*.christliche-jugend-buende.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:b1:da:e1:78:88:5c:bf:6f:97:12:fe:b6:54:92:ef:4f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.christliche-jugend-buende.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:b1:da:e1:78:88:5c:bf:6f:97:12:fe:b6:54:92:ef:4f
Serial Number (int): 323844940790873311865475391403660777025359
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:66:e0:94:13:05:82:4f:4d:cd:3b:a5:d9:2c:7b:5f:b5:93:ad:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:9d:14:3f:2f:45:6d:0a:ca:19:d7:dd:98:24:43:97:b9:ce:eb:15
Fingerprint (sha256): c1:1b:e9:93:0e:90:2f:91:e2:2d:24:23:24:b3:55:55:70:2f:f4:26:d4:eb:dc:02:61:f8:38:58:24:bd:95:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.christliche-jugend-buende.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.christliche-jugend-buende.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.christliche-jugend-buende.de
christliche-jugend-buende.de

Other certificates including the domain name christliche-jugend-buende.de

(limited to 100 certificates)
aekifisjiawwlpk.lima-city.info
airport-gunes-hotebeta.beautyled.eu
*.scr-bau.com
wp2.woeschka.com
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
unitedbees.com
*.christliche-jugend-buende.de
*.christliche-jugend-buende.de
christliche-jugend-buende.de
*.christliche-jugend-buende.de
www.christliche-jugend-buende.de
*.christliche-jugend-buende.de
*.christliche-jugend-buende.de
christliche-jugend-buende.de
iool.de
christliche-jugend-buende.de

Certificate

The complete raw certificate details for *.christliche-jugend-buende.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FrZZRb+0WKoOaHOAVIj
PHhlyqjAL0z9GUYVvbK8ECQIqKRv8tUadd4k0uTr6bUobTZeBby93u+JKQ9UxTN5
cvpmBo40JXKgfamU4eSyU8I08+20iFPD22mypCX/OmngKpPSykTxYREkQaEz8GYj
FzS0NAO4IFZDdI3DyZUCnuhQzwntuKssDzPDcysgj9NyHYbko6/JvoMyMAaWtAe3
XkVgASnuyxlkcIiD+H2+t0wMV776FQRpVSlXPvtP+68+BUlGjfPLdrRvC5OWHYVI
vFK3VvUvBZijTPkCtI09TbxLdJFALVLVoIiKBfFszUole1LmNVuVByh0svAgcsVe
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323844940790873311865475391403660777025359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 03:21:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 03:21:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.christliche-jugend-buende.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26302366842544786195629509102679836249826056093527818747111701598522378375277603767528500925188285159004099467528851902952241162684405847347639342879873352887220800841559455627457630619537646732821761459258117161058218535305145387478916492703570975246342370160801487166094844122921452033118240787365606991869816954322159051533062476575933411473222195666466540707060186575459169854162890829273911073572078688295138638149861531778181069842209316423764656020031734573897911556316209606311859314642019516342598874788681913945844671328995562221189508039525730376765399523600695391495301339704414444206779247875930817125989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b66e0941305824f4dcd3ba5d92c7b5fb593ad96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christliche-jugend-buende.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christliche-jugend-buende.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016811f1a492000004030046304402205b0137370144f8a64d88096e2e1ae3f383f3f6c1599df342a2a74d4bdf0eff6902207dd57e360a5d7841e8205f07ed656e60522d4b65192ce3f67c324ef5749d324f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016811f1a2ae0000040300473045022069596f22f2074a7538518ba343360b24310ec2f16e8b3aa83b2ada0191b29100022100a3a771619918d9b6dba7f2dc9e5dbe37bd9c95157954b31ce55e9bec23d8dd33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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