b-selke.de

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:40:68:85:89:9b:ca:4b:d3:41:b1:3b:a0:e4:5f:57:7c was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=b-selke.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:40:68:85:89:9b:ca:4b:d3:41:b1:3b:a0:e4:5f:57:7c
Serial Number (int): 309062002463278597350422088492588952672124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:e0:5f:c7:c7:31:a2:8f:87:0e:db:a4:5b:1a:27:d8:bf:2a:27:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:31:54:73:b0:af:de:70:d6:0d:cf:20:1a:8a:cd:6d:26:eb:95:34
Fingerprint (sha256): c1:ae:dc:30:0f:78:fb:8a:40:cc:6b:c1:80:ee:0a:8c:3a:a3:41:f0:bb:e6:43:25:24:1a:76:b6:c0:69:b8:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate b-selke.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-selke.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b-selke.de
cloud.team-nms.de
feuerwehr.b-selke.de
ff.team-nms.de
intra.team-nms.de
moodle.team-nms.de
team-nms.de
www.b-selke.de
www.team-nms.de

Other certificates including the domain name b-selke.de

(limited to 100 certificates)
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
*.b-selke.de
*.b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de
b-selke.de

Certificate

The complete raw certificate details for b-selke.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISA4xAaIWJm8pL00GxO6DkX1d8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMzEwMDMwMjRaFw0yNDAzMzAwMDMwMjNaMBUxEzARBgNVBAMT
CmItc2Vsa2UuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CksA
wYLhOGRLiTvjpQhq4hp+QGKgAYCfIFgrrLWoeFXF1u9C4WVi+y1iKcbhLV9K4gCm
sWGcoyzIS+oFw0oRU5SKUF029CpDQjz1m+cuVeTV4ncnAFRch6TN2mWMlS1cQRCT
jKdllUqkMJBwSxRA8bmQodJ5phRjVtAvURZhbCPy6TTIpGieVKB6n6V21czmmkGh
IM3Dk8kDjkGslke9Hlkmw8Xn+3MYPV5IiRE9oL+uBeYnNomoZW3p6gm9xfZtBLoW
3CUCcUSSOjRIXwz8HjLpZYAuhEzrAi6CWVDI46gZSbL3kOQ1I5xH8dII5Mz0mHmu
Zl5vMeouQ/Imla+LAgMBAAGjggKeMIICmjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FEbgX8fHMaKPhw7bpFsaJ9i/KidzMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIGl
BgNVHREEgZ0wgZqCCmItc2Vsa2UuZGWCEWNsb3VkLnRlYW0tbm1zLmRlghRmZXVl
cndlaHIuYi1zZWxrZS5kZYIOZmYudGVhbS1ubXMuZGWCEWludHJhLnRlYW0tbm1z
LmRlghJtb29kbGUudGVhbS1ubXMuZGWCC3RlYW0tbm1zLmRlgg53d3cuYi1zZWxr
ZS5kZYIPd3d3LnRlYW0tbm1zLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGMvX5fNgAABAMASDBGAiEAtNyY7HILW/d8ZCm0otf1wOLusraBZ3pU
N7tOcZtaHjsCIQD0m2SHyQBCH12b2NOP7XdGIB8z0o3JCV93QQPcc21rpQB2AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjL1+X94AAAQDAEcwRQIg
EIUYivixPQsKTxVosayBwjMq/pVmfDzS4mDVk/CayG4CIQCdhS+n5DBqUsjY9yH7
P6kxh1Aid9ALnPBJ6lStqd36SzANBgkqhkiG9w0BAQsFAAOCAQEAcyLOLhgajofN
t1XAMf2/yvzAcXR4SCG/uPsrMEXI9zr6VgUo02r01/Zm05B0tReWKvOZ7bHk2tkM
M+e43pN2wQnmKAkstbptr+5/bqrdTbDOnsn3lKPXSPBQ3FEUuXwPvErWKaq+rhW4
s205o7e00ZY/nV7XSxcvoyl0kyFTiHAHSlq8ifNhuovMlkNhjwm7dxp8gXeLbB9w
ZbqY6suS3HBTaRCmBe2MXbS58PuzTyU5UFpe/EJKPcY4Zk+zws3JoEaekE62+6SE
RkrILGjWFHOps//c+24OqrgvqX2DeAbqyl51EnmerKS+cm7/OYDzYqhaf75snXXZ
u2ZcyuB2Fw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuApLAMGC4ThkS4k746UI
auIafkBioAGAnyBYK6y1qHhVxdbvQuFlYvstYinG4S1fSuIAprFhnKMsyEvqBcNK
EVOUilBdNvQqQ0I89ZvnLlXk1eJ3JwBUXIekzdpljJUtXEEQk4ynZZVKpDCQcEsU
QPG5kKHSeaYUY1bQL1EWYWwj8uk0yKRonlSgep+ldtXM5ppBoSDNw5PJA45BrJZH
vR5ZJsPF5/tzGD1eSIkRPaC/rgXmJzaJqGVt6eoJvcX2bQS6FtwlAnFEkjo0SF8M
/B4y6WWALoRM6wIugllQyOOoGUmy95DkNSOcR/HSCOTM9Jh5rmZebzHqLkPyJpWv
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309062002463278597350422088492588952672124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 00:30:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 00:30:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-selke.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23232923771505265356893838701914669775055398115946603188103213374695382893895987354292558503493379707579879413158566152747101722026537728697228236327693046243962974359213120490830365549895198405975019217681576208065060341391826332354753454801214375883566165060758832195640954823789473452792421249658835587893036000297457008585893004494546263268948917353209668058854751250932676834585322961406704385901402784571381438594609220691343773791319835771962009395986978258654841818799941650929727892095927189125396134173427289998151887122301547359584339534744781829197466263883359379992307977206501286895792593869154848976779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46e05fc7c731a28f870edba45b1a27d8bf2a2773
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-selke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.team-nms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feuerwehr.b-selke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.team-nms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intra.team-nms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodle.team-nms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-nms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b-selke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.team-nms.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cbd7e5f360000040300483046022100b4dc98ec720b5bf77c6429b4a2d7f5c0e2eeb2b681677a5437bb4e719b5a1e3b022100f49b6487c900421f5d9bd8d38fed7746201f33d28dc9095f774103dc736d6ba500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cbd7e5fde000004030047304502201085188af8b13d0b0a4f1568b1ac81c2332afe95667c3cd2e260d593f09ac86e0221009d852fa7e4306a52c8d8f721fb3fa93187502277d00b9cf049ea54ada9ddfa4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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