sebastian-niegel.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:8d:0d:d0:f3:4a:46:6c:e4:a0:d4:17:3b:ae:e0:f4:a5:f1 was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

sebastian-niegel.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8d:0d:d0:f3:4a:46:6c:e4:a0:d4:17:3b:ae:e0:f4:a5:f1
Serial Number (int): 135110464563814562453208009416853446501873
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: cf:32:fe:71:6f:44:0f:88:8d:fd:8d:e8:e7:71:8a:0c:ba:bb:30:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:aa:da:84:1c:87:d0:ff:76:05:ed:e6:da:9a:26:a1:d0:8d:49:8b
Fingerprint (sha256): f1:f6:36:2f:df:20:e3:e0:34:a8:63:11:8e:67:8d:ce:da:ad:0d:e8:74:be:61:19:6a:ed:c8:a0:2e:3a:bc:77

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on sebastian-niegel.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

sebastian-niegel.de
www.sebastian-niegel.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgISAY0N0PNKRmzkoNQXO67g9KXxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTQwNTU4MDBaFw0x NjAzMTMwNTU4MDBaMB4xHDAaBgNVBAMTE3NlYmFzdGlhbi1uaWVnZWwuZGUwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz9wHXEdtpD0TnWFYMjfuN3+OA BIfmG1O4KjDZkP2sUAxcphtBsq3ORb4X9skRngyl4xFj+MpCAm5e1XygxzBZuqvz hTYgS+4/6jrlz1ASi58db1ZKOjcXJUdugI0WuET9Ksz5eyb/6di+P5idUHaeu4P5 SqawCBe/VqLvhfH64S1hnrt5SP79KNgmLj3CxtIIYgfkk9Z01s5r+QRgqnfhAIUV C3wB/dwkYNmH8FH0Uph0XJZ8lFpg6q4ZaWmwKd/csTuqyDWffMZZR4W/t/6ssvCw w/MLUKjILIhCPtlSwLYYqVzCz45J/vBjbazLTb78I5QhHTNuRnSJw9d6mcymntHc R2tuViI4TpasdHx9oJJstsGg/FTNJ37kdM7yTqiOYG98DIQ3ZxrKyDAoCp7O1QiH wEvv08PSAhsIDonuauTSa9mB9TC52jcgCnU/nhQSc6nArb/aTfgmcT6ebsw48dkf 5ngyzbxZTDb4ed6UnosT01RO97rcl4chVFBFebeFbf6hkvo9HKfyzzBjfl42aZ1q Acf6gmXvrWwsAfmd/qu1IE0dwr1kmc6qLnWJWSDpptH3ZM3e/EwAEfe6DpPw2kSj Xo7eaqg2pA8qXarI6sgErT/CJexw8RGjmxYnvj3cDvGpHpnBd4MiGIizEseYrwjS dbaegNeT/66WbHBLPQIDAQABo4ICLTCCAikwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTPMv5xb0QPiI39jejncYoMurswKzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3Nw LmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzA3BgNVHREEMDAughNzZWJhc3RpYW4t bmllZ2VsLmRlghd3d3cuc2ViYXN0aWFuLW5pZWdlbC5kZTCB/gYDVR0gBIH2MIHz MAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2Vy dGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0 aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUg UG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRv cnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAx2mTjo6ODoLptDILKZGSxuzYN7xTGhfwk NMQwPuEhlFm3PG+xMS02raHzb14F9zAcA1To4tXiAsc7HV/ZOS0syuVqlExwMMyu TGRhn+vgZrWgdkxNZ6n4+zdFtMDgUdkGi7tjXQM3GwdsWXBsHwtXfZ5EvoqcxgLJ KCmUdnl8cNP3MRqTEEqScmv0kUruYlXqt12AedEdH4VmGCwFrorrbfHgD2WSC83W zr+4k3VIfQHUhB2Kdm1gKeUQWOZnqRscwkoJ3GaS70xNtLWs4SPA/m5PEvlu89aW IWb3qdKMDylx5s7UQZID+9KoilxuvXqsd8ew/wxTO/p/oI8PY3cc -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs/cB1xHbaQ9E51hWDI37 jd/jgASH5htTuCow2ZD9rFAMXKYbQbKtzkW+F/bJEZ4MpeMRY/jKQgJuXtV8oMcw Wbqr84U2IEvuP+o65c9QEoufHW9WSjo3FyVHboCNFrhE/SrM+Xsm/+nYvj+YnVB2 nruD+UqmsAgXv1ai74Xx+uEtYZ67eUj+/SjYJi49wsbSCGIH5JPWdNbOa/kEYKp3 4QCFFQt8Af3cJGDZh/BR9FKYdFyWfJRaYOquGWlpsCnf3LE7qsg1n3zGWUeFv7f+ rLLwsMPzC1CoyCyIQj7ZUsC2GKlcws+OSf7wY22sy02+/COUIR0zbkZ0icPXepnM pp7R3EdrblYiOE6WrHR8faCSbLbBoPxUzSd+5HTO8k6ojmBvfAyEN2caysgwKAqe ztUIh8BL79PD0gIbCA6J7mrk0mvZgfUwudo3IAp1P54UEnOpwK2/2k34JnE+nm7M OPHZH+Z4Ms28WUw2+HnelJ6LE9NUTve63JeHIVRQRXm3hW3+oZL6PRyn8s8wY35e NmmdagHH+oJl761sLAH5nf6rtSBNHcK9ZJnOqi51iVkg6abR92TN3vxMABH3ug6T 8NpEo16O3mqoNqQPKl2qyOrIBK0/wiXscPERo5sWJ7493A7xqR6ZwXeDIhiIsxLH mK8I0nW2noDXk/+ulmxwSz0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 135110464563814562453208009416853446501873 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-14 05:58:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-13 05:58:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sebastian-niegel.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734192621804879764964315481520407625297477961010860969014574143448227001792640583222005463539914131261165013798211975258509688572958576196038591772701094495693257745866017701178395338744734313493655689575875236300338704359020736920983584472948193807452293811766964387648480809593701589587780833633962820296609026610311633402312534431260892842931616809180818569939102779619954408676957254576931863420304252371913366286533781767086070322204304220151121506979760306006878391189896657580240367976881954146594568044248432674441307871903158355937995598873999582128738934695865391556515410206734956413701985661483177197935245231499852116170434478316017353578575186544597257075285749015010029971165485617319765629806795040899159034182360491289258154890680747172399757233226847602108639614863994002394647979439622878847392870584061560086132798138636651157838370627817626435099099644931475191626905583575728254760544929456369937156831540288154109723489429700437247859291850991009874530260436928514733765547457206772403611132707909586763087663914387640292337064192295043511832356157738965433578242960825421516732647488013152302740725717236675406073550468065558544321197142853252925544641097022533822695664629442881574373202908280225626667895613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf32fe716f440f888dfd8de8e7718a0cbabb302b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebastian-niegel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebastian-niegel.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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