clubtouristik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:4a:0d:43:b5:e6:24:44:8f:61:56:d2:95:dc:9f:f0:a2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubtouristik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:4a:0d:43:b5:e6:24:44:8f:61:56:d2:95:dc:9f:f0:a2
Serial Number (int): 270622913447026289437834863791210143674530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:19:c0:da:87:b2:50:90:01:b9:30:cd:6f:5b:26:f9:9b:3a:12:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:bc:40:79:5e:0a:c6:45:44:6c:20:9c:c9:a6:79:58:f3:1c:d6:9f
Fingerprint (sha256): bf:da:98:55:c3:ed:86:07:1c:c6:28:fc:16:fd:0a:4f:46:ba:c5:06:08:cb:ab:2b:1c:b2:d7:fc:6f:fb:d9:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubtouristik.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubtouristik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clubtouristik.com

Other certificates including the domain name clubtouristik.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for clubtouristik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270622913447026289437834863791210143674530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 00:43:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 00:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubtouristik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752769796477638246780198490659352870890756569897478386186084215131518305368459295926932878406654543147618003576542325220202344555933557920456887507710926260175943037885365901300571229990788299978739550828508677165050554715214628568097864375985209274425543216865484095332760003928817908546433464875828928876926930492215844363213366508070795038069350618193206300349895868012952913936161456074304934630970800420668702794262835712052665133244367588404765323787889468618405079822743489427846630807233463484937994551340863464850221608324591562932924192884420054172039739390018663794524858585884795078837451848823018519444600431517185520937618593243412212567410944894542224161852083545043375074457542736959424518853339238056651116489085249276748326093119831739634764737031915798120276141600486631738609482266941689441577640787591349407528834570679469022438924167662740159436210092677349351403915183576597913620602441106763599933697862813475806025179746242676692208861084344171860765056872110222600939958899723077559602352069261302928354728025462178486841523857510123459061697608374542772371496081170752444008841646989901277420748681822695087856845689146123470056414585343020732592847286121426763768738889411579579578173066670926030047242811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a19c0da87b2509001b930cd6f5b26f99b3a124f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtouristik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e6cbae4190000040300483046022100e2f0c40d9ca5ccb5f41d6e73e6377e4fdea9c369d488eedd4698cf307f517bd2022100efc44e75ed4ee9b8ad72f94758bc2b4887bce8b40dddb6d98e3a3d40f565707a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e6cbae414000004030047304502204bd8b62db00a738ac4e3fd3dd758fbe391ebb85170331d746033e7b9bf3edba8022100f9a858e8967e881997dd1c585927436f7b168a55e32778c79919e7c785026108
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0092e48e07c6403ff89b7156c175f7d7abf353aa372335336097ea9666a53be46b114d425d785ad3bd4353142053b1905a59e89f1651b8061bcbfa331afd6a6e042bbf70150a94e9127b9a33301248d26dd2db24c36db340cd075dd9006973fc16de0dd13df2df4f4903aa3e9deac97dab25f156fc5cf504c07c7237c50900b7a5fa859d1a5eea51f388d2f44d56dba8e3de7cdf3d0e88d93647434118a3a91f647dd714169c56ed70f08559aef3c29c4f2465016f8b7edc088e32f071a00e46325190fb88a552360130709539ce45e471ea82f3a76f879e88209bd59b392c9d66da82c591d4f155bfc050b51aae4c6c7b982b6f5993ea29bd3095bf977438c3a3