ftp1.e-dcs.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:84:2f:47:67:7a:79:79:81:ac:ae:5d:02:da:9c:ca:28 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ftp1.e-dcs.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:84:2f:47:67:7a:79:79:81:ac:ae:5d:02:da:9c:ca:28
Serial Number (int): 306429833810490063772417611892603213367848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:e7:db:b9:d2:61:48:4c:b0:91:3e:84:1a:82:cb:ed:df:7a:0e:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:e9:ea:46:d2:20:da:a0:8d:e6:2f:ad:14:a3:7e:d9:78:22:47:e1
Fingerprint (sha256): af:39:44:ac:ce:69:d3:86:37:f8:ba:7c:4a:4b:8a:84:6a:36:13:2e:a5:2b:32:eb:62:fd:6e:b0:2e:68:93:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ftp1.e-dcs.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ftp1.e-dcs.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp1.e-dcs.de
hosting.e-dcs.de
mx1.e-dcs.de

Other certificates including the domain name e-dcs.de

(limited to 100 certificates)
rz1810.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
e-dcs.de
rz1810.e-dcs.de
mx2.e-dcs.de
e-dcs.de
service.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
service.e-dcs.de
afdnordsachsen.e-dcs.de
e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
rene-bochmann.de
service.e-dcs.de
rz2210.e-dcs.de
service.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
hajoscho.de
www.e-dcs.de
rz1810.e-dcs.de
afdnordsachsen.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
service.e-dcs.de
ftp1.e-dcs.de
rz1810.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
e-dcs.de
hosting.e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
mx2.e-dcs.de
service.e-dcs.de
www.e-dcs.de
service.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
service.e-dcs.de
service.e-dcs.de
e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
rz1810.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
e-dcs.de
service.e-dcs.de
gudrun-petzold.de
www.e-dcs.de
afd-nordsachsen.de
service.e-dcs.de

Certificate

The complete raw certificate details for ftp1.e-dcs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306429833810490063772417611892603213367848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 20:08:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 20:08:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ftp1.e-dcs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782622560605182765580785613538117342383891943776058268263943248220221655631998879436174309933816000062485966274389242565883817427912857020882027723031973501248905522410082037860253639177226718032440602104646997053164481173444437563416239713772927517118325562034638843421608488624392841929574329956090186525665814188584863548665189046297993335474227627632215364306924898674872829130032105452619546929208886867095409838498403724988051870527531617468793076990732405238213762369284944765902695441814961550903439974332668403503504634584873750995482925232365589796643805536352688331535268319073409329908119884163386076654482413817945578582302006854518174025498986342251177005338621129199364122007522132014277160240562160289095041170687337769048808465728766751879424467184385918377669377082497780978412318587856272340529042419493302000010870510995998935404481486069391411239201269820359620447603067431644744672031404778098819477785149505564803375055432822031305952588344997283544443099045900805407867690569187750975374692820814406369776153771172611305782322977005332476474769217962230701784846307377895847400284746472221914525316400966885444017311805823816927860128107764702075753992812562786515102809906299473473559405889737316673027341041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2e7dbb9d261484cb0913e841a82cbeddf7a0ee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp1.e-dcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.e-dcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.e-dcs.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4b5ae80b00000403004630440220147d0763aee5c3242111e991286b63d7e918ee8ea82cf27a992caada6bbeac4d02207619ecff62de1eba84cd715c15b1a9e7d3d92e983293fd0a2cb7b09aaaa24423007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4b5aea07000004030047304502207db11710d72b50bb17e2c173447a1bf5f1d2fc6d6a1c4ca4ded900314f2ae05b022100edfc41cc34deb3467aed1e113bd88a52aedc2934f1439e3a31296c79591347f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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