www.menne-ks.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:7a:1b:5d:f9:c5:1d:07:1e:0d:6c:3f:63:fa:36:31:20:11 was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.menne-ks.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7a:1b:5d:f9:c5:1d:07:1e:0d:6c:3f:63:fa:36:31:20:11
Serial Number (int): 128663111801545698650953626336239052464145
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: b4:a3:24:71:a7:c2:d0:de:f2:e1:a5:40:9b:3b:3e:27:0a:cb:cd:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:26:15:ca:39:94:a5:cb:be:78:cc:25:55:b1:dc:f3:e9:7e:6a:f4
Fingerprint (sha256): 33:b4:6f:81:c6:1f:16:14:e4:6b:e4:74:ca:24:73:1d:df:49:3d:e1:fd:eb:a0:fb:ae:6b:92:29:a7:60:1d:74

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on www.menne-ks.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.menne-ks.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAXobXfnFHQceDWw/Y/o2MSARMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAxMDExNDQyMDBaFw0x NjAzMzExNDQyMDBaMBoxGDAWBgNVBAMTD3d3dy5tZW5uZS1rcy5kZTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALAhWvH5LzocKK2nGbsVex978SKTfNhg PyBj8KMHNoJVTDlCkYGVCIvLFrzPwlKVJOQxRtmf5ghRUvYkMhqVXSBIeRXG58AZ aYKWrokcJpL8R1i0RCWt0qMHMK4QtT3gI/kzmgBtML3Viobu9mUMGasLvja6vxnA 5Hwn5+SzEQC9QMHjUWlm5oSGNgyMH+26okTU/8OfRc00lC0gcAu6Ix7wQ8Tbr+xF dWz6FTviu9ogrk+j/rioXvAjjRUsx8BPx8B425gDXAUuOxRf3MkkntUpY3K7h3lC m4LckAw2QWRad+i2ib8HD39+7qkgPiQzrct+VeapdolHDkknrs6ExEzA98nGYFp7 XjyywmlHeltnZKxirwhCAemR/OZho1IbZjHDe2yzcQ0nqrqSLvGYAYrL30mqyJT0 lVk2hZcEQKwfJIqzcnMtwIfBdDV/JDXU6z6P8gnrMH1xlCefKPaZvuB9PUMNWwbX xqcTH54cDR6XJkY9WW9vzSOMMXNDGPGs2J/yRmRH2JfrssgnOTL3DhnLnuC80d3X IjmLw/3JjrCYLR7wL6W98D02b31ahsdtY2ZwodgaCJnoJUcGBeF78QjGP9qgYCC+ wReHjX4l+C31ndw522EZaP/6mJuARYCCHr4LmNmc/i8isbndNVW0h70Ll/bvVQwC Sc70BTLR+fVxAgMBAAGjggIQMIICDDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLSj JHGnwtDe8uGlQJs7PicKy81bMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgxLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14MS5sZXRzZW5jcnlwdC5vcmcvMBoGA1UdEQQTMBGCD3d3dy5tZW5uZS1rcy5k ZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0 aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5 cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQA9xygdEW38XcuT gDdXQeNGmzUSwXd1S6vAcVFNA/2WtV3FCJ+krYZrSfxIdwJW/QuY6031QE+Hatru XLieijUcBb0lcfkvE/8AsxAviFOKmx3gGJrm7fMan3cyRBr1mJ8n73XjURzi1NHy fhnIRHHT48DaX3AHiCnTdWQKaxiYbL4TNxuck2G0nrfOwnj2wxXnwOVjakGWXPc3 TdKA28EqFHSwR9Kv7jNbalMvuvsyGfa/aJbhH9eQtJ5d0q7y8k1Tr2eukOO3WMuy oJmkaRqRJTDudv4Hc5BURwU7hTK/NCv4cP1I7sBYIt7GyM5lxoGfnDp6DO3Evozx +ZpfbMab -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsCFa8fkvOhworacZuxV7 H3vxIpN82GA/IGPwowc2glVMOUKRgZUIi8sWvM/CUpUk5DFG2Z/mCFFS9iQyGpVd IEh5FcbnwBlpgpauiRwmkvxHWLREJa3SowcwrhC1PeAj+TOaAG0wvdWKhu72ZQwZ qwu+Nrq/GcDkfCfn5LMRAL1AweNRaWbmhIY2DIwf7bqiRNT/w59FzTSULSBwC7oj HvBDxNuv7EV1bPoVO+K72iCuT6P+uKhe8CONFSzHwE/HwHjbmANcBS47FF/cySSe 1SljcruHeUKbgtyQDDZBZFp36LaJvwcPf37uqSA+JDOty35V5ql2iUcOSSeuzoTE TMD3ycZgWntePLLCaUd6W2dkrGKvCEIB6ZH85mGjUhtmMcN7bLNxDSequpIu8ZgB isvfSarIlPSVWTaFlwRArB8kirNycy3Ah8F0NX8kNdTrPo/yCeswfXGUJ58o9pm+ 4H09Qw1bBtfGpxMfnhwNHpcmRj1Zb2/NI4wxc0MY8azYn/JGZEfYl+uyyCc5MvcO Gcue4LzR3dciOYvD/cmOsJgtHvAvpb3wPTZvfVqGx21jZnCh2BoImeglRwYF4Xvx CMY/2qBgIL7BF4eNfiX4LfWd3DnbYRlo//qYm4BFgIIevguY2Zz+LyKxud01VbSH vQuX9u9VDAJJzvQFMtH59XECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 128663111801545698650953626336239052464145 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-01 14:42:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-31 14:42:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.menne-ks.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718548908967865283572796215549187705751165640825871488392649398578678752788950264119230880864108591159000434038797321467682930879317035927410753499478178926609420609148120498954110574329964337814275980765791750283023295404856765906943168495951329805402129368093374926479558329437529774742018676597226268812706385912418592596529538890573441356388537808380763899344474440116389833293763872592228439366687169090539276022419330802475378180201143134864975845069807811626848798149257329378521736561448556496589745754384937977696349581627464375991541152697821659773019167460904602676046905640787904625976948828885250276606389588550509149454590771530714784944333180366270156299881178295908652421481728024782807969210206384575527143224883511201703454877993485997939726027416453265823330346245525270047295868085530752711826490276448413671472808666511521222726783970587113483965303011295157207489629648686053404382977838454825347174071121456308617952751201531684926659721797052068089135945839341549725645820472153878802480480954164859601105350394323807437158683461210539395051990465132985117973868011654790228474872030391219837067887466726814213667902266991690933290117835007415345730851738592370327795661341140093275953342472500890441799562609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4a32471a7c2d0def2e1a5409b3b3e270acbcd5b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menne-ks.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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