www.lotharsblog.de

Issued by R3

About this certificate

This digital certificate with serial number 04:63:f5:30:c1:8d:84:b0:43:6e:4a:1d:12:eb:31:bc:80:ec was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lotharsblog.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:f5:30:c1:8d:84:b0:43:6e:4a:1d:12:eb:31:bc:80:ec
Serial Number (int): 382463012067147698059914656131692575359212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:48:52:02:88:05:d8:89:a3:5a:6e:cb:7d:de:d8:32:d8:64:fe:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:d1:a7:f4:45:2c:d6:0f:26:be:c1:8c:06:0a:6e:33:53:b0:5f:f5
Fingerprint (sha256): bd:6c:4e:b4:86:00:b1:c7:77:c0:ba:2e:53:bd:a6:2f:ea:68:b5:ae:02:03:dd:99:6d:b1:47:00:e3:09:3b:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lotharsblog.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lotharsblog.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lotharsblog.de
www.lotharsblog.de

Other certificates including the domain name lotharsblog.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lotharsblog.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/jVpr61Ia103CZ71Hb
QeEGrfC7oRl6dWUCsNM+sHni+Jqxw7FVr7srFIxYmjBWyjOifDG5DoA/pyPeRpep
qacQ15aPAAVKnWIOtTvFicTh6UI0Qrhtygc5BRQQk3RHfa8nj/Svcv2pUpwiukKS
L1VP+NM0T3UfeTVTsJaOfdujeJyqmLMPLoTaUM4gRHglRI5w5wunJAbgPkBLXgVV
cYI5l+/qHRIbz+eyp03O3BE82ik9JNa0o+tTN4rhkLd1ZwTexTYXuNUuuXD8V12Z
5KnxlWcf0bQiQiFlHlIsuqo14crQufuVdLAd0Bs53ZL5kP8+FKsOBcC60t8WG3BZ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382463012067147698059914656131692575359212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 04:13:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 04:13:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lotharsblog.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24876780762960252743611379734069658737443433185249487401738978328063366465501705662293808531457045777053772049381811656630388876483692630639837413431372129760172832906920998255608180276095041628796903097296804735159027267469686252122492995371271802901566976322286886842156873927713494641911752474960389069188735822021277713454724881319989952959008352336327723111094051868783068315523987452000631443730640799939510492209487992377030135132321927462012067513658243285097923060696768576167343010591377826988610087779460560235601919120855189683062555026174205371860505251901753763276297298283498056258931463607646378023219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b4852028805d889a35a6ecb7dded832d864fe15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotharsblog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotharsblog.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189006c26290000040300473045022100bb5a6f9bd7f764f366b8ebf34e1b9331b01859d1422a0552912822275141c792022012f9f0a36abbc5adfa2dc79c60ff766b179a714e2b56692cdf3ce2ea4fcf711b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189006c2655000004030047304502203d8f65c9742b4cf15c72e9660f4a9340e1ab4d8d23c954b34241fc1be85406170221008d3fea17989ab5e0a24b03029c0ae64994e0b236c73e2cf7c871851f34617edb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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