www.heimservice-milano-pirmasens.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cd:42:12:a0:bf:49:3b:6c:f5:2e:e3:77:57:1a:be:b0:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.heimservice-milano-pirmasens.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:42:12:a0:bf:49:3b:6c:f5:2e:e3:77:57:1a:be:b0:46
Serial Number (int): 418294854715239409542366840236962853335110
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:a0:24:94:4c:ac:23:81:c3:b9:65:8b:fd:3d:2b:0c:4b:8b:86:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:16:bc:63:b5:1a:d3:17:71:7d:c2:6c:eb:38:39:84:58:2d:39:80
Fingerprint (sha256): c4:42:9c:9c:c5:db:85:5e:9b:5e:f5:23:68:92:ea:40:b6:66:b9:12:08:f3:a8:f4:a8:a4:d2:34:d5:01:0b:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.heimservice-milano-pirmasens.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.heimservice-milano-pirmasens.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.heimservice-milano-pirmasens.de

Other certificates including the domain name heimservice-milano-pirmasens.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.heimservice-milano-pirmasens.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418294854715239409542366840236962853335110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 23:01:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 23:01:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.heimservice-milano-pirmasens.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748417339328735137978899628452279625578932918349915461214051703642917703820735142732412773806700399533462407317282305456886915907334881216007794149406699202440073567120869177960468522196266869293554106544795044409919413188217256857381120785724789671364598926411736607454344232633901384208148617233094173708113847778625130524758458487347702027231444687623698693165534294114568282171589512328421256597720510386532073359709380654553632571517860409839165123053250737975239545494851871335402554826493582387153878451294082044201970204530241487413024213611926397634415987490792822448956413309927303890992880374794167117987925967025582378164599958686517315467652216223709382634623465477866900929066257357801959270891146863350979272740239598280849159986744649056793762108675847411020763020741716935248792273684419759850684081009628087525848998235753254089889726344250064747802545944640837918379601332260847062131347037339500038151995464709709238892234700327807709330625555651751281551272515265494820078739665055848369825542717887582405119198071300091280091884813321066584084333582837746950458208882326021040536087530385042574399934813742392791176662798160410061586793828850456268836187775835772040633464846848165796569508987263927729104802181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ba024944cac2381c3b9658bfd3d2b0c4b8b86d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heimservice-milano-pirmasens.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167af2b2a580000040300463044022025e86629763c9dc062a5b9e5bf04d7f3931e3eb5d383345df2752b44df9f57ad02207b476a104f38da3e283670bea051124b19d3c985937aabc3d9a6f637905f454f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167af2b2a440000040300473045022015160d319f775fd3defcd435279bb0b8edcd21f67c7e81c6b4ba720eabcd2581022100c6e349408d1079a94a4a6185fe243e153b14094d194a8364ec95804da428b4b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012fc2b0da0d082064888f6b1b0d66098649d8b53754fd606a4dad58aa4053cbba69df860d5aac55ffe41106d504945b85b9d7968dfef1c69f9a68150a56c88d5982d535b6a94e827fca29f85dcee635f41a533baec93745fdf8767e41bd9b5bd6dd60f422e37f041ded2a0116bc39a16fb82d3a9f482e1a96d7de64afe40de9a59e990aa3b3eafb617b3164bc836d7d1a86524f3c27a9a59e0e2583c6ad158eca60710fce5698f0d569b57d70091944af6676e14985f2629a7d0d9dde411a656dadded8d02514bfe2186ff52a2ff55464b18d182f3831eeba0252c632c317788c877a16cffe28da3b5bb67e944217c3d9159d8348b685bb3a194e18c1c11be3a