www.geniesserreisen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:e7:de:44:ef:89:c7:06:8b:b3:56:a3:ae:02:f9:fe:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.geniesserreisen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:e7:de:44:ef:89:c7:06:8b:b3:56:a3:ae:02:f9:fe:d6
Serial Number (int): 331062666402263120727492043743291755855574
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:93:eb:a4:62:29:ea:45:e5:b8:79:6b:1a:25:c6:9e:9c:2a:aa:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:59:7f:58:37:63:9c:6c:be:78:df:1a:2b:40:0c:32:ec:0a:d4:08
Fingerprint (sha256): ca:0d:e5:4d:85:a5:40:b2:79:ed:09:56:d5:f3:07:ff:6d:27:cf:d8:ae:ed:38:08:e7:4c:25:64:2e:87:cc:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.geniesserreisen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.geniesserreisen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.geniesserreisen.com

Other certificates including the domain name geniesserreisen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.geniesserreisen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331062666402263120727492043743291755855574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 11:30:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 11:30:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.geniesserreisen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681186830471681738474143212966683010133541024448002438358557470369687407680786306977563642855525533485429394461398115470218659236089259304471538588908716662251268328326195813126637559734129510385484677470553102081743119850258395097121920043194809097987991474475366339687248075380972559926124419367264760448437657190403557080293200400810941198052793332220329503905158410271702754030681464400411233244015777743875531244298633556447733541524467349690296638614729084857225474956377011193823757737611281283233437304515128715701275183876874638641455130029129516260947819846191832761740415963318506752622920933698981028467962857464232157147828620658134627272742341367471906242310209047360996107985791644456221030614302228237757777912972583696548857809863944696536671491781499800590326488335279615000539086906418313216561165738383347941156881495952275407419913666339083147963494792758720988517717145195476267391457364514337504007547808189205989832823561584684055161613563821425483452770100493525879243530168603000397118518981282647433539223308151763939864835435879944991841335813503826494990042551372484004002816391268818086686676111448772209553918809201595017423113848557501652294685822277880717760679850404101776409454581830728392464300437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4993eba46229ea45e5b8796b1a25c69e9c2aaac4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniesserreisen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff147fbe00000040300483046022100c5b9721c68772d019c18d97c60087f651013e94bf5a5fe44c9936e7140a72910022100d4cffd0f4378f5dd95fbe97863779189651bf598839c36d23c50778dd777739a00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff147fc21000004030046304402201cccf756d2e1b2e2874dbd89249189f6070ba68fc4501306392fde56809abc0b022076ff1aa4d9709939007be6612ed4943aa70d34d7d47b7188472780cb4e06270a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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