dyn.r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:1a:1a:ae:bc:c9:bf:41:6d:e5:c2:8c:97:85:6e:26:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dyn.r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:1a:1a:ae:bc:c9:bf:41:6d:e5:c2:8c:97:85:6e:26:7c
Serial Number (int): 284510757217609888462454071017147963680380
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:a8:27:c7:b9:70:3d:fc:a2:9c:2f:3b:67:06:5d:18:8c:30:69:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:ea:ab:37:b7:c8:53:dd:6b:45:69:7b:87:c4:c1:93:11:91:30:4b
Fingerprint (sha256): b7:a4:14:36:52:99:48:ac:e1:ed:00:d1:4b:cc:8c:9b:c9:16:ed:7b:63:ea:c5:c9:67:36:4c:3f:55:fa:d3:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dyn.r13t.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dyn.r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dyn.r13t.de
dyndns.r13t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)
oc.r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
mail.r13t.de
jabber.r13t.de
nc.r13t.de
mail.r13t.de
blog.r13t.de
dyn.r13t.de
rc.r13t.de
mail.r13t.de
r13t.de
oc.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
r13t.de
r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
nc.r13t.de
r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
matrix.r13t.de
matrix.r13t.de
nc.r13t.de
matrix.r13t.de
rc.r13t.de
oc.r13t.de
www.r14t.de
oc.r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
blog.r13t.de
rc.r13t.de
matrix.r13t.de
r13t.de
kibana.r13t.de
graylog.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
mail.r13t.de
dyn.r13t.de
nc.r13t.de
matrix.r13t.de
mail.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
rc.r13t.de
jabber.r13t.de
r13t.de
blog.r13t.de
matrix.r13t.de
blog.r13t.de
r13t.de
r13t.de
mta-sts.r13t.de
dyn.r13t.de
oc.r13t.de
matrix.r13t.de
seafile.r13t.de
r13t.de
r13t.de
oc.r13t.de
dyn.r13t.de
nc.r13t.de
nc.r13t.de
oc.r13t.de
seafile.r13t.de
oc.r13t.de
matrix.r13t.de
oc.r13t.de
oc.r13t.de
dyn.r13t.de
matrix.r13t.de
matrix.r13t.de
r13t.de
oc.r13t.de

Certificate

The complete raw certificate details for dyn.r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284510757217609888462454071017147963680380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 21:55:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 21:55:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dyn.r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665310698953384093142853725943001010090030373633859882721993496893454326790949823486087280199522569499014770690330655366284359152461942343951231308542796354397814857709492038833336173811110540443109160188728446795608902926510924287442786913722070826581205077752417558457971458441818392059252248363950669502522792520117027289619682082350660383422244387934023661718905116932638464831686772306078072340210353564933747407730214824159142403689362552364060904919916956371436614940212071746462972276492119678701525274608111709094458557174603243528741168207232000903707260606999722747246336049157084381816608488706213733506336343868227158373803086011835992068467113615697318671342072216096476264737791836119926495510212197531339062433334283907730166837903492182782318473316245512634416334543443790224083457121137635367191643273971417584650001916953191824783635381636052666901538567718662361075097084397423567796778550805302818170180745697055870177210418317870601706855544527478964680589243028178266194570754632949258765567289431811514434557194403216651960175670448291900047833821431886099332933278455531054856165228369581458413413912415269868462616756818995390001378951706409067574514245178834500866009871549290982495617879121314167384502527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2a827c7b9703dfca29c2f3b67065d188c306945
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyn.r13t.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyndns.r13t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001691245a5ab00000403004630440220377410eec5e11d87167305e340733f7295d16d9a1e9bbd23a611c31b930d0c2d02204f60a34bdac8507becc38c4b76da7dad67f88b5de112143e039553300ce58a4200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001691245a6050000040300483046022100b3c79056bfe8e78230a3e101eacc8d82b8fa70aa6dbbb76c65e55d7c7c85d2d3022100ed0729dc5b21ed263b9413ec857eca32f1b6d220bfc6933856231ac2cfc5faef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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