www.scr-bau.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ab:dd:53:75:37:47:31:8b:38:15:34:5a:64:a8:fb:45:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.scr-bau.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:dd:53:75:37:47:31:8b:38:15:34:5a:64:a8:fb:45:2d
Serial Number (int): 406931621195650694533373506791233015203117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:02:f8:b1:f2:92:c5:42:4a:b0:7f:1c:93:eb:9c:30:37:64:9a:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:26:2a:c9:a7:92:37:72:83:c4:a4:22:13:e4:d1:8a:cf:25:f9:fa
Fingerprint (sha256): b4:47:82:71:8f:e0:5a:60:ed:69:63:4e:ce:90:e4:18:55:8d:39:8c:c8:49:9f:bd:6a:74:7e:46:e3:58:1f:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.scr-bau.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.scr-bau.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.scr-bau.com

Other certificates including the domain name scr-bau.com

(limited to 100 certificates)
sync.emrtop.de
sundkerze.lima-city.de
www.martins-design.de
*.expats-forum.de
www.mau-rice.lima-city.de
www.scr-bau.com
projekt1.4lima.de
biehlworld.lima-city.de
behindthesun.eu
von-wertheim.de
ferreteria.scr-bau.eu
bierli-bruni.lima-city.de
www.happykiller.lima-city.de
*.scr-bau.com
all4you.co
www.scr-bau.com
ferreteria.scr-bau.eu
www.ichgmbh.lima-city.de
spikespiegel.lima-city.de
www.scr-bau.eu
arturderengel.lima-city.de
www.scr-bau.eu
www.messering.lima-city.de
www.appdev-rm.lima-city.de
www.blackoutimages.de.cool
construccion.scr-bau.com
tesemermol.scr-bau.com
drei-fragezeichen.de.cool
*.landbluete.at
ope.lima-city.de
www.nur-dasbeste.webspace.rocks
*.klausundursula.de
uzutmcsjmshqrbo.execbase.de
www.fondationm.ch
www.schmidt-hillmicke.de
www.arend.lima-city.de
*.scr-bau.com
fight-star.de
www.rambozo.lima-city.de
www.scr-bau.com
www.wiese2.lima-city.de
www.scr-bau.com
www.ip6net.de
www.webcherry.lima-city.de
www.hamzabarfi.lima-city.de
ferreteria.scr-bau.eu
www.scr-bau.eu
test.classicdrivers.at
www.scr-bau.eu
www.scr-bau.com
delfins.lima-city.de
blackforest-survival.lima-city.de
comeniusstrase.lima-city.de
construccion.scr-bau.com
www.scr-bau.eu
simoboumlik.lima-city.de
www.arbrd.lima-city.de
dammey007.4lima.at
www.scr-bau.com
www.guitar789.lima-city.de
unitedbees.com
eastdesignstore.com
www.turuntas.chameleodesign.com
ferreteria.scr-bau.com
www.muelli.lima-city.de
saskipockphotographie.lima-city.de
beetlecabrio.eu
www.scr-bau.com
www.scr-bau.eu
www.treiberzeug.lima-city.de
ferreteria.scr-bau.eu
neu.lima.zone
www.baun.webspace.rocks
www.gutenberg2000.lima-city.de
www.scr-bau.com
construccion.scr-bau.com
ferreteria.scr-bau.eu
oaqjtgzpknjdzpw.kontec.eu
www.medien.de.cool
ferreteria.scr-bau.eu
www.splanx.lima-city.de
ferreteria.scr-bau.eu
saftaayrntbbizu.3d-look.eu
www.dnofxuqlpzwd.lima-city.de
ferreteria.scr-bau.eu
ferreteria.scr-bau.eu
www.scr-bau.com
construccion.scr-bau.com
www.ptc-top.lima-city.de
randieo.de.cool
www.tetransdigital.lima-city.de
mvgg6537hh.lima-city.de
oldhabbode.lima-city.de
www.scr-bau.com
janrother02.lima-city.de
www.tetransdigital.lima-city.de
www.oldhabbode.lima-city.de
www.dimalive.lima-city.de
www.test.lebasti.com
www.nscspeicherno1lc.lima-city.de

Certificate

The complete raw certificate details for www.scr-bau.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRHmZwwD3IvHhDYL7icZ
Ya2QbfVqbRPYCKAPAxy2k6wXdabHV0jEM7UzE/xA/T5ZVcHV/KrxlIbdxMIxq8J+
pxBDj+d3uyMQ2tz5WuHtgKpVhRWxFD2x8prbWqHzo8lx5jqdyfoXLDVKq+X6gVrQ
Eih6QMgTtthrTFZbLi66S22S02DZ6oOV2qYe5l8KXLNILTdVHsxUFJ00zvDZzJM2
fr9CzYg3p5XK58a27atSzoLMRThE7hSCO6S0leYICEVxWyhMgBm2laDF840Y/stJ
3hswR2PZ9mSK9UQZo77BL/CDwdVRyj/yWqLdIzeeNsgaQaO3QUzmWx+7y5Cr0sH1
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406931621195650694533373506791233015203117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 12:30:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 12:30:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.scr-bau.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24372819682297145423922208821154188103637373138892949266018730302331075804004362705784451587070745896140362499997354678023440712183302286636855102213894801857276156058354157967426576061591596724604506467455305532436477086940336371836127392259760921281686613978391484428676528168851145779047401620751747245524602308439877894880277531437875500713243776814971074929959754933743287175595348259923828544958984493715069044786032753591027689223307712656586806926521670622690044716267795209561276678729525255783614479483497649168587092020585059962885643570433515516077688015382169387306474342250910489396099955790021889488311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e02f8b1f292c5424ab07f1c93eb9c3037649a27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scr-bau.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ad049173d000004030046304402205cc2e6cae31ddf9ec590dff8537aafb90a79b0a7a6843f6fb2ba96f2962eed4302207835f94e6da30a6d8113e5867878aace92d036a6a8aefb90f4c677f582facf5a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad049172f0000040300473045022100c365c0ed94ba73e4522eb6f92404400202c5b83b30b0f4dcbf90f6ec901f607e02204fd759211d419537f390143cf144d9a1f0eeffd738a3ed88bac03421870e91e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0046df4d7d04d00cd65ef2aa68ae368f3ed287bfd6f4b05a95d208a26399007904fdd37c34811c6e78bd8612875981a0b7422d691052154fb9c66c9390b21256c8460ecaac97ef7f17ec4515b6d2692e4a1b409cf63c3d151fe75f9ae3e72d9a9534d207ae653423342cb0adff5f57e95f20c975132272550a4107335ee1998fa2660b785ca9e011d0e6a8b1d2739a07c737027b8334d938274cc05e487d6a0446cdb2f8a03d3f24a133882201f7808389a05da6f5a507c1ae5e9013cc9ae0cea2eaed96289d830eb2547060844a135f92d4105770f55e22449d3ea827de4369f5151da50af5a5e66356f7b3d0acf5cbe48a9c217449f8e027c3925249d1feca11