gruene-sinsheim.de

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:58:35:15:02:02:22:f3:5e:97:04:87:e2:2f:83:e7:e2 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gruene-sinsheim.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:58:35:15:02:02:22:f3:5e:97:04:87:e2:2f:83:e7:e2
Serial Number (int): 391441969640531527150051694102009964914658
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:45:22:5e:1e:2f:97:eb:a3:b5:a4:ce:5e:a9:0e:ff:37:85:83:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:b2:56:1e:38:67:bb:2c:97:76:d0:30:c7:f2:09:c7:48:b2:df:fa
Fingerprint (sha256): cb:e4:f3:a0:aa:0a:90:ae:aa:cb:48:98:5c:7d:94:32:ef:c6:a2:bb:2d:70:c2:42:3a:6a:92:7f:d3:40:80:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gruene-sinsheim.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gruene-sinsheim.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gruene-sinsheim.de
webmail.gruene-sinsheim.de
www.gruene-sinsheim.de

Other certificates including the domain name gruene-sinsheim.de

(limited to 100 certificates)
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de
gruene-sinsheim.de

Certificate

The complete raw certificate details for gruene-sinsheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnNxwsNIkwJe3ucuV4h/
1NrVD483Q6Q0h8rPhM3dd1/OKn+Qvd1KSZ46efzSL+XLMZS3a9+bFcP/l5f0za3D
+65eiEEIFtp2XdjAMDoqguZyJYydnlsedFtFYVmFXhyNfMQVTsbbIcUmWVcoRap2
KU+BsSwDepI3WZ/EKk1hGvZYpyGiJytaPjwvkumMaGnm5rkQj1iVODqoR0c+zniB
k7NF7Cj5epICtaVs7YBLN9TkDNxJHrkjbreiliZ2Lhb1SDXL41izpRZsP31pHq3J
m91wkdxyPdDM4mRZqG4N+n6Opf1Y4zidt8T9MgrjmYs8BdhHZIKf05rjJzJuX8LD
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391441969640531527150051694102009964914658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 22:15:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 22:15:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gruene-sinsheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21517439588794647862438781978793410152988116466597902859515836281814180064550007263704134554261321367064914584898939127104090487534153533008346565137130692367932953865155093047245685997388817937195964463590323028751948620956300787331216349222622935334221178869936723491342365758519856890907932935582877716704415829193466710300800763126097948953292064185912900348864636824708422441190275896810712812350972282690870338495123320828772600273800468813586308094753847954001595568729603062586216729531156884174196133347944054322270224935229519213354837732097969423230855670498176496677508499294458653656142475574920345731963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f45225e1e2f97eba3b5a4ce5ea90eff378583c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruene-sinsheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gruene-sinsheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruene-sinsheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189cd2241b2000004030046304402206ad2f1723c3c5f895662375341ecb0c4db87c94853973928fd97a081e6488f1502204b9976bc6a74371655af45fe6df0724e697625d49c12d34b20b5f2210a9924c2007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189cd2241e90000040300473045022100d76bd8cac59a6952f2ce976e99c2e077fce4c8c167d2894aa6564fe4391e340d02205f0683c6efa19c2337361a5cc6932383700826bd5c4b2d2393ddb245b916549b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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