lff-marketing.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:da:f0:a2:6c:13:24:4f:25:a4:4a:7d:8f:43:a7:69:85 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lff-marketing.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:da:f0:a2:6c:13:24:4f:25:a4:4a:7d:8f:43:a7:69:85
Serial Number (int): 305184021909800944735496114429691951540613
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:c7:37:c9:4a:8a:cd:58:84:36:eb:bb:c5:56:60:f4:5f:88:0c:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:18:f6:0b:ed:f1:18:3b:5c:2e:0d:cd:5a:31:ea:7c:e9:fd:9f:65
Fingerprint (sha256): c6:f1:8a:6f:60:62:c3:fe:ad:25:c6:29:76:83:3f:52:08:60:ce:0f:62:4e:97:35:3d:fe:b3:fc:a9:8b:a8:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lff-marketing.de

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lff-marketing.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.lff-marketing.de
autodiscover.weidenetze.de
cpanel.lff-marketing.de
cpanel.weidenetze.de
lff-marketing.de
lff-marketing.t6a.de
mail.lff-marketing.de
mail.weidenetze.de
webdisk.lff-marketing.de
webdisk.weidenetze.de
webmail.lff-marketing.de
webmail.weidenetze.de
weidenetze.de
weidenetze.t6a.de
www.lff-marketing.de
www.lff-marketing.t6a.de
www.weidenetze.de
www.weidenetze.t6a.de

Other certificates including the domain name lff-marketing.de

(limited to 100 certificates)
lff-marketing.de
haushaltswaren-1a.de
lff-marketing.de
piperin-kaufen.de
www.schwerpunkt-literaturvermittlung.de
www.die-verborgene-spur.de
lff-marketing.de
silikonuhren.de
lff-marketing.de
lff-marketing.de
webdisk.lff-marketing.de
lff-marketing.de
lff-marketing.de
weidenetze.de
lff-marketing.de
weidenetze.de
familien-unternehmen-gruenden.de
gebrauchtekinderwagen.de
lff-marketing.de
urlaubs-lounge.de
www.wasserkaefer.t6a.de
miesmuscheln-zubereiten.de
topladerwaschmaschine.de

Certificate

The complete raw certificate details for lff-marketing.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBX27jdG+7WPVf1YC02s
PvHvz7FBY077MGjmGSIJqnWukQSTiTGPOMKyyD9F8Rh5Y93m6T/i4wA522LHBn61
zog2rv47mKB4tKfrAFUMY5XbHl+rs7TO9uQyWocetQPDFG9JMD1WPta8yJTHDuDl
4T3iil4E5DrUcj2FeEefl1gR/Qgfcr/KPBoYekMD7u8qYkDuxBPpVz6Mxp3NCGWv
+CxMaKur9AAiVQI5YioXyp/cgXQsrRrgbNRsWOQgCS3Jn38g3MYykYdh3CrRgCHl
JNxZItjS04fBCttOHJ52crKxzupcoDmQEbRCkF4fC3Pvik4ngnKoIr2X+OsJf1rT
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305184021909800944735496114429691951540613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 00:26:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 00:26:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lff-marketing.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25763445347401685824523485819325091224394899413997266894314853316676682872904887735521530553864833729336372668323095274746698741571940520062259414492226058356461489627859783785800745353171382135819655812443990289845538292319307823436017321073484427715549776334970135513782407924086352240213494719217658163840707186219838797133636929182264921958989688521836602485883515285668967530183144312294151949725589169624953752388309339268887769679263886406570484418855241308696003986168845300493918897861128881995442941873100674820750172624521807458867040901420233438812368308057622193955063985175733193511185112856792940598239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1c737c94a8acd588436ebbbc55660f45f880c00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lff-marketing.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weidenetze.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lff-marketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lff-marketing.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weidenetze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weidenetze.t6a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166d20790b4000004030047304502207e4d99d17c632c681851097787e93e90268fb77f5c38686bf6d9e4f0e956442a022100d58bd5e0c249e48f0b8fc616cbb2c16db4a97d4fd03feea2c0adaa41186d33fa00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166d2078f4f0000040300463044022046d378da8cb92d16be3c4fc5db57c18539a48e03cb5d767b233fd763f0e8a1b80220477219e82aeadd1013a08b5af34aeca63c834230e126aaa4d385b1b3b0aad0c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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