1a-magnetschmuck.de

Issued by R3

About this certificate

This digital certificate with serial number 03:30:a2:5c:75:bc:b2:76:33:ae:c2:5a:0f:05:d5:18:f3:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=1a-magnetschmuck.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:a2:5c:75:bc:b2:76:33:ae:c2:5a:0f:05:d5:18:f3:97
Serial Number (int): 277886226422105977170652398849327208395671
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:99:1d:7e:86:d7:fc:6f:3a:ee:29:63:74:33:35:27:04:12:d1:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:f5:ad:d6:13:ff:4b:54:32:34:2b:d7:79:d3:64:55:eb:8c:b0:43
Fingerprint (sha256): d0:4d:78:35:11:0b:b3:da:3f:12:39:67:55:aa:b1:a0:fd:0d:f5:e9:de:4a:46:9d:a5:d2:c5:d4:ce:7f:f9:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 1a-magnetschmuck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1a-magnetschmuck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1a-magnetschmuck.de

Other certificates including the domain name 1a-magnetschmuck.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for 1a-magnetschmuck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDvYIeE6/BicohFRcUBT
hB00U8YIJSysZMQfpbGr1qKuCm+StiP7utYhQpPFtupUrJNB4qiZ13GF0yLvGMcL
xLwVsuUdS+44BLeejD8it9D0yrLtozU2duO35tE+HPyQmScjWkf5XjWPRTlWeobJ
Kvkywe0iT8RL9rakxGK9ri5WIaovd/zTuq2Gsce5Hut0ibhWMaPvtlW4kB9IQwPT
iur9DuevYZpMveUFoLNY7xFRNvpNA+kIk8oOQSUy9zi/CUtD/42/zGQyto6aX4zB
zKnujcGDapTSpKhdgFU0XDvQFvqX8v/TxH+OqOhYnuGi/IEgQzAxWQbvpvWT+GqA
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277886226422105977170652398849327208395671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 07:14:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 07:14:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1a-magnetschmuck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23762311641523610325841092845009597291450260686074017740534319069382449938801245930528667325395198317032438268961086437090290855363005467419758926367897669920005218888086507602086256481933365480295472993416789523425257145671796064726623408433467918079886158808479469460937046173282489175023896796456818018896782816933995983987726475381246330479088461959380531852062847793773771728163663403707599404421035474301258034580883117337266135884869090543563441049355812544221236295782585773858318247097047142464839714367536276383638236016112479886689971648379707461350261337223837250911734748634497285817248796688022969680081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df991d7e86d7fc6f3aee2963743335270412d17b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1a-magnetschmuck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895dc3a3cb000004030047304502205f37d5b493f961606a0f27547c280fd5f0c4c90ded2cd56f39f31f08ed280cac0221008e4e9ff0c0f9fde1bae8d2972c04cdfeec54fab392dc5d4b7d14527600ae13540077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895dc3a3d300000403004830460221008946e0d0f21f3e609f617d85d78c41879dbb17f7e3f19f2589a336b40865e7cc022100deec3c548885d6ba8c8fa0c7d0ee1f6431c957863362e44bc0a4b1bc394725ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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