heikowild.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0c:f5:19:82:b4:c7:d6:35:ac:99:87:0d:3a:a9:53:a2:87 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=heikowild.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0c:f5:19:82:b4:c7:d6:35:ac:99:87:0d:3a:a9:53:a2:87Serial Number (int): 265746039515756933468818247266580814865031
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c5:80:98:5b:91:67:87:10:74:33:ef:40:6f:bf:b8:e2:ef:db:d9:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ca:a5:7e:e4:3e:c7:aa:d5:39:89:8d:9e:cd:c3:f7:6c:4d:67:54:4f
Fingerprint (sha256): c0:86:b7:2f:f1:bc:a1:d2:c6:0b:3d:1d:63:b0:d6:61:29:07:52:f5:a8:0d:f3:1e:ce:2a:fd:99:e6:52:04:0d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate heikowild.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for heikowild.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
heikowild.de
www.heikowild.de
www.heikowild.de
Other certificates including the domain name heikowild.de
(limited to 100 certificates)
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
webmail.heikowild.de
heikowild.de
cpcalendars.heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
cpcalendars.heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
webmail.heikowild.de
heikowild.de
cpcalendars.heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
heikowild.de
cpcalendars.heikowild.de
heikowild.de
heikowild.de
Certificate
The complete raw certificate details for heikowild.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISAwz1GYK0x9Y1rJmHDTqpU6KHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjQxODMzMDBaFw0x OTEyMjMxODMzMDBaMBcxFTATBgNVBAMTDGhlaWtvd2lsZC5kZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANLVNGU1mMz8xkJNcU4lZxmUbc4rxqK5jJpf p8lJlZD0jwdapa8wq2WcIvGK6AUZ3JGEj8e5MPBDhmYkAQH3WsPQYcxfBiB7/TpT A3lkm/2iILIrp03QFjPmFzUbFjrmD08sya/2MUhGWw3NlUyLAl3qutyKM8VUXwZK Bz2/Lb2yVBao2ZGUxRDdbEB6EeSbBHP/8zRnPs83rLAYoejfBRvhj9Z1RM00IbWp boLNzuzcQQHjdj/X2kStWXVHa0VGcP11duVAdWPiflz/JNsFBMNaxt2TmE8+ceDi Bh2OcsPWMhP/KheePJ60pncVZv4GGpKleyEBoMPw0blCFFPC8bgxYWSiIGkGePre fedJu+twxOqnUheBc3xfSBUB12rSYMaP9Th4apQmw+ZRhylbq0s71WdNc5HjITUX OOPGNK4/pR5WOJCU1WxTLiD58pYePnBoTHg1IZtHdAA1o8rYnObhbxekLlawBXHd KlL+JAf2sNF2QAx4r8xXx2caZ1/Q6AiZadYzGWCUjEB/VGp4DILFbjn4Y9bV60tK 2a1Z7tcD8tWM6dnSz/X4YYPChBjgthl/hzjnZf4zgUGCt1p81/GDTJGWUF5J5ErF 5WQQRy80j08/Rte1Vtvq4EZAZgffrhy5q0L535/W7VCIldpgH6W0WtrnAI4GE1Uu R/DQ6f6tAgMBAAGjggJ0MIICcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMWAmFuR Z4cQdDPvQG+/uOLv29m7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMaGVpa293aWxkLmRlghB3d3cu aGVpa293aWxkLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB nd3x2/4AAAFtZMNA7AAABAMASDBGAiEAspnwjzeauv4vQDvfPplOXX1W0yL/r47J hJoQXTkl0JACIQCa+yefsmIRPQKYyhA0fOJMUeyTZ2t0jhYbX2RJJiac1wB2AGPy 283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbWTDPxcAAAQDAEcwRQIh ALSBY6OzclurLtV2F8Nzgg7/PTuqEgI3vG7XfVIwRcWFAiBJStpQBQNDH8DRDRaP 6tj4soXwKodYO2ZmhaZ2Jv0r9DANBgkqhkiG9w0BAQsFAAOCAQEAieF/3eG1SJPV fXmjQWIJ3dV4L5uQ9Jj9eVAci2pcb5GDsJXajlaJ7Y9dPEC1TCI9KwgP1hChl7QT zDnVf2c5DagZNDWqtLgNtJr/0BcNYit0J6UkmsnfsVHdh+yZceRPGbUxOvsBVetk 70cFRlYHLACTMlizDKsC/MlwOUV7CzX3prA5/oKAfPb0uy9re9xBmQbTHiCjTtco glgTij8XjR6LEPxzmSlk3DfkczLb6k41Hlmz8J8NUro7LHTzAvZNC/V6zxf0aw4m mtwtRK6A8t3PsKuq6MLAPMdEv9dgxsXd3+0YSTODMSpEmsu8jcQFcFvoai00KfaI 3UcGj758Gg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0tU0ZTWYzPzGQk1xTiVn GZRtzivGormMml+nyUmVkPSPB1qlrzCrZZwi8YroBRnckYSPx7kw8EOGZiQBAfda w9BhzF8GIHv9OlMDeWSb/aIgsiunTdAWM+YXNRsWOuYPTyzJr/YxSEZbDc2VTIsC Xeq63IozxVRfBkoHPb8tvbJUFqjZkZTFEN1sQHoR5JsEc//zNGc+zzessBih6N8F G+GP1nVEzTQhtalugs3O7NxBAeN2P9faRK1ZdUdrRUZw/XV25UB1Y+J+XP8k2wUE w1rG3ZOYTz5x4OIGHY5yw9YyE/8qF548nrSmdxVm/gYakqV7IQGgw/DRuUIUU8Lx uDFhZKIgaQZ4+t5950m763DE6qdSF4FzfF9IFQHXatJgxo/1OHhqlCbD5lGHKVur SzvVZ01zkeMhNRc448Y0rj+lHlY4kJTVbFMuIPnylh4+cGhMeDUhm0d0ADWjytic 5uFvF6QuVrAFcd0qUv4kB/aw0XZADHivzFfHZxpnX9DoCJlp1jMZYJSMQH9UangM gsVuOfhj1tXrS0rZrVnu1wPy1Yzp2dLP9fhhg8KEGOC2GX+HOOdl/jOBQYK3WnzX 8YNMkZZQXknkSsXlZBBHLzSPTz9G17VW2+rgRkBmB9+uHLmrQvnfn9btUIiV2mAf pbRa2ucAjgYTVS5H8NDp/q0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265746039515756933468818247266580814865031 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 18:33:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 18:33:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heikowild.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860122907270616449017053926107378035771940886683792729948047219000975496123435958023153053324844760791512722358130457075536542586254303526230294222752151815582626101877716456930699744464197590944620574481593491954085914103913435450756294431735123808619320520687396028627703999250409440043445947625925880997696901187640429112042513845209065357500573173707767270532507743113576768710622534595026850578228527551158493188189642547039827380478132708293097956102262571229980726256147431956338649932242453604393192171098940455931505868397943884360317652056553851915110229590775104052041836182643683402435905685726381389658785289955482761106737631436581596636288202974775480661201715966362297979788768225428180863303274834075322481886399681181634799090125611930124029855081975038825367942323979487605110301442291126496199611184060102188445971173487225722941443425823820344529056957507609182732182700908181730599179695333707139150784727500424392879970844251334502224672028844695810971269938753222624221725024807317568980377577523150355348333616026755116743264139096956491655842807196125301752103715024746547868020713452264411199321979937153079318687701277388304659670682240794337391596135969167940794274473654035781440242420068281624107286189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c580985b916787107433ef406fbfb8e2efdbd9bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heikowild.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heikowild.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d64c340ec0000040300483046022100b299f08f379abafe2f403bdf3e994e5d7d56d322ffaf8ec9849a105d3925d0900221009afb279fb262113d0298ca10347ce24c51ec93676b748e161b5f644926269cd700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d64c33f170000040300473045022100b48163a3b3725bab2ed57617c373820eff3d3baa120237bc6ed77d523045c5850220494ada500503431fc0d10d168fead8f8b285f02a87583b666685a67626fd2bf4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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