canton.de

Issued by R3

About this certificate

This digital certificate with serial number 04:4e:26:dc:08:f5:e3:ff:2a:0a:5a:44:84:30:27:2e:fa:4f was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canton.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:26:dc:08:f5:e3:ff:2a:0a:5a:44:84:30:27:2e:fa:4f
Serial Number (int): 375042821497763629418939376120694379051599
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:4c:b1:c9:2e:d3:54:af:30:db:68:8c:39:7f:d0:6f:5b:23:55:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:54:f3:6e:14:5b:07:22:ba:02:b8:ef:b6:27:35:3b:26:65:91:1c
Fingerprint (sha256): c7:22:82:23:8d:66:5e:ad:b9:aa:9b:a1:21:35:ff:ad:b1:f7:62:03:86:3d:4d:65:9d:34:76:48:85:c9:3d:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canton.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canton.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backupcanton.canton.de
canton.at
canton.ch
canton.de
canton.eu
canton.us
hifi.canton.de
homecinema.canton.de
prohouse.canton.de
shop.canton-server.de
www.canton.at
www.canton.ch
www.canton.de
www.canton.eu
www.canton.us

Other certificates including the domain name canton.de

(limited to 100 certificates)
canton.de
canton.de
download.canton.de
www.canton.de
canton.de
download.canton.de
www.canton.de
download.canton.de
download.canton.de
*.canton.de
www.canton.de
download.canton.de
canton.de
canton.nl
canton.de
canton.de
download.canton.de
canton.de
www.canton.de
www.canton.de
www.canton.de
*.canton.de
canton.nl

Certificate

The complete raw certificate details for canton.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375042821497763629418939376120694379051599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 08:42:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 08:42:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canton.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809441649487947889065648417674218540868451749100512933341745075532312708920703702826114786034437507481538346664859534225524486708353199828866385890178587112751823029321458763903590278714435417555093935134167684144638430256991596093226883109270743876941364696520533351749287322147209640058683299243661861229086280548561932873244377927390792590218637357382411735119665828898658433213875479144018565207904369299238312604351318542685780087169576006209549200562185845189496666245256535156129772919283201181762669058634589158297950936545088895265906376614330980097168031768243144282132464723152970765341127864060758657009123375155049425698622820273523887404150922420222451993419503428662627032312706387596549061245434880641408983655458201610560737785150852349611651330791990989655158124724686937193108154542967423256647744530330234708868219258369791364247063813443124765668864218073042978968127660434141415643827582743727893468283608365220004297188001032791862317905455263380494311746528089311113742770552725859904769818026483184302330703600680275113687083996045227783839477990626829114836104993118941016148432711386449690641794257331753047751379343901029699263711589557153867390196074954595716550568277332775168150307255753111131507369401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea4cb1c92ed354af30db688c397fd06f5b2355b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backupcanton.canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hifi.canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecinema.canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prohouse.canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.canton-server.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canton.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canton.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canton.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canton.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b6b5cc87d0000040300483046022100a83bf262742731dd43e3bddd6303b9fd02177ae1dc20f2416db6da594d136207022100edd1edb083be1e5a38ab0c9184f3b6b0c6c1300870c4f0999bb8fe6e136d255400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b6b5cc9220000040300483046022100c26b4b748281cf8c2d6c2c0b6e71d37d5064388b1f1d1c4377b6274e8f25defe022100f86c21c7d92a47316e64a670234cee5591b9711afc540885f2248c742a0cb5c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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