thermikzipfel.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:fd:e7:7d:bf:e5:01:a6:37:f8:d1:29:6f:0f:c2:b4:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thermikzipfel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:fd:e7:7d:bf:e5:01:a6:37:f8:d1:29:6f:0f:c2:b4:bb
Serial Number (int): 382474594706226453288200073223482785313979
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:ab:8e:b1:54:08:f1:09:68:d0:98:21:ea:19:11:49:ee:34:39:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:a2:30:57:a0:3b:bc:df:7d:87:6b:78:b9:79:5e:f7:11:2e:04:cf
Fingerprint (sha256): d2:67:3e:49:83:25:26:ae:a1:fb:7d:93:72:79:92:d4:1a:03:3f:d5:1f:a5:a3:f4:6c:ee:22:21:b3:d8:b5:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thermikzipfel.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thermikzipfel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thermikzipfel.de

Other certificates including the domain name thermikzipfel.de

(limited to 100 certificates)
angelatillhon.lima-city.de
store.garagenschutz.de
www.thermikzipfel.de
www.martins-design.de
*.expats-forum.de
www.thermikzipfel.de
www.thermikzipfel.de
www.cronjob.goeke.it
thermikzipfel.de
www.thermikzipfel.de
www.thermikzipfel.de
www.finde-die-loesung.de
*.landbluete.at
*.klausundursula.de
schneider-reinhold.de
www.anglerverein-felgentreu.de
sandra-nele.lima-city.de
www.thermikzipfel.de
*.goette-investment.de
www.thermikzipfel.de
www.thermikzipfel.de
superset-staging.hutch79.ch
www.thermikzipfel.de
*.immobilienrechtinspanien.com
theextron.com
thermikzipfel.de
www.thermikzipfel.de
www.thermikzipfel.de
www.thermikzipfel.de
*.hhedl.de
www.thermikzipfel.de
thermikzipfel.de
*.coelectronics.de
www.insights-philippines.de
www.ferienwohnungsunny.de
thermikzipfel.de
theextron.com
www.thermikzipfel.de
www.thermikzipfel.de
*.gentlemenfreuden.com
www.thermikzipfel.de
thermikzipfel.de
www.triplefly.de
www.amil4.lima-city.de

Certificate

The complete raw certificate details for thermikzipfel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mTyF9yhImlT+NVJgpv2
RKSq8rDnsNhGf5J+sGBAClgyu9g+CGwFoQonINN3ltHwi8guTQDH4NOF+qhcniMy
8ip1OtaGpQOAoK+R6YVJOH/twjM4TQLWOiiXt7thY5gE8DzS6/jB7vB2udh+EhKI
QXlfs9M6UpEhxVu9ONTJ6/66AdCK9x3mJTkb1QMp0VTR3UtCNA5VQHXYBa6KcMwB
wRTEhyo7nQz12we2gD1CQgpf//KLq/31cvvox87a/ZJOQd3Ned4rpsdQ4gWKyKix
FIYJLBdUjLQe7/mMCjU7NbRJtnBjjODBSGNM8yld5Hxn93+SHaSgjHRJ6YHGxB1f
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382474594706226453288200073223482785313979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 10:57:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 10:57:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thermikzipfel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28579635090719776641342342123253517807030087022400427384294514846986803688074463660527953506041519703473825104952405851578659637809500403322458816356565795130123499686656469424339608911738134039765380340509691875795420503717261379903249724377049509578485029456410006545339087691652683826387409173797966570780900831869035667781279138026740299947766427594994812742226937869210404509386450689305799825416399137515062663185952885726571711383454436495939874496202565480696872597289621652227758468608272204541389691728046067996000006991219640637584514802240024925067349306228027998923142941158784985949275713691602590195461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcab8eb15408f10968d09821ea191149ee343942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermikzipfel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001673b484f93000004030046304402202cbaf9f19f8bc6791bf87be95d06b073eee0cd18d9f07801fea6070f19b8e07902204c177eeed60215891ce11afcaf692c0736d57f89d7e285d5aa7af21de7895751007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001673b4851910000040300463044022045ce142859c86e945ef3f2ea4ab9c015bf62d812cbf22f7a89875af5959abbb502205db6b1815303aaf3c6e2ad2e7e695320601dbfe7080172d00a01d016241b613b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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