peyker.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:af:a5:f6:8c:44:a8:68:c9:ae:e4:f4:fe:f7:1b:f1:ba was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=peyker.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:af:a5:f6:8c:44:a8:68:c9:ae:e4:f4:fe:f7:1b:f1:ba
Serial Number (int): 294918006382362681708959274324141174157754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:23:7a:b7:f3:08:6e:80:3b:f0:b0:a1:0e:e2:bc:09:af:b7:35:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:4e:ac:9e:d9:6d:01:1d:b6:45:95:20:db:63:ff:6f:1c:a8:bb:8e
Fingerprint (sha256): bd:1a:7c:5f:50:71:25:c1:35:00:0b:88:9d:61:25:a3:5a:12:44:30:7c:ed:5e:68:a9:b0:3d:43:15:3f:e0:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate peyker.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peyker.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

peyker.de
peyker.server320.star-server.info
www.peyker.de
www.peyker.server320.star-server.info

Other certificates including the domain name peyker.de

(limited to 100 certificates)
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de
peyker.de

Certificate

The complete raw certificate details for peyker.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294918006382362681708959274324141174157754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 19:50:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 19:50:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peyker.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746914242844534527815796057222660577463761367500955445759879189261105396546117670337214693749619748841881950274970022487177947599336869896594732953100661618854308990931682732193990043239174236129639820540568596568040353984460582085274673304791327867614516498290744514741088513909208494827495700432420445432900998189716231709796666630749738215536653852877010338013085971960127539230056089904692152854066514590374807772511251735831908429398592065761378017101484671689812711907672999489976947785077286831578699626606158004200309583927972977198006642820683875787670067485686321917957418193125522817665707866107985541763271416587978550419328300348630160651898268313580753438243717278928579926737928300508782570831082437746331505724596150933507761562004438618146651965920517016909907817493969162600386881505855167913284944013176250729955920208608441352161168977096518415211665067934803475841741848465371358200222028792486078524811441803304028840579164521532742717255261164008348124744129684445706534012284486809373856741284086747994525373762239086779070583895566250782197524908594691394673324987543437305988182554677474308683452951845653742441503481020577998325550043960136535896098507609912884378889758577940511242258946135222079237982457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81237ab7f3086e803bf0b0a10ee2bc09afb7351d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peyker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peyker.server320.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peyker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peyker.server320.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a7503413000004030047304502203d8210657f344a295e7ca27825e63fd21719d539a7a239e93612c204f82f59fd022100c180b46f759501358308fefd5db02e12d4bd8ae1a1620db42d2649d013ca35d300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a7503417000004030047304502203548af6f52e5d7ad6801c5472c2c5bbb2f53895e32b297bf8179f5de1871e44a022100b8dcc972aecf392bbc31e7f148f2e48329a9628f2cf43ad7ecaabd33e9bf4def
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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