sportfahrerwoche.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:23:4d:43:88:3c:1c:9b:71:4b:d6:4d:15:eb:7a:7d:05 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportfahrerwoche.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:23:4d:43:88:3c:1c:9b:71:4b:d6:4d:15:eb:7a:7d:05
Serial Number (int): 278738182664674258044953683377952107691269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:d2:55:05:af:41:2e:da:ba:ca:83:fc:bf:2b:ab:3b:c5:f6:49:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:8a:42:0f:92:87:ab:a0:e2:f0:d8:e1:8a:da:98:1f:c2:8a:8c:56
Fingerprint (sha256): ba:2d:19:c1:a1:26:91:41:dc:bb:04:72:9c:8f:ce:ad:94:11:19:4b:3d:c7:25:d4:c4:88:2b:cd:3e:0c:4e:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportfahrerwoche.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportfahrerwoche.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sportfahrerwoche.de
sportfahrerwoche.server320.star-server.info
www.sportfahrerwoche.de
www.sportfahrerwoche.server320.star-server.info

Other certificates including the domain name sportfahrerwoche.de

(limited to 100 certificates)
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de
sportfahrerwoche.de

Certificate

The complete raw certificate details for sportfahrerwoche.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278738182664674258044953683377952107691269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 19:44:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 19:44:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportfahrerwoche.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804889860634112662781879971307217092126148001258600594471218647094361892460215960462588630684615727561841241364941784939368286707038233803422886472107296468309963203841306639830101411396518042557752960427734740217906895031547846769223214335673594200455609235584101843533942602659875618025229247685928520355664949227248124098515478420758675107685274249262951969166029561019673907097141675285780135295304596303625854362635322783755053957353182231960821553668808620533328908200734842509015188037674102052511238395247546455122481778907973351748541381189015691037308864361298460383905469369805517721122669297725903409141289982636933486910442905777545671487206938038089500278493969226905274581350751564999732531451066607866433591046165500218495659995638967227462860185263347939337501140191892740171673448080899798537422252377470806868494810346882918808702882942597327213568544969842937680173871652068451625097861859809967449083863945786869802912533822379980026935367521294330412008141243724546483442106788444311924730797862558288871616207655499700441580554447556757916993450425121622905247680780905539081953453547619158333784240070672130003184403381822016686038505447686740804098184038267419814187504989996395444718312844046875069127875853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cad25505af412edabaca83fcbf2bab3bc5f64933
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportfahrerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportfahrerwoche.server320.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportfahrerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportfahrerwoche.server320.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a74a7b3e0000040300483046022100f178953d9cc45a38f478ea815d91fe13978341ee911371835a66f30b299fbcbb022100a45bdadd0af86fd41924d9c9c9d668e1b07e2917fa77acd08849753eeeea0ab0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a74a7b3b000004030046304402201a5ff52622a07095faeec09d3480e31f49294b9f4b258705da76b474458d94ce022067160b44eb0dd7173998ae85b9735f9f07d38acb8b74b765fbaadefa2295f03a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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