vpn.ff-haag.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:7d:a2:f1:6e:86:fb:f0:76:f7:a2:91:96:ad:f4:c9:d7:d2 was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

vpn.ff-haag.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7d:a2:f1:6e:86:fb:f0:76:f7:a2:91:96:ad:f4:c9:d7:d2
Serial Number (int): 129864170317497219464478956094472868976594
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 32:0c:1b:7e:6a:9e:54:79:64:2a:59:e0:1f:95:a3:00:2f:35:a2:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:8f:b0:88:80:7e:8c:77:af:a7:05:6f:26:85:fb:32:76:e5:09:f7
Fingerprint (sha256): 88:83:a0:bc:26:b0:b3:0e:ae:79:15:10:48:43:e0:c2:c7:ce:8c:e6:fb:68:80:7f:a5:d2:63:22:80:4d:48:e6

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on vpn.ff-haag.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: vpn.ff-haag.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAX2i8W6G+/B296KRlq30ydfSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTExMzE1MDBaFw0x NjAzMTAxMzE1MDBaMBkxFzAVBgNVBAMTDnZwbi5mZi1oYWFnLmRlMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs58qHNk1WaCCyBaMtOt/bNAnJMKEl8J5 RmU84wAiUrDFAV8I+c+gVZwGavpFne6V7H1Zk/cpfO9e2qv0SK5ZpB4fhdxSYH71 LFjkxDpWQN4wGxezmONWLr3Sb4/ty9o6egxShc8zHuxf6j4SrHFlUpgh262LYbds BOItT++BE1tE3yhC9INJVUevJBLJ2NxGnHsiHhVzlyavPz4pb8Vc6RtH4Xrp49tY x9K/yUzGCgYJl5qbj1ntMFk9dgprT37lTR5XgQ9r3Yp4lsAX1PvFmbUETQb5Wccc ot0txiBc/6BlwJX7s9IwJX4aid63bQ8oeMrsqogk4ezbDZY5nmtCg0Vo6W46iSda YBoc+d4vYdgCJcTIZQ2HDqXTAVSOb4SRg/lW1TNjagLIsfcm6RRJQ0vnrKj7aLQh sdHBgaFU+du9Pjew2ZCxg36BoSNmC/t8MXI51ZN7/uj6fIieUgFG8B2LonKnhLIf E0duC08jjrRHne8PuK9rfm0s72PNNz22bZ9f8zwNfgJWbfUkw1xyXLTpaDa0lMbn UHRiLnGRRnNv6RrGVWJuPWFX2tbW0wKLLkbCHRqcOuVHySIWmz4lOT8WyM6FhCTg h/kGUTKqjX2V8MiHhC/mWjWnOXuWjyhTCkPJJFqmuNcSIfKCTMaKrJwxSJf800ZR /voOgnL4W08CAwEAAaOCAg8wggILMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMgwb fmqeVHlkKlngH5WjAC81ovcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgxLmxldHNlbmNyeXB0Lm9yZy8wGQYDVR0RBBIwEIIOdnBuLmZmLWhhYWcuZGUw gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5 IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0 Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAAUie0GR/EZU0T9BW y+0qY58XM3wGXZRftqD9c6iYVG7cPWc/oj9Ot8Og10UZmtlORTi44TS4hax52136 joFwWf0EcOB6vJandpm/0PdqD/+vZ2yNzIqynqKQgKdngVl7mBQJjBWQAOf7vQNZ 0OJQ8YxwOs0K4GAs+bl6AzIxaGwkZ7MgLCmBXzowqa99VyK9dLQA3Zl5VR+h9pWc 7iOhS9EneIN3ZIo4X0jQkl3EitpDZqTW94cJW5S/8FI1fmU1LRdVPk51J+p5J/Ui HB83T1yFehy7w5B0pz34MjUdOYia4NvIrjHgwWt9w5pf762dPTzt7WWAW3rB13kz v3LI9Q== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs58qHNk1WaCCyBaMtOt/ bNAnJMKEl8J5RmU84wAiUrDFAV8I+c+gVZwGavpFne6V7H1Zk/cpfO9e2qv0SK5Z pB4fhdxSYH71LFjkxDpWQN4wGxezmONWLr3Sb4/ty9o6egxShc8zHuxf6j4SrHFl Upgh262LYbdsBOItT++BE1tE3yhC9INJVUevJBLJ2NxGnHsiHhVzlyavPz4pb8Vc 6RtH4Xrp49tYx9K/yUzGCgYJl5qbj1ntMFk9dgprT37lTR5XgQ9r3Yp4lsAX1PvF mbUETQb5Wcccot0txiBc/6BlwJX7s9IwJX4aid63bQ8oeMrsqogk4ezbDZY5nmtC g0Vo6W46iSdaYBoc+d4vYdgCJcTIZQ2HDqXTAVSOb4SRg/lW1TNjagLIsfcm6RRJ Q0vnrKj7aLQhsdHBgaFU+du9Pjew2ZCxg36BoSNmC/t8MXI51ZN7/uj6fIieUgFG 8B2LonKnhLIfE0duC08jjrRHne8PuK9rfm0s72PNNz22bZ9f8zwNfgJWbfUkw1xy XLTpaDa0lMbnUHRiLnGRRnNv6RrGVWJuPWFX2tbW0wKLLkbCHRqcOuVHySIWmz4l OT8WyM6FhCTgh/kGUTKqjX2V8MiHhC/mWjWnOXuWjyhTCkPJJFqmuNcSIfKCTMaK rJwxSJf800ZR/voOgnL4W08CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 129864170317497219464478956094472868976594 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-11 13:15:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 13:15:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.ff-haag.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732792751141422033012379902548032331105590259492627079229644627568203888184734920040366378760878309121650366532326478221941551283884030815585126076938096529119585744877456789445833686902332022536011703940702356653516900020344727760316843177243438627266245226257940018905682019405050397510871804450739225195227764537683621906498014788973314132128411636816592169624448927862309795208788205256055636427406217852617283435429765840012922672529679010905078872529512144737233084129685335310713005431285619778557324105061366422354756471154228346071367275471163041209275139967016917480976420488109295325250634535582053095253104339788244244844722568274781226694397175316089608302755307508174076007229225225617335864499451799821624509353526692493279572089417264613556526818448097832453821303076620584709380820557332491873464162489672643367112967225813166967186120669164399037466822571411082905242674837019287691418183281294062775205940469773118824891588636466472258525268612929599188089356017701862805041716600542321214927143276469765040947678998075286939549285914403516033457823023157914401060217704388546157826433615847074881253947393301919226480798625166870303461926952437983943365969261247918415417556463277715699376733722923455563475475279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 320c1b7e6a9e5479642a59e01f95a3002f35a2f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.ff-haag.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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