*.hrc-alt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:57:97:5e:12:0a:8c:b5:5e:6a:ce:1d:24:d3:78:7d:e9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.hrc-alt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:57:97:5e:12:0a:8c:b5:5e:6a:ce:1d:24:d3:78:7d:e9
Serial Number (int): 407774704351719080293754079912137246408169
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:9a:a5:08:29:12:a3:84:13:5b:f4:2f:74:5c:55:69:31:90:e3:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:20:83:d3:80:58:3b:ed:42:8e:0f:0a:f9:9b:64:5e:d5:e9:17:6e
Fingerprint (sha256): bb:f5:e2:50:d4:b0:4d:37:b4:2c:d4:6d:3c:2b:fd:96:70:4e:35:f4:62:cd:da:55:00:b3:a3:6c:f8:66:d2:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.hrc-alt.de

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hrc-alt.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agentur-kreativwerkstatt.de
*.akupunktiermobil.de
*.boulefreunde-gernsbach.de
*.chemeleon.de
*.deep-platforms.com
*.dinner-auf-gothsch.de
*.dinner-for-one-original.de
*.dlmf.de
*.echt-gothsch.de
*.familie-genssler.de
*.gemuetlichkeit-leinach.de
*.go-entertainment.net
*.hrc-alt.de
*.hsbau.net
*.kosmetik-balance-ilsede.de
*.kunstkai.de
*.matthiaspilch.de
*.rittners.de
*.sensorled.de
*.wpp-events.de
agentur-kreativwerkstatt.de
akupunktiermobil.de
all4you.co
boulefreunde-gernsbach.de
chemeleon.de
deep-platforms.com
dinner-auf-gothsch.de
dinner-for-one-original.de
dlmf.de
dukic-ott.de
echt-gothsch.de
events.dlrg-jugend-rn.de
familie-genssler.de
fun-arena.com
fun.icekey.de
gemuetlichkeit-leinach.de
go-entertainment.net
hrc-alt.de
hsbau.net
imap2.fliesen-keil.de
kosmetik-balance-ilsede.de
kunstkai.de
matthiaspilch.de
postmaster.fliesen-keil.de
public.woeschka.com
rittners.de
sensorled.de
wpp-events.de
www.ferien-in-dierhagen.de
www.renespeck.de
www.schach-korbach.de

Other certificates including the domain name hrc-alt.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.hrc-alt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6OkJ2L9WuIg+/lXDxSD6cLLLoZMb
hcBVf8rN4ZvT1apLbEm+sZPjOYazNCvPaMsN2etJcDfBiyZIzk9avnxUZA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407774704351719080293754079912137246408169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 08:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 08:21:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hrc-alt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e8e909d8bf56b8883efe55c3c520fa70b2cba1931b85c0557fcacde19bd3d5aa4b6c49beb193e33986b3342bcf68cb0dd9eb497037c18b2648ce4f5abe7c5464
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9aa5082912a384135bf42f745c55693190e3b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agentur-kreativwerkstatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akupunktiermobil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boulefreunde-gernsbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemeleon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deep-platforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinner-auf-gothsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinner-for-one-original.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlmf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echt-gothsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familie-genssler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemuetlichkeit-leinach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-entertainment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrc-alt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbau.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosmetik-balance-ilsede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunstkai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matthiaspilch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rittners.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensorled.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpp-events.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentur-kreativwerkstatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akupunktiermobil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all4you.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boulefreunde-gernsbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemeleon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep-platforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinner-auf-gothsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinner-for-one-original.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlmf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukic-ott.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echt-gothsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.dlrg-jugend-rn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familie-genssler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun-arena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemuetlichkeit-leinach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-entertainment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc-alt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbau.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap2.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmetik-balance-ilsede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunstkai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthiaspilch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postmaster.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rittners.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensorled.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp-events.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferien-in-dierhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renespeck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schach-korbach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa2719ea70000040300473045022100c0d79c069f9701d7eb8735a60f1108593ba1f21bf2e0a58c5e841787c210f38702202d3aec19699731f64eb7d567ef99767b9af9f6e6f6e700925f4fdc24c521030c007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa2719ed6000004030046304402205b2ff963461c6d25cb2bd35781c11a0bfd1bfa70ea2b0bdd961a33f993afe62202200b6ecebd364db5185d3d87735be84f86e0828a85ca0e9de2a63fa895894d67aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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