www.elbe-weser-sanierung.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:24:d6:2b:46:c4:7d:df:c6:b8:1b:19:4d:6b:e5:2c:27 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.elbe-weser-sanierung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:24:d6:2b:46:c4:7d:df:c6:b8:1b:19:4d:6b:e5:2c:27
Serial Number (int): 309705918135180380743634149898163432270887
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:f1:0a:85:72:55:8a:37:f9:96:4c:8b:54:95:8b:6e:a2:b6:da:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:24:f0:30:6d:d6:ae:ee:51:8d:ff:84:66:9d:7e:0a:b9:15:35:55
Fingerprint (sha256): bc:a9:8b:c4:ee:42:86:5e:a6:81:5a:5d:77:56:fe:f9:de:cf:56:37:c4:b8:f6:d2:51:ed:fc:a8:16:29:ec:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.elbe-weser-sanierung.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.elbe-weser-sanierung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elbe-weser-sanierung.de
www.elbe-weser-sanierung.de

Other certificates including the domain name elbe-weser-sanierung.de

(limited to 100 certificates)
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
elbe-weser-sanierung.de
elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
www.elbe-weser-sanierung.de
elbe-weser-sanierung.de
elbe-weser-sanierung.de
www.elbe-weser-sanierung.de

Certificate

The complete raw certificate details for www.elbe-weser-sanierung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYkeScnYDlSB1qwGHMss
JhS43tZF5gEFRMWz/Om8pocFdNdq2HCEczhlvSLYEWiwKvubxQSMkzhV0SMTqfy6
IqdyGcoGKIs8KSZJ3vfkoLxdqwokMJVk4ZjkIYsPJL0bocsOmMIwFAx+rlT6JRik
UOPlNc9RtiM03GWUM8onPiz14xR0rBlEA3Rnn2kHZubcUl/uDIzWISFZbm8JZNj7
fux1hUEugoAlm8wzR91yKp8xpBpqZwHwIdO0DVWthEbM31tB2a+v+FSfEiaDHeCN
Bi05Ymmp8wa2lk72C9Ek0EqcmjJKcfhpUYZlX+yqU6pwIBUvOSSrXtgA+zFZ9rL3
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309705918135180380743634149898163432270887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 10:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 10:57:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.elbe-weser-sanierung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18372169780493553125148629733634395709568145599691120316256119516416649975540598796986810868849323933634472723129085366736860876445838443875511107935543290291349527832164083537733389138173072651813314020614939656099526336155485030860306858604046969687012787642889046119907166779082277846233485137819946404148174647215047727853485207015223010432773157182134860475664165718609501834655226790039307239083339975822062089343923067768718830899544170970044321829122523629596912994178542892678896579052002132336100771593594877124973859252973762906046327652493640420063809154933466792320617542671234793629343833717865090054027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4f10a8572558a37f9964c8b54958b6ea2b6da05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbe-weser-sanierung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elbe-weser-sanierung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eefabd9b10000040300473045022100b6eb665d74ee0b0a50016a11ade485bfb0185fd44ca199bc96b1dd35ed99bf3f022074da91d135da1e60209bb57a5807d45c0f8f9327467bbf1f1500dbb1b08f386a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eefabd9a4000004030047304502204b82fcd8e1911acdea8f8a27853d58cc652bc26e9129ffc313253f84c4cd44f2022100ad86ea2660d46ba72474340be590638ebaf6e3ae3219f222d24ab6e055c1d493
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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