fnp-online.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:63:46:22:a0:da:ef:d2:8f:e9:30:f7:11:5f:c2:fa:10:b8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fnp-online.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:63:46:22:a0:da:ef:d2:8f:e9:30:f7:11:5f:c2:fa:10:b8Serial Number (int): 295118037880783279601734761872412204732600
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: de:aa:63:6e:19:20:8b:5a:70:37:a4:12:01:c7:e7:43:87:d6:ee:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 12:b1:ad:c0:0b:0a:e1:4b:3d:9b:88:36:0b:f2:0a:f9:71:67:01:ad
Fingerprint (sha256): b0:f2:ec:cd:df:a6:e4:ad:a8:30:cc:9c:32:12:0a:54:8b:d5:a0:66:d0:b1:3e:ee:e5:71:bd:9b:4a:1d:73:29
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fnp-online.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fnp-online.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fnp-online.de
www.fnp-online.de
www.fnp-online.de
Other certificates including the domain name fnp-online.de
(limited to 100 certificates)
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
audio.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
fnp-online.de
fnp-online.de
content.fnp-online.de
fbgewinnspiele.fnp-online.de
content.fnp-online.de
fnp-online.de
fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
audio.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
content.fnp-online.de
fnp-online.de
fnp-online.de
content.fnp-online.de
fbgewinnspiele.fnp-online.de
content.fnp-online.de
fnp-online.de
fnp-online.de
Certificate
The complete raw certificate details for fnp-online.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISA2NGIqDa79KP6TD3EV/C+hC4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjUwOTM0MTBaFw0y MDAxMjMwOTM0MTBaMBgxFjAUBgNVBAMTDWZucC1vbmxpbmUuZGUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcLJcE8bBWqSNYpxRd0oD7ELPrbpX9QXx UuZ3vr48abyMYqM4UzEUlMgbSx6242eSGkx9IsJTqeadnqgbw3Ki56cUd/2JtFCS Z40qvUu0ewp/eU2HnxmUCqWuj2MYdvq5Nj6Dq45RKqn6o01m9ze7n98lVkxmwkbk mlY31aEHlsAqJEXYvNAKfUq3+1ixiJO+rHMCjl0WsDYyEgl0FT5Xuao3mK/DBPlH oFvey9pYMzo4f+2eDE0N82Oel4Eso1LKPWeC32q7A6uyOUNpVQ/O/q9nELGwuVfe bUAaZ8T8UZvJlZAsdYM2FV2tt0fFfXI0PvcHuzPRrd2cOaryKYjbAgMBAAGjggJ0 MIICcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFN6qY24ZIItacDekEgHH50OH1u6Z MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wKwYDVR0RBCQwIoINZm5wLW9ubGluZS5kZYIRd3d3LmZucC1vbmxpbmUuZGUw TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0 BIHxAO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW4CexP/ AAAEAwBHMEUCIQDVq4wvkpX60r+lqeXaTP7k9L3wPSY9v2SMheGL2Y4WFQIgXgF4 KDXRJXsVDg2WnM44lizulTUDN7iYyOEX8JeAYLkAdQAHt1wb5X1o//Gwxh0jFce6 5ld8V5S3au68YToaadOiHAAAAW4CexQkAAAEAwBGMEQCIFXDHYjgbrUk9ta/wa5U 0i7p5jN31gokUWqxdPsJCcN+AiAdg9q0V9+U0qMQN1SfKRNQVbWZB0/g2mlaL5Gf E97ugzANBgkqhkiG9w0BAQsFAAOCAQEAX4TGgnV/RKB4/r2Y6PfJSPdkj6sqbljq hzgnYd6NoHtQlQzEvziA6K+sxOz1foFc0dexvVFh4nTm351qKV61rMiE61+7a1lQ 6UA+5vs/yp08fncPi+QHZoakRddkqagm+DwOtakO5ygjYmpuGPvQAlFAUgcJNun+ a5EFEZUdK6qhiweHpj2O+N5LqpP+1zECpAQ8QajGUcALGj7wLmmfcxEGA33GUrhe fOLm7UZKnh16c3MPOtRwK/kOH4S8ZP1QYy7y6I+fFfyYgkUlElWqKtK0epWPH/Qa Cmdo8WK8QV/vSR8nSm1xfOuC8aCu31YkPbIuZewz7u2dKGiknKoRaA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3CyXBPGwVqkjWKcUXdK A+xCz626V/UF8VLmd76+PGm8jGKjOFMxFJTIG0setuNnkhpMfSLCU6nmnZ6oG8Ny ouenFHf9ibRQkmeNKr1LtHsKf3lNh58ZlAqlro9jGHb6uTY+g6uOUSqp+qNNZvc3 u5/fJVZMZsJG5JpWN9WhB5bAKiRF2LzQCn1Kt/tYsYiTvqxzAo5dFrA2MhIJdBU+ V7mqN5ivwwT5R6Bb3svaWDM6OH/tngxNDfNjnpeBLKNSyj1ngt9quwOrsjlDaVUP zv6vZxCxsLlX3m1AGmfE/FGbyZWQLHWDNhVdrbdHxX1yND73B7sz0a3dnDmq8imI 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295118037880783279601734761872412204732600 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 09:34:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 09:34:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fnp-online.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25176995510866145877218078881162414845752442587278971195403795385534822026364975478887062235127198617855288753671841870692961318488547962209899346764660983357858257621162347257662435435034548430848218761124062841059903946979393729327745271419864883150955985684399704960138902927510948114286934717135585770433717923755357270339828907455011298510626590652390021962712109992917324198549444530740500299192618753694029103996119450110097348591837528137530373958879548697394243019755924220506221794713282285799704948981671001074929043111779942528757223043173976542536282656740809745283446208809091616951623938063955051251931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) deaa636e19208b5a7037a41201c7e74387d6ee99 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnp-online.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fnp-online.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e027b13ff0000040300473045022100d5ab8c2f9295fad2bfa5a9e5da4cfee4f4bdf03d263dbf648c85e18bd98e161502205e01782835d1257b150e0d969cce38962cee95350337b898c8e117f0978060b900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e027b14240000040300463044022055c31d88e06eb524f6d6bfc1ae54d22ee9e63377d60a24516ab174fb0909c37e02201d83dab457df94d2a31037549f29135055b599074fe0da695a2f919f13deee83 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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