ferienhausfranken.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:4a:e2:4d:9b:04:17:67:ab:58:e7:d5:67:86:7c:da:96 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ferienhausfranken.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:4a:e2:4d:9b:04:17:67:ab:58:e7:d5:67:86:7c:da:96
Serial Number (int): 332895692753483100818606574466397401569942
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:cd:fe:d9:a4:a4:c6:67:54:f3:18:a9:69:f0:20:40:e9:5c:a1:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:a7:5c:cb:c5:bf:f7:57:10:f1:45:f1:ec:f9:82:92:47:96:b7:56
Fingerprint (sha256): a9:a2:e0:40:ec:32:68:b3:fb:11:69:4e:fd:fd:95:f7:d5:cc:c3:a0:6b:2c:d2:ee:bf:b3:fa:d0:83:f7:2e:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ferienhausfranken.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ferienhausfranken.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ferienhausfranken.de
neu.ferienhausfranken.de
v4.meyerjohannes.de
www.ferienhausfranken.de

Other certificates including the domain name ferienhausfranken.de

(limited to 100 certificates)
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de
ferienhausfranken.de

Certificate

The complete raw certificate details for ferienhausfranken.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332895692753483100818606574466397401569942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 22:01:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 22:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ferienhausfranken.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761492666170480018860523217961603978079921062026082293785712152578242564316632546899781948819453999007892868336128671348032031114557540704062254036753884077535711192543537629471475726645571864897478358071700196434242290867753563256255610302567644720139089550543660627692453801824857714846392281108681855040119055918724080076976449687938164197412550723923095999659949871268721552363621358001080047423890988728398120896234496705841118708772617784207258283956237688860104609513791642974261113692255981483821684653998360756883278423897647974911632476366850732812573272263646271088967029903730650429096246526499065071932025096616369926529229336976164766721223575513631745846622526315919474385769059387602685574921304522196859475615407918335517688948396464304706677140237985586540855416244118769357973366454887451522709471972437436961759265245049703002419353307134560965140062801606405259079069209284025723462962644808127500950579025835943842093085911984893602298112710887557504141702148869243768857259469355280910125876881066675803040137644436117453672933356772593297450126150803236672605969631015570454403123620095384374485129026748842949931051595875659911948717480946484259616173464804343001286258266515583163453835443076153890182537803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ccdfed9a4a4c66754f318a969f02040e95ca170
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienhausfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neu.ferienhausfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v4.meyerjohannes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferienhausfranken.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168067fc51200000403004630440220552572369793067eac7d46bfb86aa26bbf92ead22ed82d939f89f185e433a9f902207c38feb0827ed530c2bb777599aec2a3dcf8f13f65aecc305d19fb5307cc7191007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168067fc7520000040300473045022100efffa723df76f557715610d420c8b40f32e419ebfcb5a3e8f9be3f023ce5e1f602202d95d5927e93595fdb501877b543cd073f9f1f4d8ff77d0a9316ec9d84be4743
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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