photoshow.test.farafin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:d4:fe:37:23:25:28:ce:2d:09:b0:6f:7b:27:6c:83:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=photoshow.test.farafin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:d4:fe:37:23:25:28:ce:2d:09:b0:6f:7b:27:6c:83:3a
Serial Number (int): 298710752086488516633528381181071259894586
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:a8:ad:ea:31:8c:c3:7a:49:5e:82:89:b7:9f:eb:51:78:33:5f:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:6f:4e:bd:e1:a2:f1:9a:10:18:73:0b:a6:88:8c:45:fc:46:e2:a5
Fingerprint (sha256): bd:d3:4a:e2:9c:73:51:34:ca:d7:65:00:6c:09:bb:d8:de:90:a5:2a:5d:e4:5e:23:ae:58:9f:f1:1c:f2:91:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate photoshow.test.farafin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for photoshow.test.farafin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

photoshow.test.farafin.de

Other certificates including the domain name farafin.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for photoshow.test.farafin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298710752086488516633528381181071259894586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 09:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 09:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'photoshow.test.farafin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820721625989422540257842650389405379718984944242038093005817322803585045918972502736366678737490829641309967489187107386225441022496351299070804698495486432080743285382123550295104127251224593635280613962250435315109464415209740393070193240737237293590507017929191362275898486212264168695223008261039392877284365676629725452476937552718469741989524626760424447753729363172595333640244306675458170142515343224806138300813189068520244968274065609789083492055675285507571623536633346146026390784344811131049440804665268671367332822595671331019390643692738998213142413733050115699783841460496018442786890538517792209687709078174191445339485925849452879372693759813308655718975428744862349725846335887881845246874116420710573097329421574874132240607735035063152068256356821439997603662939865876980074565969215078378675979073319759833332787795768314087794009614693202303231726110147318820364023256631005753201642208345547806783812720443166274661291503103272113621117157675858869556553620262834388981216656866282499252154810182347327169063608841098431249965759083361963242450198350220880420621200501915082852848212076891196517053922361064583039602800349259712778981282809575180694573804276583086824610639797859215199057206775373444612744633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05a8adea318cc37a495e8289b79feb5178335f36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshow.test.farafin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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