lp.workplace.comporsys.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:50:e0:c0:0e:a0:01:d5:d1:26:75:cb:6e:4b:91:10:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lp.workplace.comporsys.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:50:e0:c0:0e:a0:01:d5:d1:26:75:cb:6e:4b:91:10:bc
Serial Number (int): 346174672368134880410012929811375463665852
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:62:15:49:ef:75:98:21:c1:4b:de:c8:b9:c0:ff:68:61:b5:2b:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:32:5e:eb:bc:7c:99:78:07:62:14:c1:3e:3d:08:4d:f4:45:f4:f3
Fingerprint (sha256): c3:de:e4:5a:30:45:03:b4:47:53:81:fc:36:1a:b2:a5:de:e1:51:c7:a0:e1:85:5b:0a:da:e8:ef:f5:68:c6:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lp.workplace.comporsys.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lp.workplace.comporsys.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lp.workplace.comporsys.de

Other certificates including the domain name comporsys.de

(limited to 100 certificates)
lp.workplace.comporsys.de
*.comporsys.de
www.shop.comporsys.de
my-nav-02.comporsys.de
my-nav-01.comporsys.de
my-nav-02.comporsys.de
www.shop.comporsys.de
lp.workplace.comporsys.de
workplace.comporsys.de
workplace.comporsys.de
www.comporsys.de
www.comporsys.de
www.shop.comporsys.de
www.comporsys.de
www.comporsys.de
lp.workplace.comporsys.de
www.comporsys.de
*.comporsys.de
*.comporsys.de
*.comporsys.de
workplace.comporsys.de
www.comporsys.de
store.comporsys.de
lp.workplace.comporsys.de
lp.workplace.comporsys.de
www.shop.comporsys.de
www.shop.comporsys.de
www.shop.comporsys.de
workplace.comporsys.de
store.comporsys.de
lp.workplace.comporsys.de
lp.workplace.comporsys.de
workplace.comporsys.de
www.comporsys.de
lp.workplace.comporsys.de
my-nav-01.comporsys.de
www.comporsys.de
my-navdemo.comporsys.de
my-nav-01.comporsys.de
workplace.comporsys.de
workplace.comporsys.de
my-nav-02.comporsys.de
*.comporsys.de
my-nav-02.comporsys.de
lp.workplace.comporsys.de
my-nav-02.comporsys.de
workplace.comporsys.de
my-navdemo.comporsys.de
www.shop.comporsys.de

Certificate

The complete raw certificate details for lp.workplace.comporsys.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346174672368134880410012929811375463665852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 09:00:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 09:00:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp.workplace.comporsys.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615436315638483882311030141442695539148466090685988419846888155100322702467869490328792171344756961160702829440179844637014425276190206384981490488445119755356466930694775894519459679779797398611776510146109177644959959032244906257460773995265086182768686890757451394372532922920850919305854419951490750634807395829949006546365794321661446054964128397238949571581126273326587200811569090776917439429266554135738485241016745655574272350570297775647657955670990189899261186373540460158823014640905258915888040217270072820969334827063077379472870100938645874201482001334646515113870776819628507570886037376826321510942874488004091807012200555832136990765590853353524920877626970472251842128689763871114192800432526599404999000727740141910606933513619915170024612697703536202536939898842751519642641703611262778034713657963368000517480698035033814413099301509146766039561017909319951307997912936550232061842230508194160267313898317714257350430274236279333964958772893108507327085849240441456360724265444938128443824275625830087135423528660248266129496469044369648341206884747887797427786428729074124372455311013734020557837349231374417383767397102498671246994155936969175653268973748399461162278832568060171582490024712460317045570311351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad621549ef759821c14bdec8b9c0ff6861b52bde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.workplace.comporsys.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6b85a35c0000040300473045022100b5f1896149ac813619fc229c70a628916d3cb8c5d6516cb62fb501492cdb711802203e13445414f566e45e132c6d21d8e85c92103b2e4af5f6dca05589bebbb65aa9007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6b85a380000004030046304402207422ebceb2634001f5938f084a0eb45cb700f15967e92196365ab7d253f32b0b02207cee0a0708f58eba30f56b753e017148ec053f32aa71388fd0766214dbde2e1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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