mdm.vds.cgrx.de

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:d7:9c:8a:82:22:16:32:18:fc:05:dc:15:b1:d3:74:f9 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mdm.vds.cgrx.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9c:d7:9c:8a:82:22:16:32:18:fc:05:dc:15:b1:d3:74:f9
Serial Number (int): 401819789793393810986632451855243466208505
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 79:d0:34:9c:7e:97:1a:06:a2:19:38:f5:ba:c6:74:5b:45:40:94:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:89:da:97:98:94:d9:e3:3e:7a:f6:d9:ff:d6:f1:cf:0c:79:b2:0a
Fingerprint (sha256): b9:d0:35:e7:8c:2b:fc:ae:64:a0:1f:6b:af:dd:33:5b:33:00:ac:d0:42:f0:48:72:03:78:d5:01:77:f1:bc:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mdm.vds.cgrx.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mdm.vds.cgrx.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mdm.vds.cgrx.de

Other certificates including the domain name cgrx.de

(limited to 100 certificates)
cgrx.de
cgrx.de
cgrx.de
xbsapi.cgrx.de
cgrx.de
xbsapi.cgrx.de
*.cgrx.de
*.cgrx.de
cgrx.de
*.cgrx.de
mdm.vds.cgrx.de
*.cgrx.de
cgrx.de
www.cgrx.de
*.cgrx.de
*.cgrx.de

Certificate

The complete raw certificate details for mdm.vds.cgrx.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401819789793393810986632451855243466208505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 23:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mdm.vds.cgrx.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864254819331475781198960646246225626826027475413039089595840228192644238096990176094037253939462629100661018723181667730909997540901409272529857961887887521206631619509724853888884762186907352148957361522693426426721088618953268609292260502926867355508206918342094551828558146025988616443941563299822929075895287338468802562644996736497821666352227818362852952492747913229467917262850878850956227749547324908062963372940735189991143830991303130771877451122364973064275967849219276823844775261207276383078089250816538198764943349171594551503617186549472081680348324047054051032292762357781151369603140250892886703995695974522607546920487818040296142014045074127644867113709713378203141572432165738671192614818845322294308936685299966146391375777390669356587144276829809409068833865450179043883962012253034619781822008425920596699169524051630843706053435385760445755658087639449914236092547563234784973305519189560254513615966007354265479409794022356146609516196766541313147864790177435491874435514695445397652439245755349337137294794364441714071418169227162252933770892556542445310574577857729427542816140310244595316316946643284560702481376042399922903257956461478347366068773275238647824602193894518033405666825218268172699788808411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79d0349c7e971a06a21938f5bac6745b45409447
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.vds.cgrx.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064a218b5fcc8d728f311e4241326f4817ff35fb6e5cac4be4d89fc308bd6ca5e835e7bb24c44edc455ef5726a0531bbea952ec99fc2cd622a8dee28423e0e034e563849ef247af14437859ffd62d6ad1cb36798a11ed86a3cdd1a5c0d81f5a7f297eed746f6a5338f8b2dc49ced5d6d53b03990c1c627b683736d503f370fae9fbddf0d9d29404e0d17f4b392a338a3708bbe17babc8b69582d02da2ac9d97f7626a67d4b8f3a61cacba762f6133b2ae8587d90139fc4f703660caaa575dadb3e916b6867ba80060c40b8817d3d7a35e8e363e0f286746b1236ce8702e06075774794e19703d2a43517bdbbb6679e98436f5e61d49adfa2f213261972aa143df