code.stuenings.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:29:91:6b:2c:21:d4:6e:be:46:23:18:c8:de:f9:b5:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=code.stuenings.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:29:91:6b:2c:21:d4:6e:be:46:23:18:c8:de:f9:b5:0e
Serial Number (int): 334552820087868515247216909422115801380110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:36:be:50:c1:08:27:db:54:4e:32:ce:54:6d:97:44:4a:ce:61:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:78:43:53:80:2a:6d:01:17:d6:ba:65:0e:ed:60:b4:8b:f9:55:7e
Fingerprint (sha256): b1:86:9b:98:9e:05:d2:12:ad:0c:d7:7b:d9:f4:35:b0:ac:7f:3f:b6:3e:ce:d8:9b:51:36:89:29:85:f5:a0:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate code.stuenings.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for code.stuenings.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

code.stuenings.de

Other certificates including the domain name stuenings.de

(limited to 100 certificates)
ml02.stuenings.de
code.stuenings.de
haseworkwear.he07.stuenings.de
newsletter.stuenings.de
webmail.ml01.stuenings.de
jah.stuenings.de
klueh-blog.ml02.stuenings.de
code.stuenings.de
hasegloves.he07.stuenings.de
stuenings.de
hilbertz.stuenings.de
haseworkwear.he07.stuenings.de
rn.he07.stuenings.de
he07.stuenings.de
webmail.ml01.stuenings.de
bauenundleben.stuenings.de
ml02.stuenings.de
webmail02.stuenings.de
dev-hugo-josten.stuenings.de
ml02.stuenings.de
webmail01.stuenings.de
webmail07.stuenings.de
pve02-ec01.stuenings.de
roland-sprenger.stuenings.com
ml02.stuenings.de
haseworkwear.he07.stuenings.de
bt01.stuenings.de
pve02-ec01.stuenings.de
ml02.stuenings.de
ml02.stuenings.de
telefonanlage.stuenings.de
dev-hugo-josten.stuenings.de
he07.stuenings.de
varnish.stuenings.de
pve02-ec01.stuenings.de
flipbook.stuenings.de
ads.stuenings.de
transfer.stuenings.de
jah.stuenings.de
pve01-st01.stuenings.de
he07.stuenings.de
webmail07.stuenings.de
he07.stuenings.de
rentokil.stuenings.de
ads.stuenings.de
stats.stuenings.com
hasegloves.he07.stuenings.de
klueh-blog.ml02.stuenings.de
klueh-blog.ml02.stuenings.de
varnish.stuenings.de
hilbertz.stuenings.de
telefonanlage.stuenings.de
bauenundleben.stuenings.de
niggemann.he03.stuenings.de
he07.stuenings.de
rentokil.stuenings.de
*.stuenings.de
he07.stuenings.de
pve02-ec01.stuenings.de
bartels-rieger.he06.stuenings.de
varnish.stuenings.de
hasegloves.he07.stuenings.de
neu.stuenings.de
*.stuenings.de
haseworkwear.he07.stuenings.de
jah.stuenings.de
he07.stuenings.de
hasegloves.he07.stuenings.de
rentokil.stuenings.de
pve01-df02.stuenings.de
code.stuenings.de
hasegloves.he07.stuenings.de
bauenundleben.stuenings.de
he07.stuenings.de
neu.stuenings.de
flipbook.stuenings.de
webmail01.stuenings.de
webmail02.stuenings.de
webmail01.stuenings.de
webmail07.stuenings.de
bartels-rieger-devbt.he06.stuenings.de
flipbook.stuenings.de
webmail.ml01.stuenings.de
*.stuenings.de
webmail07.stuenings.de
dev-hugo-josten.stuenings.de
klueh-blog.ml02.stuenings.de
flipbook.stuenings.de
webmail02.stuenings.de
he07.stuenings.de
stats.stuenings.com
flipbook.stuenings.de
haseworkwear.he07.stuenings.de
telefonanlage.stuenings.de
webmail07.stuenings.de
webmail06.stuenings.de
roland-sprenger.stuenings.com
he07.stuenings.de
*.stuenings.de
webmail07.stuenings.de

Certificate

The complete raw certificate details for code.stuenings.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334552820087868515247216909422115801380110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-13 08:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-11 08:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'code.stuenings.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769187875778161238367801161626887342061310861757419523853872142870048881591850257179527891481453899568698747161885386796382659036513060926259988153772199945879939481285074841761650021507777460646849003479947480234898665954230787000288113785576550597955418541045141236717451265078502920965370331681782905546667554527650967307079254675605501817689822788418478419308354278204254375391630062078139278866653427090035496333132479344715262008997480995821043712785215618826455510717747808570949738114553576667882118948762615479163147906703066626854295356284417124646207659949400321065491454119051820635155179029548013828417671256894221593100551753676875706501434889810251060576378877460098500027515158305189084114733375521901866684453958656260328781790272920207627198200160822350041257558585043984592102301004574164716552089467998329842612233152452249390882796291955486704137605048442084958447278935614736756405751781252398226139857794212241469018996904021418304536619631023497027602989380249168303808699580258485537952651214759464998774426687214038653259662662831046788544322310257568851963683391205654819211865054955403745281249227191944186721678831505474757351805071756618741907906072961415072722354073529337393898412254662259333702182281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3436be50c10827db544e32ce546d97444ace61d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.stuenings.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f56ab06c8d3baaab57d6de30df1fc185edce4c84afcca4f11f26e35183633d292bf12a85ecce3f73dc3f650735a6b232fb34e348f21b9ef63444c8186d90ed4df195b4a7c8158d2356514b9d2b4a246a0b013a54c153658d58f48fb2bf179e2bf875ac4c7275839b8f7db64e4105db3c4448dc02c2088b4babaef174ff207c941af6e5ca2c1b3b078455355121cbd49d701ebfcf6a0504b343708e32abfc327523802eebb3c02b28c55c08cdcc1f999bc8efc3749371a7736e1b7915f520a57a1a9545661c08abcdb6368b6d5dbed17da7731aaf6b9f20242617d41f47f5403c1e4fdb04d94c4ce2b4e7c9afe7e74b6b8f52876dde850723bbd67886a7a39bb