www.timo-kohlstedt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ce:0d:7f:03:0d:00:94:56:59:f6:6a:17:56:e4:d3:7f:78 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.timo-kohlstedt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ce:0d:7f:03:0d:00:94:56:59:f6:6a:17:56:e4:d3:7f:78
Serial Number (int): 418565250760277922141852124411060511014776
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:16:6b:4c:08:97:b0:3f:11:c7:1a:ed:75:7b:f0:53:11:ec:f6:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:67:60:23:76:6b:60:73:64:bc:ad:90:ec:9a:62:d1:b9:34:6e:9c
Fingerprint (sha256): b5:6a:42:5f:5a:86:db:3e:47:ec:2f:4c:6e:04:f1:cc:1d:f7:85:4d:2c:77:bf:df:29:b5:33:f8:d1:c3:d6:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.timo-kohlstedt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.timo-kohlstedt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

timo-kohlstedt.de
www.timo-kohlstedt.de

Other certificates including the domain name timo-kohlstedt.de

(limited to 100 certificates)
www.vitamine.lima-city.de
ignisanulum.lima-city.de
www.fcstainztal.lima-city.de
*.heger-bischof.de
www.huetten-fescht.lima-city.de
www.timo-kohlstedt.de
cloud.timo-kohlstedt.de
www.html-css.lima-city.de
www.kubilay123.lima-city.de
www.ninjaempire.lima-city.de
vitalos-rastatt.de
www.google.de.cool
www.timo-kohlstedt.de
timo-kohlstedt.de
www.freggel.lima-city.de
www.juerik.lima-city.de
tom-g.lima-city.de
florianreithofer.com
pon-vom-brockenblick.de
rfv.lima-city.de
www.hohsoft.de
www.timo-kohlstedt.de
*.rps-fink.de
frie.de.cool
www.rambozo.lima-city.de
grillhaus63-magdeburg.de
musik.timo-kohlstedt.de
app-list.lima-city.de
membership.hutch79.ch
*.ergotherapie-schrei.at
www.great-gen.lima-city.de
www.cloud.timo-kohlstedt.de
www.timo-kohlstedt.de
jovo.lima-city.de
singelinsl2018.lima-city.de
www.timo-kohlstedt.de
as-projekt.net
*.rps-fink.de
sc-vallendar.lima-city.de
abcdefghijklmnop12345.witzepedia.de
candytop.12hp.de
*.timo-kohlstedt.de
www.cloud.timo-kohlstedt.de
wolffelix.12hp.de
www.testgedoens.lima-city.de
trapi.de
linderonline.com
tickfighting.de
qa.hutch79.ch
cloud.timo-kohlstedt.de
cloud.timo-kohlstedt.de
trtckerstpbsntm.dubistdeingym.de
www.juerik.lima-city.de
www.timo-kohlstedt.de
raki.wernie-de.de
mcleaks.1337.pictures
www.timo-kohlstedt.de
www.timo-kohlstedt.de
www.florianreithofer.com
www.timo-kohlstedt.de
foto.lichtstimmung-middeke.de
igtesting.lima-city.de
timo-kohlstedt.de
www.redirect.robert-k.net
blog.timo-kohlstedt.de
timotest.timo-kohlstedt.de
xnbhlddxixinxdd.finio.biz
www.timo-kohlstedt.de
timo-kohlstedt.de
www.timo-kohlstedt.de
www.cloud.timo-kohlstedt.de
www.timo-kohlstedt.de
www.huetten-fescht.lima-city.de
www.moorjockel.lima-city.de
mottenfrosch.de
tgkm.de
blog.timo-kohlstedt.de
www.julias-zauberlandbabys.lima-city.de
www.safeweb.timo-kohlstedt.de
blog.timo-kohlstedt.de
cloud.timo-kohlstedt.de
blog.timo-kohlstedt.de
aboutus.lima-city.de
www.timo-kohlstedt.de

Certificate

The complete raw certificate details for www.timo-kohlstedt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+kZPiLc/jj61O5ChZn3
MUSPLd4p1YlUzkl9duXmSCoYrU3Ar8b8aWZTWpOT9m2AyUvBHoSuy7EoIxZerL9t
WoLmW/jmxYc0pEI+B9SjNqMzrhD6a9faLNCw479k7gEsztTsjJ9BGrdJCTanCI2i
GzOa58442CIWVr16oBCG66ieWRuIxZAcJ6k31o6O+Sl2y20ZeM4c3N/ApxczuDE9
ddOVICBDBTE29mq7o2/+yJQHDv3Z4dzqzeMV437l52YjqrhDzXkxq8Jx36pGlX8B
ztlR5XIoD8CDB+b673hUqTsTrMD8GYdjpB3sOMeRym0akP+OxgMrOI2bAhLuYD0s
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418565250760277922141852124411060511014776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-15 16:25:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-14 16:25:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.timo-kohlstedt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28771040433178092634161792430559529255697018849395572500947977765319825436981173954346112886251407252481080952461416308798772885843622802617143808285705907454247650630242681028892398247007257923540883740866866559040019150984761871242029783305683230481473991826017436223244716212676805377959427491094442161096617331306929377760746766330454834303831200372896459358238860265838508251514776427711600013946906502449180684630029169689755135211320573109723856146852761665611830232199408273728776910162200762878171505524827903677380045724828959082058887373546596159155134878549502265004344548757560273333965942382733305916577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57166b4c0897b03f11c71aed757bf05311ecf64e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timo-kohlstedt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timo-kohlstedt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162ca56b4e8000004030047304502210081b5855a95781891e3a994a8bc4677b73b486d0d5ab4616d0f2a360ebeee700f02203cd52e6bac0494145b92ff82a6c246d35596f9040bdac98bd2d105ece3500fe6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162ca56b4d3000004030046304402203f4bca0696648a693e24f463234d92493ac984233e220e1d01a955f18486f322022042263f178b1d824d3ce0f015c90afb2209df61ce3e44a97c77d6e5e146634014
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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