www.fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4d:1b:e7:38:de:07:68:fb:0e:1e:a6:cf:e8:35:12:24:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4d:1b:e7:38:de:07:68:fb:0e:1e:a6:cf:e8:35:12:24:74
Serial Number (int): 374687975709819645738514702439960875770996
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:64:a3:b3:c2:89:29:46:36:23:90:3c:5b:06:0f:f4:8a:52:54:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:77:02:5a:3f:67:b4:20:41:2a:93:b9:22:2b:a4:a4:6d:9a:07:c8
Fingerprint (sha256): ae:e1:01:05:36:ae:75:a4:64:6e:ba:0e:aa:b6:ce:2e:af:ff:8e:89:88:be:fe:9d:2e:fe:fd:cf:c8:87:03:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374687975709819645738514702439960875770996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 05:01:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 05:01:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 610006029556339804578526890334017541648629945032248911712164127579570129703861016531150814864676269962557016780412915946166219808218495668621281752115096447780870444927295275190634095818648704755498214286430567036848350016169514994064820095558036041746150050265368528614351916638176213277812427139460186169517056944145911026071228436365483110004663145383640923098963204408316653846724297642663226349134133318370839831005998770145746638240169734138762562662671898988956729131436039990545863937463603614075702680140644102979637055456300187485203908391880303445674687634200797749501211641580748090572797513500093447549574897287731489686658481891617691229196454809543862057353732462560782527968711275180912849159828054107537966441583368210692866942467822820477776697382737476525500883773079812030644681223692402877405572444511152227485157405227203246152951266664194784768081814779573164445160987041472788342799642383867852841304902837629772316828044061980053303483761392418422885330729302452060475800066837840133260077175929495352792301037872174822249248181021485859463707236411674341177953372465507728241349028796580521391276705526173349671756541474632751918833116752120521232346547451373551311222761999418297081286196229644610778534921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8464a3b3c28929463623903c5b060ff48a5254a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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