposSM6evIsG4K/CFytiP98vJ6Rr5NteCFfj04ELC/u8VbpYL 0MlJgMSvNgU+fJY5xgGKx0ALDJlYwUDKu0bc7M38UIe2/u5yXSCqXH1bb5XyjXR3 29QzDP7YDcTLpHFvyxzRImxPIbKFXKf9ixv155FEMZrvstuxZIUJjJxTwdczT7do 3XWieRwlCDY/eMK6RatsTMW5D2RZ7NYlOFZDo4pH4IeS9WoSBu9CxUT+EFTx0ttm uziikVyJMewm0+vk4PQC/OVjSwQc8cKjhPEnR3DKN+kzldRrt7sZNerJYyYVVk6Q 8dCPaUJfjbkxHTXyk/gbtQylFhbah5jSnYGunLhxIcbLDgWHkYENMkPE9jO11j/E UgEL5QckWiUDMc1hFsjDB38CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 125733790771760301038169718887309438789541 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-03 20:27:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-02 20:27:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xrstf.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618524832277949646671844504801475131871351945073960242490375135912324961329663544281818283278801293640748334222119166060431916604575776493524987006530599936368510376400440590646547339829521265508651376573757580025870288183195770506428551268875073361548328256732382746043036271959894316502748775491154934111163178547854531001279857774695328062312671721528891983885255715765342674583355011332020020816607018385566082978220878087379772056499723865374191741767521191112141841963666196225046728996853753226956178310786657233610625089161624754263451864617315062196357180219241784021640555970693925057859714794704750197231238406808881675669814314710681656662254129557398969496952716282201014815743387504139648398490841712024094235400653483462469356438754558234289078082007096469576065624517335586664458646533779178676733387686246483217175199557387099294821500105933307091055441110940536917356209550102290391226735517913293530013952775697066780326282849958133043183704854679560753699706822027058179725770110684411771374622797980119069759627843000429378494927959876208197985280855809566305937946307160713407640367559292577954530945166200991678401977722012259840991521509601614837429145602951756073111335526506133659973443986433171221991589759 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f01dd3ffe8b324c443d12257aa0b6a586b8cad1a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrstf.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0074590bb8a607361b86b1049047682d2e72b67f15cc4ff1a4a1d570b53f0698bbe9433e3c086d5f1b5e1e61298de39850d33c53122a910896833bb5ebfb2ea311c3ee51ebd65d7b42d6435f9be292014d78bd97d1636b8ed7b8ebe1bab46e595a2bd91089aa80ae939b0a80f02352d63ee2d60c7a70ec7285094b8f727492fbb74a9342090a22cbfba68084bf50c6e69e882f1b63a3157dbfc2ed8aa223cd0da24deed7268684b223890d0d8867bcd6f1a93f735671826a357a789172f4aff5be8500b22ba087e1d0e9e83f08b10a20d0ef56fd3683cf90942d0f536e9def28b82121e0d844fa57d5c79c8004c5489736cc492b91a8c5798639b79795d9136e8e