www.tekom.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:8c:8c:ab:c6:29:14:3b:a4:62:43:e0:8a:e4:b6:0c:07 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tekom.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:8c:8c:ab:c6:29:14:3b:a4:62:43:e0:8a:e4:b6:0c:07
Serial Number (int): 303718693618439124255235695133289203764231
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:9d:d5:66:8c:c0:5b:ed:27:a2:b2:df:31:fc:7c:5e:05:c5:b0:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:72:9c:cc:18:5a:15:96:eb:f3:19:26:5d:71:9e:8a:45:14:a3:2d
Fingerprint (sha256): b0:de:e1:bb:39:b9:54:26:16:83:40:ea:48:4b:e4:39:7f:f2:58:4f:1d:e3:36:dc:ae:f1:c6:5d:a8:6a:47:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tekom.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tekom.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conferences.tekom.12bis3.de
eu.tekom.12bis3.de
fruehjahrstagung.tekom.12bis3.de
fruehjahrstagung.tekom.de
jahrestagung.tekom.de
tagungen.tekom.12bis3.de
tcworldconference.tekom.de
technical-communication.org
tekom.de
tekom.eu
www.technical-communication.org
www.tekom.12bis3.de
www.tekom.de
www.tekom.eu

Other certificates including the domain name tekom.de

(limited to 100 certificates)
www.tekom.de
app.reelertech.com
tagungen.tekom.de
statistik.tekom.de
www.tekom.de
www.tekom.de
cafe.tekom.de
mobil.tekom.de
mobil.tekom.de
mobil.tekom.de
www.tekom.de
conferences.tekom.de
bride.tekom.de
live.tekom.12bis3.de
martbhiadmin.estore.business
tagungen.tekom.de
develop.tekom.de
conferences.tekom.de
www.bambumeta.io
mobil.tekom.de
www.tekom.de
conferences.tekom.de
mobil.tekom.de
www.tekom.de
cloud.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
umfrage.tekom.de
statistik.tekom.de
www.ngoan-streetfood.de
openx.tekom.de
conferences.tekom.de
webmail.tekom.de
umfrage.tekom.de
www.tekom.de
autodiscover.tekom.de
conferences.tekom.de
www.tekom.de
bride.tekom.de
mobil.tekom.de
webmail.tekom.de
jira.tekom.de
iirds.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
iirds.tekom.de
autodiscover.tekom.de
statistik.tekom.de
www.tekom.de
develop.tekom.de
cloud.tekom.de
www.tekom.de
openx.tekom.de
conferences.tekom.de
mobil.tekom.de
develop.tekom.de
iirds.tekom.de
webmail.tekom.de
conferences.tekom.de
develop.tekom.de
conferences.tekom.de
www.tekom.de
tagungen.tekom.de
umfrage.tekom.de
link.how.fm
iirds.tekom.de
umfrage.tekom.de
develop.tekom.de
umfrage.tekom.de
tagungen.tekom.de
openx.tekom.de
tagungen.tekom.de
jira.tekom.de
conferences.tekom.de
cafe.tekom.de
visilaw.com
tagungen.tekom.de
openx.tekom.de
jira.tekom.de
www.tekom.de
statistik.tekom.de
tagungen.tekom.de
statistik.tekom.de
mobil.tekom.de
app.ventract.com
iirds.tekom.de
www.tekom.de
webforum.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
tagungen.tekom.de
www.racetime.app
conferences.tekom.de

Certificate

The complete raw certificate details for www.tekom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I/BZWcbzlKznWJ/m1Lo
We++OFKAcqij+eVVCK8O7848qSL4YTVHeDnVJVfzVSrNOb1w9rz/6qpe25yQ65hZ
gL6dSjtLPDqe6vh6gnmYY67Y5gKEqlpFHHYJs1hYqQ0M0l9M4UiGh400uN4JLnKA
r9T2e4LITSa5kudewPaPmDLNg8j3imwznNuKe6y9pvcHVs8x1/AFd1pWSaRTK4mK
aLah7gUWhxYyCwGGzd0a5Fz/atec36u/SxNg54A1Oc1cS1T5NW9aXAul0y1+qUu1
hZvQr903eiIwPR/rp4oTVQsN8MfErnhJ0bEYhXDh/Gs+J+63FJIR5WvSnEX7Whi0
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303718693618439124255235695133289203764231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 12:31:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 12:31:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tekom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26833409108990714847130665913905861296620081303909309141196966218698903564203627410738880286136582468703624639069363601796085979909345695406811753567123986716680962687575184923657410976053751266829833471566229233920330336414188127663760588747454303661373014922916071039996287102324260222971253263371423763258802010166651358025348296615918926327523371267350565758674043531465466265548491926469621395272406720116971707390604036855631340957572161487035544699388609046834621970439390612700699633286692413663104075423190263689633062888379109714989748538046537334734904686953511038342600730026495818387073988923579476522211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b9dd5668cc05bed27a2b2df31fc7c5e05c5b0b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferences.tekom.12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.tekom.12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruehjahrstagung.tekom.12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruehjahrstagung.tekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahrestagung.tekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagungen.tekom.12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcworldconference.tekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technical-communication.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technical-communication.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekom.12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekom.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fc84d73100000040300483046022100cfb340d3d3afdcd0c049381b778a667dbfe9da192cd1913629cde833ccf00802022100bad466b93e2b33530a00984dda7349bf1080cdc9acab7cb7f422b461e7ef68c3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc84d73050000040300473045022048746e0e86ceb8fb62a4e111a8b0b2f11c9c07ce2a5d3e4b9ae27cf902f69fa2022100f35d2cf8b0d1bd2de84defcaada16606a00d91d142ee8dbb1f960a427a6adc2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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