*.christliche-jugend-buende.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:42:a3:c7:4e:cf:2b:64:44:77:58:e8:64:1d:1c:36:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.christliche-jugend-buende.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:42:a3:c7:4e:cf:2b:64:44:77:58:e8:64:1d:1c:36:28
Serial Number (int): 340711228722412571208491005095142038976040
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:dd:28:b8:ac:75:5a:6a:a3:16:ae:56:6f:0f:25:11:06:6d:d6:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:75:54:93:f3:32:4c:e7:c8:e0:7e:97:79:04:a2:e3:75:d9:ce:a0
Fingerprint (sha256): bc:77:85:b4:99:41:bc:9f:55:38:c9:8e:08:1b:02:d4:55:d0:d3:4e:c6:ca:df:6f:e5:a6:70:3b:bb:38:ad:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.christliche-jugend-buende.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.christliche-jugend-buende.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.christliche-jugend-buende.de
christliche-jugend-buende.de

Other certificates including the domain name christliche-jugend-buende.de

(limited to 100 certificates)
aekifisjiawwlpk.lima-city.info
airport-gunes-hotebeta.beautyled.eu
*.scr-bau.com
wp2.woeschka.com
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
unitedbees.com
*.christliche-jugend-buende.de
*.christliche-jugend-buende.de
christliche-jugend-buende.de
*.christliche-jugend-buende.de
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
*.christliche-jugend-buende.de
christliche-jugend-buende.de
iool.de
christliche-jugend-buende.de

Certificate

The complete raw certificate details for *.christliche-jugend-buende.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTe6ChovxAbuyYkuJGMm
g5hqlfpLWMsvQfnyC0m67Wac2IP+O3feovRIXE00OUxTvk3g9QQpAwzwlPI/CSm/
Gg6lNxQQp2885aB8jPo6Hm5tAaOBmOThOO3juDO33KbP5Pv/PR3BfdfDIOvWX4Ds
3PKl2GwZHHXpIXD6eSnt9WrgXsrDV7xzx/abQYTXJr7wrm4tOIgcwJt1TdyRCzDT
8xYGKk4NhzbYKBkWjpi+XK1CsRDEVnpOvQbvb3q6npM6miaGjJBkP7kkDSjpsnnS
hqiYRfg+CaH6siUgutFP2FnLoyz9BKxtJ6SEca7c001jOnZEfkxsKDNUDsyR6dvy
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340711228722412571208491005095142038976040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 03:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 03:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.christliche-jugend-buende.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19846893747839406261768817080518180179202175407058442483975179840124189432092930431493447155365171310027461627137146504906074281210448943458907775019953677517022560106951973130666948424225947286358195426526076247355539412959640114313009871321450152299929880241871618293840615539690325031882769365790727543048439183696196820136254013726408447178617241563045660976897974179001951397713255934360666684020068758318983344234181817714415974900086812325096062853941093477953389177956281440982631400464811385833510130013032554767112114974237412239031740350490278104198991524782942778833088226315074981355456957891121036128883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70dd28b8ac755a6aa316ae566f0f2511066dd697
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christliche-jugend-buende.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christliche-jugend-buende.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a863e6b6d0000040300483046022100d1119662a775f20a0d58765f63f390cbe76dd4fb6bcce462c0c89c0181c0131d022100d47262fd496d4968f55b12cf98e8bf88d1b74d08d5cd615f74201091ac941c24007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a863e6d46000004030046304402201749e1ef010a5c276f395ccd58e022f9988f39750a821285ca4ee2a777e7b64d02201a2a0374924b20c57c530b01628ccdff8689a9cb5ad9ab3c2feb0e856bb0a566
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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