www2.marcelhenseler.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:f4:28:fe:bc:3d:31:3f:3b:07:f7:c3:42:fd:80:89:b2:07 was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www2.marcelhenseler.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f4:28:fe:bc:3d:31:3f:3b:07:f7:c3:42:fd:80:89:b2:07
Serial Number (int): 170195675241643860819279751554487296832007
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: c3:87:b2:bb:89:da:9f:e9:9c:c9:8b:f4:e2:f0:63:ec:49:20:78:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:d5:a1:46:35:e7:e9:7f:45:84:35:62:34:22:4f:8c:ee:e4:a7:68
Fingerprint (sha256): 47:d5:f6:34:3d:86:69:eb:57:33:ef:cf:a7:55:a8:f9:2b:ec:56:66:f7:a1:3d:1c:49:de:d1:c2:97:2e:d4:18

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on www2.marcelhenseler.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.marcelhenseler.de
marcelhenseler.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgISAfQo/rw9MT87B/fDQv2AibIHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTExMDMyMTE5MDBaFw0x NjAyMDEyMTE5MDBaMCExHzAdBgNVBAMTFnd3dzIubWFyY2VsaGVuc2VsZXIuZGUw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC37AhjhbmiU+iUT/P9w67W Uv8ztgaghTW3KovQP39iY5+6SAsSrj1jkhRYPXphrUgnqr4aerGXuNgFfVRxRnFF dejnq+YI6tts3YPAJaSa6eCbipbiNGxJiVbO3o59mfsXi828YK7b4l6TUNhW5vw3 +nSSCnNZlGm+JR1cVfkb78x263AFYTqUplEBKrqWBr6/t31qO8+DyY4qewefOort JkIZgMkzO+10XVtu0VQcGqNsv97KPPzQmE/jDfzXugswW2jvRX0nBbsGcJheXJR5 e11OIyFg8+mvbJX9vDEL/ebDPlnBf3uWY2YqGs4vm3jdmk+IAtaScOG91guh7p8u qZLEY92JhUX6GQ8NQlEBRqKaYzKY+TTL+UkxVA11i+Vzw+/frMOdJXjuSiiWaVQ2 PciOudqoaa0Beg+8yd6QH6wv5cJd3Wm+3kG0vsuAgJihcYQQYuPEr4WoNUvx4+vs DfIe7McHrQpwp4vqVp7qAT276xjeA0zEb8DrK8hCK/vY/EthSeaLytX6z5oy4HAZ whDydQb431P/Ek//wIQIsPlJFxGptqv0g1mJNxB2AAM4qFgjYtzu8jaTQYKk+nEK 2fCE74BEqkI+foCmG27Ac/OramHc/XrjiL9s95KnQLIOi7aIv2Mox/NM9wbSbYCM 8NcUcjxzyIUffN2UaHOwaQIDAQABo4ICLTCCAikwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTDh7K7idqf6ZzJi/Ti8GPsSSB4OzAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9v Y3NwLmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8v Y2VydC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzA0BgNVHREELTArghZ3d3cyLm1h cmNlbGhlbnNlbGVyLmRlghFtYXJjZWxoZW5zZWxlci5kZTCCAQAGA1UdIASB+DCB 9TAKBgZngQwBAgEwADCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMg Q2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQ YXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNh dGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9z aXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQB6bOypqOgcFr5qLnL9Kn/Xb3rWs4mo CrGpz0WEFFD1jejgg8fnvxa0P0YQXyecvsaXp8vHOZmecr24Nh6xia2rC0mRT3fo 09JAY6zBXI8jw/9zzqYk0lOdtDfAbugD1RGXguIIbWFaj617eZbhbqzHh9UooOSK DjgsLtvbyakQmXLgUOf1qRfOePzA2mO/w1vJItQyN9hU7+ihMdh2SuOskX/GKOye u5xXCIGxaFLs2RfHG+4lhqbbHNQjU755gcaGXuUJBL+/Sazne1B8g/XyiHAdLwAj qSIJgV3b5+mkFm1/8NJGpUZtn3Rwz9ATZfw+AksrUfh2RiIc3Fzkysy3 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt+wIY4W5olPolE/z/cOu 1lL/M7YGoIU1tyqL0D9/YmOfukgLEq49Y5IUWD16Ya1IJ6q+Gnqxl7jYBX1UcUZx RXXo56vmCOrbbN2DwCWkmungm4qW4jRsSYlWzt6OfZn7F4vNvGCu2+Jek1DYVub8 N/p0kgpzWZRpviUdXFX5G+/MdutwBWE6lKZRASq6lga+v7d9ajvPg8mOKnsHnzqK 7SZCGYDJMzvtdF1bbtFUHBqjbL/eyjz80JhP4w3817oLMFto70V9JwW7BnCYXlyU eXtdTiMhYPPpr2yV/bwxC/3mwz5ZwX97lmNmKhrOL5t43ZpPiALWknDhvdYLoe6f LqmSxGPdiYVF+hkPDUJRAUaimmMymPk0y/lJMVQNdYvlc8Pv36zDnSV47koolmlU Nj3IjrnaqGmtAXoPvMnekB+sL+XCXd1pvt5BtL7LgICYoXGEEGLjxK+FqDVL8ePr 7A3yHuzHB60KcKeL6lae6gE9u+sY3gNMxG/A6yvIQiv72PxLYUnmi8rV+s+aMuBw GcIQ8nUG+N9T/xJP/8CECLD5SRcRqbar9INZiTcQdgADOKhYI2Lc7vI2k0GCpPpx CtnwhO+ARKpCPn6AphtuwHPzq2ph3P1644i/bPeSp0CyDou2iL9jKMfzTPcG0m2A jPDXFHI8c8iFH3zdlGhzsGkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 170195675241643860819279751554487296832007 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-03 21:19:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 21:19:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.marcelhenseler.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750336308526744354678918060629043042421897103580736409350671096461486925113414586658228070233105000692896496177803770675938937768577768885190575998284517357571797075611369030567957779659111070939102181803546370401856375321841384887076315659257776686086137316382972633583942310815911972331635908218932358925672956436302993047293808774871336865045250327521722129331919609714649279750680615180508314460403399387296952621908983055159433044901151329164189012720704333050859444966267180932231439006436019074815461142418929126204469123509816158365835739843220164436445664150594949614984463351860769502089137411558942516838519553125142714488972138038729939012596967470821858898156916932562986671444342781758065991243058987510447419613242628434710154475470169085083823138792500210479810189435373536644566456108483398947676235589666288284834462459025917640273570514907535072536071218281294899447157536323681110933758978641792215020801318907180543020013764542433593927605677913688855488868867843457677658275068324969323422869096534363002188522022723667524767737580788067632031941829148591878555844541315766957554675737421067700522764627533629436652147481556317691749070016750840457822410914114247387174912395597825214845873112945549240943489129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c387b2bb89da9fe99cc98bf4e2f063ec4920783b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.marcelhenseler.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcelhenseler.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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