ktvd.de

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:65:f2:c8:c8:c6:0c:de:0c:cf:bf:c0:4e:a3:f9:66:b7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ktvd.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2f:65:f2:c8:c8:c6:0c:de:0c:cf:bf:c0:4e:a3:f9:66:b7
Serial Number (int): 364577927608127983121566697481016536819383
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:4d:69:9e:54:8b:07:31:34:da:b1:c0:5b:da:28:b9:9f:ae:17:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:ed:d8:e9:08:28:1f:d8:a9:a1:04:85:2d:e6:da:7b:ab:dc:8c:3d
Fingerprint (sha256): c5:fb:69:8c:ff:39:3d:ac:53:cb:73:69:57:a3:b1:3f:a4:0b:b1:ae:08:54:d8:e5:6e:d3:dd:c7:e4:f0:69:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ktvd.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ktvd.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ktvd.de
www.ktvd.de

Other certificates including the domain name ktvd.de

(limited to 100 certificates)
ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
ph.ktvd.de
ph.ktvd.de
music.ktvd.de
ph.ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
music.ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
ph.ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ftp.ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
ktvd.de
ftp.ktvd.de
ktvd.de
phpmyadmin.ktvd.de
ph.ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
music.ktvd.de
ph.ktvd.de
ktvd.de
ktvd.de
ktvd.de
ktvd.de
ktvd.de
ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
music.ktvd.de
ktvd.de
ph.ktvd.de
ftp.ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ktvd.de
ph.ktvd.de
ph.ktvd.de

Certificate

The complete raw certificate details for ktvd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364577927608127983121566697481016536819383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 22:44:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 22:44:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ktvd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689491477522121358034536039912117777271074949214043978727675599524566359854603682922026045413130178908872991161146872786584946936425065834750982149476419700953130735851790823949189927993388241962372212353946952105506812467470694140175777157267992676164205532063803754537640674219682920960640072752771448896279877479272139895092424520909923969614280349272175550539063943687686113790785243247264123633194527609578027993166735854901301357018601235785193697334540307709883051579156711489597532709921706240212943537744539717987189188949395110155719677372000816011043129372051111636523519472292508462660562051809618815640456908852479414487048014582959315118161730110988357251013111461380337997536365786795357461993161643310016456685939126453913353618134567237720477122696228648856998438835841759265818238103156564641171398966694995413051628492858762094653304510250479939307130730675219930317204883426300746214434265957112133542006733868077046453005685813396587713072713942409975347899063474209663723177251882830998466506605323221330734389118783812412090022209476593950649742832149873635569306237764183371394203189248772323315493807315656623581002550949698434614866437254876595792688452106332899361906035903856715936202329843031796126848653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c54d699e548b073134dab1c05bda28b99fae17d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktvd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktvd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d956871a00000040300473045022056b7d527176b1c2cba3f159b18847250ad8fea6679ccbd113e4db7a4510703ff022100d26f3cd6878e726d8265c5e4028a79cb1bba6348c939946a65055cefc7d45408007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d95686e0b0000040300473045022071c9a20e37274504ed4a274e060e19c2a71304fa93a072e5aba7f60417ab06dd022100a41be598db12f6fee54e1d80834bf8a8457ed085558fc362b723bf9dab13cf31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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