goppingen.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:94:ee:8b:6f:f4:fa:90:12:8b:a9:80:4f:aa:70:48:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goppingen.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:94:ee:8b:6f:f4:fa:90:12:8b:a9:80:4f:aa:70:48:c7
Serial Number (int): 345584566762906117454370301144384079415495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:21:04:a3:73:80:76:52:aa:29:2c:7e:af:96:f8:ff:c8:10:b4:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:70:8c:f7:62:c6:87:e3:95:36:17:74:ad:4b:0e:8d:87:a1:6f:3a
Fingerprint (sha256): d0:16:50:dc:05:ee:c4:78:2b:6c:9b:de:5f:24:53:e4:b6:64:32:8b:b8:fc:ea:08:65:cd:bc:bb:0f:6f:c1:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goppingen.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goppingen.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goppingen.org

Other certificates including the domain name goppingen.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for goppingen.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345584566762906117454370301144384079415495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 00:28:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 00:28:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goppingen.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737888907267810043001497324546333133614063635602441535622185972694384012318540614688465243105783406818838812285805882859955539183171461238042043452415593125230158894599454054137043727834169352457153370243968773761610552531114955002411089339399429294798134780973523482090197865700490939598939021258213186536596495121447621946067737000890052107380898088019994902765967346593298764344960261915510620660903843314469650152556290423492973774981895656931668679024254864244048992262374273369702697776430046947035255070451574510723804626797882064842397767689023295243436567405934841064016278730948402417017524137610796143512545767015254841372464827705934490611451771530347968569204618037396304774075988741752669881277272772473236043504801922535393884472096653085783726226668580406755345048448504797349458243287468250475111743167498829089645464376589718644373666911522797631333332316524659591822005694858467736502108279860277230773077861087644398277686913791189834037888332648942419480985226916725223297631362424163673193780882715622507734669100151059294357120667044892386181015976204961784212116886468482436860290110035192829959716369375097599454403664567683031913307846569456852768474670401609816513536440757203078191696544128692108447889869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b2104a373807652aa292c7eaf96f8ffc810b4d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goppingen.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ca256a37000000403004630440220472a4f7502ac0ce88264b0cd6dbcfd4a956e6103c95ee87ca5b4eb0b5708fc6b02204124104e95754efd95d54175f2f6914595f006bccaacee150d46438b08485ec200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ca256a4f80000040300473045022100dd483f53f2f78403b7087d229a164fd83bded259c251de8b49422728b82b7d41022046e59ca4f02a0fdbeae4bc229973690e7dd43e97fa94e3cc424e1388250b34d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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