afd-nordsachsen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0f:ec:86:ae:20:83:9e:7a:53:f2:81:81:24:55:31:de:d0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afd-nordsachsen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:ec:86:ae:20:83:9e:7a:53:f2:81:81:24:55:31:de:d0
Serial Number (int): 353867776337354653711444211617805959814864
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:1b:6c:46:ed:ad:38:8f:0f:e3:0e:3a:42:58:0f:f4:6a:c5:11:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:ca:1d:9f:94:2e:88:1f:2a:a2:09:0f:72:9f:8c:fc:61:83:63:8b
Fingerprint (sha256): b9:22:6f:ef:31:b8:00:c7:4a:7f:6e:4f:8a:23:88:4c:21:4b:c9:b3:8e:f9:f8:80:09:92:99:91:3e:2b:f9:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate afd-nordsachsen.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afd-nordsachsen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afd-nordsachsen.de
afdnordsachsen.de
www.afd-nordsachsen.de
www.afdnordsachsen.de

Other certificates including the domain name afd-nordsachsen.de

(limited to 100 certificates)
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de
afd-nordsachsen.de

Certificate

The complete raw certificate details for afd-nordsachsen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353867776337354653711444211617805959814864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 21:48:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 21:48:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afd-nordsachsen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748961440002248150689788267659984127998126199337412689463107652232097827801823237177470642725153856325618652300910741443510614288897341085860721151143374558844774285219343747563402618786839024395855671115575520964263869169756761726336987050208260115256725030713022572559268023544272603527037542038219987522907473665436627102340176531663427666190632706975351208678906034011654292305712695983403429973990332816442275479059672443703481292169299693803587009054275441779370316622160931740614160944910782764711389178641751291113548253917191754299109496914281921843653330626793685360651945630014406078147096138782414720459894228663918897234848172399256204300510540643482783761857802951858735738439795679362488385187414400308208842680459762811554188400028030250794134171568281281403312801007427174346957620414946256757178269881103487234056777339001031384500788036159986609953845673760267823836566443757228665839351285012793155755008044248477897102563427103466581192067066637572003418454012937151217552175748689110371555524973663054043385688602007067321204535349124248440301872836035088504325632052993210291569284396911556251977375436027877558678039398231396835696500908530859599587167146862428029644578378757167890828026413245188016536198321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							361b6c46edad388f0fe30e3a42580ff46ac511c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdnordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afd-nordsachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afdnordsachsen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017088d699770000040300473045022100a3978a030c72b7ebc0da3ee66855ff9a0982f91d1ce563c104ef32a6e2bfe53e02204baf8335df3826817bd49f2b6b35ca909a2645b572dd358c5ae733f55b42fc06007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017088d69963000004030047304502204b34b7fe93b94020cca6253b4fe480de0b7e338bf9d18f3d9c5d5a7172dfcfd5022100b99b95c0565e6c985293e82a41017560d63a960858f969a3c30375cb61c62fba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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