4d53.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:e0:9c:65:c9:fc:c3:b3:b2:87:51:7d:5f:be:8e:9d:39 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4d53.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:e0:9c:65:c9:fc:c3:b3:b2:87:51:7d:5f:be:8e:9d:39
Serial Number (int): 331393302147965334984296516646328251358521
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:4e:c0:2d:88:74:97:53:ea:23:c1:41:78:45:9b:e9:be:55:9f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:d4:95:64:c9:33:da:8b:2f:30:da:f8:4e:cd:5f:ea:44:91:80:95
Fingerprint (sha256): c4:1a:f0:5c:d7:ce:27:c5:59:82:89:d3:6d:f4:2d:c8:80:49:58:f8:4d:a0:67:f7:23:53:b5:23:26:04:91:3d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate 4d53.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4d53.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4d53.de
martinstauch.de
www.4d53.de
www.martinstauch.de

Other certificates including the domain name 4d53.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for 4d53.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331393302147965334984296516646328251358521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-03 22:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-03 22:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4d53.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822210813422302981598830650950218978305422298347910303993413541783064258809079900430140193056754264790057868577781819376607886586127675046560185869761882319842699102220294444370594499306951153652117945588382305886181143288217038676608536467074010895952540988282942556155192323709438432568133602871761564627530270367153199708558793987833649106731364314753347079820762352096437948452816244638960814085151669235153592458639654284433681520726935548706701361087829288088164428634593625858214560555545728647977987363809694214842126036687898073299865149729777848006267172305246370151603613354453346095280895658956639513388548946937592012623439847000084017040438458888951639150999585989867957080152721510605371947634911548479178388890978203949548381637232636541052526867935106464242117978828838981428347316161288595060916998853345574815245796604690561253863997409968342878547623237430595388481835819400337215560607189730904146814053941530777158958989088633816459170087001341697444132206083965177410430024920756533124239823607122600051650025566572688368343604824131981699851440598915487129582377971848715910660503801227655098926978726527525918473912925152402456639954059904497925653105656463971316096274323420416798038930003317716902244236719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							454ec02d88749753ea23c14178459be9be559f99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4d53.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinstauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4d53.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinstauch.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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