www.kettensaegen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:72:09:12:fc:e4:04:f6:ca:fc:17:ba:0e:d9:e4:58:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kettensaegen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:72:09:12:fc:e4:04:f6:ca:fc:17:ba:0e:d9:e4:58:2f
Serial Number (int): 338732534193644416771731213293774862309423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:84:3c:b6:e7:f5:8d:29:09:fa:09:6d:08:50:b8:e8:de:49:5b:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:bd:00:35:f5:b9:fd:b6:90:b7:47:33:9e:19:52:36:4e:48:38:7f
Fingerprint (sha256): c2:5a:82:89:a4:bb:58:74:52:11:76:13:4a:d7:7f:2c:15:a7:5a:5c:02:b0:36:35:61:e4:5a:33:79:1d:3b:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kettensaegen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kettensaegen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kettensaegen.com

Other certificates including the domain name kettensaegen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kettensaegen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsz41nSrEYZv3Q5aKS6bO
q2IE6VfqXRbuGMmi+YBNj5uvt7lAaNybMLECXjon1ls6X0Opv2M7B8iX4XSOjJ2v
759Jfg6khpia6aNNz4qzvOFp8QKmtCuKsI3b8dcb11fhB0SNQcp6AObACqUu6WD+
+ATVi6MavymRkX1daQPZz9IV40/hr6b/lNUI4uy1xnQUkAJOwgRpdjGecL6XJx0V
qbG8nY+v7DzVgwI7ZTD+tMT4S62VQ9r6tmZhGF6bD/z1Y93i+GoUJgsthpkA1Ai3
RoV4Fo6EYsRs/Cs4EtcsLjcigR5hLQ9AONfsBG4AHV7Yj5p+xxtZc2eTPsAupwil
f2iJ1w0H9mziwreREHQNQNKQRjXiUqRRQvX2AflHZ7fC0n2Z4J/A9BPerGq1t6MK
kec/3tGMKH/hxAj/Us88F1JBWQYDBibLoOAT++iSsBjPWeRR8llelC0ZdlIJqPX6
T9cdwePyGr/qaj1w8++zSPgt82qJGnpIjXqsu0UktS2eCIJT9uORGG4oEjrosjfP
g9kTxQDXhxlrJMkN8rS5gZkUH5Azo7r0hzpWRTVm+7CBPIjbKt1PPVv7vQyRpMj2
fAdS/yQR/uBXt730CKaBZ8LhdrgAUiR2Jw8riSs5wSS1IJk/aWEhCOh3wWfGOgMO
HB/R4Qv3nTEU4hNblElASwkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338732534193644416771731213293774862309423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 08:10:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 08:10:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kettensaegen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731247664463668911240449066809606839870498392117664913350498405092792885812749805380350852193657643578543428159587852379993837307794549088486719545875442917584318637441967437417561613255412242836409197386011197903171968053625857948621458378152011084749249560504170102712185078623755487471088314384966676511897733938732706488269297146029236207437602424814351970733542774952711876217196756531805477113999383594573923172912231865702477508157798053590808008204709614267752662248392914828388722473152856457327682141227462466859028220348106450463870010164280263725256764139055265950085680704010325820005946615435376459829994291789981863191380149872030143975016882285531455376823378464473990542535714292912785913430750199016524123034770118522402277376212176099318827936300486149386272653690956869044824560177362349088275874372755331707709303814984060685241244030617764980442848291901371006664405398397845519155527631462450689405869154162836792654921205652354133751232761229917485975747531211611806026400868352321207221218942429068104219326785233929068285450877574194625338765714524414164220632194940654942454434439037196511202957134514533438581947698263054154926859906861681561599935758624541510863648200706657727530408696264307863451618057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9843cb6e7f58d2909fa096d0850b8e8de495bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kettensaegen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017042f6ee8f0000040300483046022100ad75ff7171d001740fa96ced4cef0d8325ce760f265cda6b0f53a212fca54efe022100cc66b8749741e189f2aa47a68932214f68d509d3138d45f6c643db06e0c32c770076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017042f6efaf0000040300473045022049b6dc92af4b3d14b1eb0d202b2e383c0097caa864f8871aa4408c0c1488f80602210091b12187fb1b37f96292300bbce19030fc9dc05bc7d77c2201e40d8813f6f4ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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