www.kettensaegen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:77:4d:49:31:54:7e:98:d9:c7:cc:e1:d1:0a:1d:78:3e:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kettensaegen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:4d:49:31:54:7e:98:d9:c7:cc:e1:d1:0a:1d:78:3e:cb
Serial Number (int): 389045475984511191429798970362227651526347
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:25:0d:ff:32:98:ba:15:40:fc:b8:61:d2:6d:70:5e:69:2c:74:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:b8:de:fe:05:c8:2a:ce:e8:13:0e:71:fa:01:4f:6c:b7:e8:45:50
Fingerprint (sha256): b1:01:c6:24:7f:b6:67:a1:6f:d1:b0:c1:be:dd:c4:6a:1c:4e:ae:37:45:4b:d4:82:67:61:cd:7d:53:a2:ce:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kettensaegen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kettensaegen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kettensaegen.com

Other certificates including the domain name kettensaegen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kettensaegen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389045475984511191429798970362227651526347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 04:10:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 04:10:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kettensaegen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674367088533906504311649044792759909169570979844282625522076494999042711510034383658355283681009648863468735194740112850904680932375691838544108634483593007108230303981051807780123107717617373263988364351868630440847417445466586474092127146254256961967529879239520812612020627871477655496191257453654125833131731963736591132629026914566630831214130199481396016678016510465506028081465875984100352155471290406280325954232507042334324022103496111989398928451336607012926522870974807531774238241338474914796604373936192657426738837491049702460012757426178219535773370430169776227582883917015847820111951159093637629841484925760986096839533037413190182424188608962932364252188077813747985898854104601996376549578632637422973181660501602283174428324341160419052285701976125310996570905893295970669992368980323770449079984443061120053602751404690510948929637603624603369779363182054882612701062348493769128811207202668961877779602384895123381134233781127097577903766046664067286097995182899816297941890915908283541858615615897915073960185063623795701752215637767879245251483820616798194550806939306416864510477499706664008813302142882894774626325453937776374556168021680844917443133564443509740256574847591559624599936136511328254034924193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7250dff3298ba1540fcb861d26d705e692c746b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kettensaegen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ecf510b7800000403004630440220423da6e0b2ca35a1f0d7aed0eed6d944c4f9fef716bca25c486cbc9ebe8330d802204f7fc9d6497904a6a6644919bc3be996668c15570fde831b2c1a54f730cb743100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecf510b9f000004030047304502203f41e0a9031347244b6aec57aa243abfca544afd1672ba85fc8fa023721a654a022100d46f48863d411b0645064a443b9fcc63eb06fa77736b25d1e412c3409282aa91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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