bauzinsrechner.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:79:50:0c:62:a8:f8:19:13:80:16:d4:33:88:d7:08:43 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bauzinsrechner.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:79:50:0c:62:a8:f8:19:13:80:16:d4:33:88:d7:08:43
Serial Number (int): 314241876890470427967416486331583489837123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:ce:93:7e:75:51:7d:8f:32:8f:28:d5:f1:12:b0:dd:14:de:84:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:30:0a:0a:69:71:87:78:ba:25:5b:cf:55:44:a3:d6:18:50:ab:e4
Fingerprint (sha256): d0:12:42:74:98:26:30:35:7c:08:b5:03:3c:82:15:98:db:cb:12:0e:5e:1d:9a:09:85:a5:de:91:5a:91:7d:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bauzinsrechner.net

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bauzinsrechner.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bauzinsrechner.net
autodiscover.geotextilvlies.de
bauzinsrechner.net
bauzinsrechner.t6a.de
cpanel.bauzinsrechner.net
cpanel.geotextilvlies.de
geotextilvlies.de
geotextilvlies.t6a.de
mail.bauzinsrechner.net
mail.geotextilvlies.de
webdisk.bauzinsrechner.net
webdisk.geotextilvlies.de
webmail.bauzinsrechner.net
webmail.geotextilvlies.de
www.bauzinsrechner.net
www.bauzinsrechner.t6a.de
www.geotextilvlies.de
www.geotextilvlies.t6a.de

Other certificates including the domain name bauzinsrechner.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bauzinsrechner.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTwbp68LuiM80he2QNHg
ZW5/gzm4EfrhjjNudCyK5jEJ0O1iN9OfDHl9U/iBfeg1fzOArApjBTThjnCUTJmG
FxEt4onExa85HMa3OhikiGE7sRBabRm9KZRwn/UI7fe9dOB7X1OWZ0Ge+l2YC8Dc
t2qDQXkS0IjcpQV08847p8dAWLtfP/dpBUpSuaH8i6JYpKeIY2z44PAS1B+n4crL
+PW+vYO0u9bUBJn89M1NNaZY0JTz6DImbKgwCwHFJbMdFVmr5idFPo9zGdAY14ND
sLAYIeBrZRb3AnLKsvbTTBMlhrHEGrwBmbDPy7qZV+v82zh0qz2WNwQhehgWBsma
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314241876890470427967416486331583489837123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 23:55:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 23:55:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bauzinsrechner.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25403539671201203489623531417768609002906463537780920170690732377387592045721705254805309980971618511604504268148360528403576589450704690044706515179412442431473919452283279097568760456692659539065556574317264190703351975498368244729676667364144793170776172510275345932051046918983070223863771919860171706002118902750854714954935497545673868898077509043886596545185080746882951673925086495479001622767093482677773308381562292578519702279892890043652645206782642224500807592512371054675824708512688943266086487763882931870750777680176092457804716584002648302972364735049182116527300792154605036363638143883546576132661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cce937e75517d8f328f28d5f112b0dd14de84fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauzinsrechner.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geotextilvlies.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauzinsrechner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauzinsrechner.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geotextilvlies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geotextilvlies.t6a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641589d6ec00000403004630440220757b9794c252fb70fcede3a3364338de5de0efcec4ecad82688ce7cdfce7c19502200d17699581c8e4c31b92a6c78df311e4689ff2083d761c6f48e1137ccd975834007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001641589d7b20000040300473045022100a8a7741e383179e951d9007777107e5b086e0c13ab02eb4c529542571413f6b402207cba30204df737f0c669ea187db7e176a62bda07fc6512da1fb8eed03044bf89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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