tanjaschaefer-coach.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:5a:80:9e:d0:c2:8f:b4:60:da:aa:9c:91:6d:1d:07:d0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tanjaschaefer-coach.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:5a:80:9e:d0:c2:8f:b4:60:da:aa:9c:91:6d:1d:07:d0
Serial Number (int): 304673016749018848686259134154822335137744
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:28:5d:cf:a2:12:7a:e2:63:f8:46:ee:b8:f3:f3:ee:07:70:05:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:d3:49:10:90:39:34:65:f6:ca:ee:27:8f:e4:58:39:ca:02:5d:fe
Fingerprint (sha256): b9:5d:b7:cb:f5:d5:4c:9a:61:ba:09:4b:f5:c1:66:a0:4e:52:7b:ca:c7:33:26:bd:f0:53:b7:0a:e3:a7:5f:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tanjaschaefer-coach.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tanjaschaefer-coach.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tanjaschaefer-coach.de
tanjaschaefer-coach.de

Other certificates including the domain name tanjaschaefer-coach.de

(limited to 100 certificates)
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de
tanjaschaefer-coach.de

Certificate

The complete raw certificate details for tanjaschaefer-coach.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxvN/rvllCvw7k0TBoq13
P4abgW9oJu4wT6Mx7DV5yTT9v05ljztPhMwHdZk4QbmmBrX3IwrKgWD/+EOkHqKI
TCusTtPx53qj48U9Qw+r8wMsflSRMDHt4F44aIlF/U38h5mzUNtZhe13I2sgHoXc
ncfI5ZUakfyWqnM++wSt0Onz09/+Pi4NhD0TqANULXXe2IoWQv8pYCiWoLSJtkmb
AayYNKqmRHnB7Y0WBPrgP4l86N/RBevKdtzjqgWzBkpdkrmR3fZNUnsOL0xj3Nuo
MxQ3gH/lWGkKkep+GT+VKtGQn/sPIkkwUWJOjrao35FaGa5S3HAKOOXunfn73ZMs
tsQUEeKanoG8PRu4t22CBi4yn2MmAs8D+K/XYvcswHUZZVWFYIcfGrjcc15utHh6
wYz5Qu8u7HTqUhSrEWYO42KAa+JFe+IcQf5LZdNXClhKrLYKyzb9Bn51WkXC0O05
daY4Ur5Tk2vKfM8juGe3QP7EFuLBWkZ7uFrrRSn198nmlPiCSOptvjADT3u+QJRC
XRKH8WOivOtNMgViWc9REUpRBLQsROPHB8glW/e3wYLm+S5x4t9v03mvRJgtllvF
NlMPpyr1EEApY61cW1kva0FS4ABumIfkrALXbMLfYzteaCcdFsEBAgZNfL70ReQ+
P64saQo09xiFX1ImnVA/upMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304673016749018848686259134154822335137744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-29 16:18:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 16:18:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tanjaschaefer-coach.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811649948462797747397203723031091952736046723971973987323085301286668336521772895777124017940163679144923961005626361200333031235973860234578421381728318137897435786826564700991334738809165959626437952004107923668489774829685321803899283944861094138222835586359658804846932583730309700869411582611277910599312353878892511898004453222339115700491312956437916286497244051934907760799535691570533843138300983518534012308719062273124539653445108086876675654952399691715331924775524053374834828405795462906978451035247659813594993244141430874715698891702473900209106334467465935047251692352727869703524614988196808108537983956264700092844141268569577219019954194300753337057400129344108630163404974859332048813956799862758722400573343790795784576910380818868754997021709549069874708726090407903501340511538443524149523303043384050617564536155963609192541347260274703662747737982343288635056900591739294825742783494626350782588956287280352614207093433460444318751166264544805380131652227216026218534212488391047947634163609074775708676790847030424760425395008922624572685708330943017368903246999782404520753500715879143992717436715735405839608887538469112437889865590982922736655203040188430307287701919652818292914138182885583431455980179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40285dcfa2127ae263f846eeb8f3f3ee0770059c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanjaschaefer-coach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanjaschaefer-coach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167faf9000a0000040300483046022100f50ba4e258d6991f4890762766ae2421ed16cbd6450e4f1b01f88e002cdba18d022100eff81044b23286b4d33cb968a1ed638f701a853c5246828e0991a121eff4f97b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167faf8fe7e00000403004730450221009a6ffde4c5740b2d9933a9f59c8f68b516f769eccba288cf48596efc3029e7e802201a39349b3bcaae7734b49f15a0c3fe48e189ae0b945931e936cb8a42280fd17e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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