nikokranz.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c2:4e:e4:d5:96:b0:2a:4e:12:5a:90:0c:00:69:32:08:f9 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nikokranz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:4e:e4:d5:96:b0:2a:4e:12:5a:90:0c:00:69:32:08:f9
Serial Number (int): 414568790869150008337417658028290689075449
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:1d:11:f3:d7:54:54:23:07:95:aa:2e:db:2b:a0:77:f3:d8:b2:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:70:43:89:ef:4f:92:9e:30:90:25:0e:2f:46:13:73:98:04:f8:ff
Fingerprint (sha256): ad:fb:e7:ac:9c:0c:64:62:5b:fc:8c:9a:bb:fa:50:d2:6b:18:ee:26:ef:e3:50:bc:dc:2e:2e:79:6d:85:ba:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nikokranz.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nikokranz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.nikokranz.de
data.nikokranz.de
dev.nikokranz.de
fritzbox.nikokranz.de
gitlab.nikokranz.de
health.nikokranz.de
mon.nikokranz.de
nikokranz.de
plex.nikokranz.de
smarthome.nikokranz.de
smarthomeadm.nikokranz.de
www.nikokranz.de

Other certificates including the domain name nikokranz.de

(limited to 100 certificates)
shop.dt80.net
admin.nikokranz.de
ca.antimarder.com
www.fgk.lima-city.de
testapi.nikokranz.de
admin.nikokranz.de
app.lerchenau.wachbuch.info
plex2.nikokranz.de
www.rose52.lima-city.de
testing.mokis.de
*.kitsch-pub.at
nikokranz.de
ck-coaching.de
www.add.nikokranz.de
www.strikefirst.lima-city.de
www.astral-anarchie.de
admin.nikokranz.de
www.bdsm69.lima-city.de
admin.nikokranz.de
*.l7media.de
*.bergundtaal.de
access.vampiresilence.de
*.pizzeriadafortunato.de
www.discoadmin.nikokranz.de
www.demo-moosburg.wachbuch.info
www.add.nikokranz.de
www.yannickstark.de
wuz-custom.at
nikokranz.de
www.welt-der-tiere.lima-city.de
admin.nikokranz.de
www.j4fun.lima-city.de
lektion3.de
www.weedman.cf
*.annaheupel.de
nikokranz.de
www.floetenbaer.lima-city.de
www.discoadmin.nikokranz.de
nikokranz.de
online-lernen.lima-city.de
www.discoadmin.nikokranz.de
nikokranz.de
*.exchange1972.de
www.chrisro.lima-city.de
www.youtube.playkev.de
postmaster.cdn-as-sirat.de
www.davit.floridavid.de
garfieldad51.de
www.xn--autoknig-r4a.at
nikokranz.de
www.discoadmin.nikokranz.de
www.download.villa-editha.de
www.leiststelle.ls-sim.de
fbxcpkovsujqtlh.lima-city.eu
www.oebb-files.salschnig.at
vmail.kevinkoziol.de
www.zeitung.juenger-radio.de
pma.albertus-dienste.de
nikokranz.de
nikokranz.de
www.jonlord.finio.biz
www.testapi.nikokranz.de
*.schulmusik-stuttgart.de
*.mein-it-wiki.de
nikokranz.de
*.bildspule.de
nikokranz.de
mein-sardinien.com
nikokranz.de
nikokranz.de
www.chrisisthatapolice.clan.rip
kfz-versicherungsrechner.pkwversicherung24.eu
www.testapi.nikokranz.de
www.ja-nowak.lima-city.de
kiga-sonnenschein.lima-city.de
qpost.gigadrivegroup.com
tutorials.tutorialecke.org
documentation-mam.lima-city.de
pmyadmin.kevinkoziol.com
dozententeamsuedbaden.de
nikokranz.de
nikokranz.de
nikokranz.de
citrix.lima-city.net
farbanomalie.lima-city.de
www.tatar.lima-city.de
admin.nikokranz.de
www.apk.ls-sim.de
das-kleine-ferienhaus.de
m25-schwerte.de
*.webentwicklunghalle.de
www.danslejardin.yannick.one

Certificate

The complete raw certificate details for nikokranz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KPdKLVuiiEitjZllAGQ
liAazqWmXhh5jcSNwwxgRBQg19m9uVjmkShLXvGR2U9ysiSL3/dxNWWK0zcc1gdf
AoCMxltp6wHH+kaN6BykspBI03SdM4TDTITON1M/FJ3u7Sf3QufDjflvyuceAFpa
a+I4GCSTgdY2LavIfF4RbV7G+ZDxkqoXQQN6OEnNys0YtVMvDZzoE1lirjez933U
QaLbXRv6oTiA6Kjp73jzi1AM7VJf37Zp+TkxKKj2vpTyqvkJTiZASfpTbUOP2SLr
CA5dXmcnTKUD6mAzV+VmV10qKwhh/OdUAYA5XULQKKeytXTK9hJthSmMPnwpFWxo
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414568790869150008337417658028290689075449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 11:07:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 11:07:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nikokranz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29368091054024376467663486287857379312154373369300164075977612232651177818549697692348447099437908877282858867303709635050923673105110233093246510909461439940440688965268824631832393061924379979560362025965926353714616818131533793782669302716550109171165172042227928696219061762182281466212812648783949264976518901994891066730768658188950975238325697884771272725489167354266159257992389362859305918310220414390663026601649123008219211038754788867546948654921119081644660627747853109654044722284382110001728026512841795329613566868475052033612674008904920090878610038054913051751616639301103228624668238561629149358191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a61d11f3d75454230795aa2edb2ba077f3d8b2de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritzbox.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plex.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarthome.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarthomeadm.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikokranz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b8e88a55c0000040300473045022017bc7ca74ca99140457ceb5bd26af984ba293dc7bb2b1482da977b7630e407470221008abe0e7211ad31a25a2e2f5b0cce33e0157ea46eca333f1971f82c07d242aaae007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8e88a539000004030047304502206e37f42c09775ef47cdd2f77e4a61072496a800f1f605f55d94e074ad571aa0d022100cc3b3e44399b4c27cfa3e07c6f279dfb61eb460a717f3049eb9de702ab12f94d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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