*.t6a.de

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:3f:c2:46:42:07:29:60:09:81:e4:3c:53:69:cb:53:c6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.t6a.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ed:3f:c2:46:42:07:29:60:09:81:e4:3c:53:69:cb:53:c6
Serial Number (int): 342068528849868108633352647527175174181830
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:ce:fd:95:29:81:9e:13:60:61:a0:7e:e0:80:87:8e:c5:5b:da:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:97:9e:ca:0c:d9:31:76:87:43:c8:bf:b7:af:25:be:55:56:5e:a2
Fingerprint (sha256): b1:0f:d2:f2:97:3a:a7:2f:49:37:54:5d:f0:14:91:79:cb:87:ef:99:c9:ba:aa:22:97:6e:43:cd:91:b7:07:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.t6a.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.t6a.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.leon-lindner.de
*.t6a.de
*.weblogtemplates.de
leon-lindner.de
weblogtemplates.de
www.inkontinenz-unterhosen.t6a.de
www.leon-lindner.t6a.de
www.scheidunginfos.t6a.de
www.schokoladennudeln.t6a.de
www.videorecorderkaufen.t6a.de
www.weblogtemplates.t6a.de
www.wrestlingdeutschland.t6a.de

Other certificates including the domain name t6a.de

(limited to 100 certificates)
tipps-poker.de
tipps-poker.de
www.kreditkarte.t6a.de
rotekleider.de
inkontinenz-unterhosen.de
mail.haushaltswaren-1a.de
deutscherwebmasterblog.de
videorecorder-kaufen.de
forumforex.de
babsil.de
fahrverbotumgehen.de
lff24.de
hunderassen-ratgeber.de
abendsonne.net
www.kreditkarte.t6a.de
deichselbox.eu
vokuhilakleid.de
gebrauchtekinderwagen.de
inkontinenzunterhosen.de
leon-lindner.de
blogwurst-mit-senf.de
fun-4u.de
reiseartikelverzeichnis.de
hollis-allerlei.de
vfbfanwelt.de
glauschi.de
*.t6a.de
mail.abwischhilfe.de
t6a.de
www.spulen.t6a.de
bauzinsrechner.net
purpurabacca.de
*.blogwurst-mit-senf.de
einmannblog.t6a.de
heilpendeln.de
khlaac.org
eifel-freizeit.de
jannes-falter.de
babsil.de
tagesmutterberlin.de
cubanischessen.de
www.fluegel-falter.t6a.de
forumforex.de
tagesmutterberlin.de
boxspringbettentest.de
ausweisnummer.com
babsil.de
erfahrungen-mit-kreditvermittlern.de
familien-unternehmen-gruenden.de
einmannblog.de
geschenkefuer-maenner.t6a.de
stuetzstrumpfhosen.eu
casinospieleblog.de
casinospieleblog.de
glauschi.de
nach-london.de
berlinsane.de
babyskinderwagen.de
geotextilvlies.de
geotextilvlies.de
universal-fernbedienung.info
geschenkefuer-maenner.de
llcblog.de
inkontinenzunterhosen.de
*.thalheimerzgebirge.de
jobsuche-international.de
bauzinsrechner24.t6a.de
glauschi.de
*.eifel-freizeit.de
ruehrloeffel.de
lff-marketing.de
staffelei-tipps.de
ruehrloeffel.de
warnemuende.tips
brasilianischemodels.de
hollis-allerlei.de
jungemodeonlineshop.de
pro-seo.de
eifel-freizeit.de
thermoskanne-reinigen.de
t6a.de
umgeldonline.de
preisausschreiben.biz
inkontinenzunterhosen.de
hurghadareise.de
www.vergleichedsl.t6a.de
hollis-allerlei.de
rotekleider.de
www.china-reisen-visum.t6a.de
bauzinsrechner.eu
heilpendeln.de
llcblog.de
reiseartikelverzeichnis.de
webloggerforum.de
www.onlinekredit-01.t6a.de
liebeskarten.de
jungemodeonlineshop.de
gebrauchtekinderbetten.de
reisetippsblog.de
www.schokoladennudeln.t6a.de

Certificate

The complete raw certificate details for *.t6a.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSGvGz3Bz29/il02N3zc
kSdUl0XEYczfdSJD8fUnTPQOS+SUNxIFYxNTE14J89GgshigWHh36K1JlldWIl98
ZJG6Q67V2yQF5tql+1o/arO7M7x4v4hzpIKzz3HUwfJtqj7Y1igGPslBW/OcZpyg
0rzIhtUydUK747t/pvAq7zTkOu8dwZx4KKyeAsydqKn8DtuDVVE4lXpX3UfRXoCM
iy9tN+jaJzM+rI7fuVXPDyCOwpBtxVL7bCL4haXUAs/cj39Y6/0cg26VMbc81TIU
+YzsgallDb76dI0UkPyAit+afnHOljNcPpnBBt9PN16dpQZCHJaCpN6ClFQAj+so
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342068528849868108633352647527175174181830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 14:47:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 14:47:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.t6a.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23875649842700035025543774137847246438942831885563774973687132246090566001035919144271166291371868260079137457863776615168526609929983199029079899604969854804095346191910087105104850617496032317131127837525404923158778303563391876191817756053657248955457084998998313934847110094963189932909427572172902761016582281877160640783561609593937099927323597620711800774345338046649432147879512186163028140349326857154494343600271659527596214592927923736663375269912088361000115081255785386383529276113151823742147197915998704785593715076295420857760810087066047264453460901220046669092464974914407443539478316109057546201311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1cefd9529819e136061a07ee080878ec55bdaab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weblogtemplates.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leon-lindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogtemplates.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkontinenz-unterhosen.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leon-lindner.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheidunginfos.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schokoladennudeln.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videorecorderkaufen.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weblogtemplates.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestlingdeutschland.t6a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec38b5e560000040300483046022100d48581e2f7dbda787c78b79f40765bd93762ed90e4e31ec5d10a7abb90f2d663022100b3541fc1c1034ee8abf3681b0f37a753111cac1f6074de3bf3b9cae305159c0900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec38b5eb40000040300483046022100e48a20721d4b92bc8c4db348406274ecbd6eb78eec9ea3907ca43d4a99f937420221008d1ac7ce5b99d84e8ef1f66622821feb5a2a2bde5a80f41b898e2c8c2de8b664
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a07cdd0bb9cf84268046fcb7634f31a03d4915614b75d671faa3f5f14b564893f3f6909db42818e01eda179792c113d948b3fe4a34b4125640b2234a22c9d84f16bd4b28a2f185e1cdbecd0d9a3caa8a604dcf9af7d0aa6259fa958954b423b28aa834afe4f5d5f530e77c215ad4efd99d5bdc739c02856593518728bf95335bfccb9e17515417cef3ad63be35fcfd729d7569412f07b1a5457ff8cf3a953a569d4bf78e9af6a1db79f0a27a8bf331b4c0f7a15d170392ac217e69ea35cb71be929268bf279663dcf54635e603bfa9048c6858c12104f1ef1a37e405f7c5e799219a01abf734afc15ec38a74b09fa228e9726ef206bb6a8670fc5d4584b3e01