*.klangkapsel.de

Issued by R3

About this certificate

This digital certificate with serial number 03:d5:b7:74:c3:31:81:5a:53:b8:d8:a2:e5:4f:09:0c:d3:b1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.klangkapsel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:b7:74:c3:31:81:5a:53:b8:d8:a2:e5:4f:09:0c:d3:b1
Serial Number (int): 334060856938096947742548429441588129485745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:a9:a4:40:e6:5d:22:2c:3c:07:a1:c3:f2:e3:36:11:d0:96:12:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:f6:f3:1e:50:9b:87:83:e4:3f:66:02:1e:23:63:39:2a:cf:80:f7
Fingerprint (sha256): ba:6a:bf:dc:91:89:7e:85:c4:67:a5:57:d1:cb:d4:85:e3:44:cf:ca:45:33:44:5e:4e:4b:ce:c7:55:54:ad:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.klangkapsel.de

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.klangkapsel.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ackerfee.de
*.ahk-pflegeteam.de
*.axelundmaro.eu
*.brunhild-hauschild.de
*.charitechorberlin.de
*.fritzlar-steuer.de
*.globus-hannover.de
*.golfclubbrunssummerheide.nl
*.kinderaerzteorchester.de
*.klangkapsel.de
*.little-something.com
*.mutigundfrei.ch
*.sc-rehberge.de
*.tuebian.de
*.wheels-on-tour.com
*.wohnungskater.de
ackerfee.de
ahk-pflegeteam.de
axelundmaro.eu
brunhild-hauschild.de
cb49i35ea.burkinart.de
charitechorberlin.de
chozahovdrjhli.tjark.pro
cloud.pma.mazza.cloud
crm.gullshock.com
dachsberg.kriechbaum.cc
fcb-fanclub-antiesental.at
fritzlar-steuer.de
globus-hannover.de
golfclubbrunssummerheide.nl
informaticore.moin-alex.de
kinderaerzteorchester.de
klangkapsel.de
lima-db.de
lime.hundeschule-tutzing.com
little-something.com
lvepihr.tjark.pro
mondkalb-zeitung.de
mutigundfrei.ch
nerfgunfan.de
ouzjgbjvcmqybqj.lima-city.info
public.hypnobirthing-vinschgau.it
sc-rehberge.de
speedycrm.hundeschule-tutzing.com
tuebian.de
urbex-sachsen.de
wheels-on-tour.com
wohnungskater.de
www.gc.askarian.net
www.newsletter.schulte-objekt.com
xjxwwsflnwvqcwe.lima-city.net

Other certificates including the domain name klangkapsel.de

(limited to 100 certificates)
*.tenwert.com
*.mqnt.eu
*.rokar.de
*.klangkapsel.de
reviews.lima-city.info

Certificate

The complete raw certificate details for *.klangkapsel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEt5lWOp6tglHwDBMGGogsLwMw3n6F
N/deFB69SHTxHUrDaatSHbWDGyvvcIbIFpQu6d14+K7w1Gtb4BU3BMrXCQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334060856938096947742548429441588129485745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 13:32:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 13:32:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.klangkapsel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b799563a9ead8251f00c13061a882c2f0330de7e8537f75e141ebd4874f11d4ac369ab521db5831b2bef7086c816942ee9dd78f8aef0d46b5be0153704cad709
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1a9a440e65d222c3c07a1c3f2e33611d09612ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ackerfee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahk-pflegeteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axelundmaro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brunhild-hauschild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charitechorberlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fritzlar-steuer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globus-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfclubbrunssummerheide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinderaerzteorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klangkapsel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.little-something.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutigundfrei.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-rehberge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuebian.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheels-on-tour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnungskater.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackerfee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahk-pflegeteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axelundmaro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunhild-hauschild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cb49i35ea.burkinart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitechorberlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chozahovdrjhli.tjark.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.pma.mazza.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.gullshock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachsberg.kriechbaum.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcb-fanclub-antiesental.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fritzlar-steuer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globus-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfclubbrunssummerheide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informaticore.moin-alex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderaerzteorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klangkapsel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lima-db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lime.hundeschule-tutzing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'little-something.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvepihr.tjark.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondkalb-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutigundfrei.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerfgunfan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouzjgbjvcmqybqj.lima-city.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc-rehberge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedycrm.hundeschule-tutzing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuebian.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbex-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheels-on-tour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnungskater.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gc.askarian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsletter.schulte-objekt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xjxwwsflnwvqcwe.lima-city.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab82827c5000004030047304502210096fea93bcee673d245b1b72bee44c35da4843cc0599d365ad7e62b35254e9c2802203c0ee77bc2c77ec6e078a33ce06c18c8ced9b0f50abea8599cb294fd175c125d007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab82827b50000040300483046022100c8bfe90c6676403467e6eb452f193e6978f06bb0b6a415a752f7ccbe631343e3022100e464672b8561ac7550eb8196d4447fc1ac5ab560ebe13170fb89e30212ca52ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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