www.kloster-merseburg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7e:28:ee:60:6a:b6:01:f6:b0:1c:26:10:1c:b9:fd:bd:38 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kloster-merseburg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:28:ee:60:6a:b6:01:f6:b0:1c:26:10:1c:b9:fd:bd:38
Serial Number (int): 391379128801128796729509036057363224575288
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:23:2f:b3:c0:33:bf:25:32:65:b6:60:94:11:d5:f2:af:16:5e:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:7b:b6:5a:75:b2:5d:09:7f:66:ae:01:a3:45:21:18:99:4b:82:f5
Fingerprint (sha256): d4:a3:c7:f9:2f:cf:4a:6c:77:45:94:d9:30:05:aa:8a:bc:5a:10:c5:6e:fa:e4:b4:c6:64:fe:3f:15:e7:55:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kloster-merseburg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kloster-merseburg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kloster-merseburg.de

Other certificates including the domain name kloster-merseburg.de

(limited to 100 certificates)
*.gamers-hell.de
git.bigpicture.at
www.fredtestt.lima-city.de
kloster-merseburg.de
*.135film.de
amail9.moin-alex.de
kloster-merseburg.de
www.kloster-merseburg.de
*.janaacker.de
carta.webspace.rocks
tamkiller99.lima-city.de
www.cloud.kloster-merseburg.de
www.fewo-oderwitz-amspitzberg.de
www.forum.kloster-merseburg.de
kloster-merseburg.de
kloster-merseburg.de
*.radwanderer.com
*.kloster-merseburg.de
www.warmetalbisons.de
www.kloster-merseburg.de
*.kloster-merseburg.de
www.kloster-merseburg.de
www.kollactive.at
www.kloster-merseburg.de
cloud.kloster-merseburg.de
kloster-merseburg.de
*.provincie-brabant.be
www.kloster-merseburg.de
www.kloster-merseburg.de
*.kloster-merseburg.de
cloud.kloster-merseburg.de
www.lapreza.lima-city.de
documentation-mam.lima-city.de
www.kloster-merseburg.de
kloster-merseburg.de
www.tropicallux.de
www.lipe.lima-city.de
www.staging.xstruct.org
kloster-merseburg.de

Certificate

The complete raw certificate details for www.kloster-merseburg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLUwjMhT1UVpl2ORqxNZ
v8T40DaiFiD4wxwCnEARmotw2/h3xnHZZ3OE4oitpMpxZyavejk8R6dw23XuXlNZ
Uafa5yuabd9Uewu1Zon7O+spKtkBu9dvce+r3Xg2F0jIAHYZV/81gEqnRrwo4gxd
LA6YraRf7D5aImDmD8aUnl8r6DMHCwbFxIKDkUAEip7QSjg1+ch5Hq2iSk8dP/mI
2tyduFSh6cKbwXu81hdb1dI+ZGW0PXNAWZNaolJ/IrmdvOZ41OWqMSB+RMZJE/gx
f2zw1TvH/lJKRxpe+CNO3WtLTHKcXad5IKaZSM08EqHOoRPXRvq5gTiG9pKTShLT
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391379128801128796729509036057363224575288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 18:37:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 18:37:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kloster-merseburg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23822149279175634415356307460763369768652825525871844716408613907441710395476251757237274365125488809608408322734255082745505949515454351450320022593165007833397609524215352520132304578783354603689856816880319467113875432530294373680555362026557739140490093909009879486986142389505212703600662759472868265328056653391927342831533055194214802946534947243807685514875162824660650966314679258842507770625026907045811071399985589283257203659726689007109674865076210181332438376099611012769370615037551195344765087196457017566293698339646975396987337321739794087153586210463285730237678007356522034071371830332143917257663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9232fb3c033bf253265b6609411d5f2af165e1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kloster-merseburg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017156262151000004030046304402204a816762086ab11041cfa6ebf9607aa990d4cc24369607cd7a988053391b72e902203b758a14fff35bc3f8e3f396c746562324a03327039452272c8f9a25f876593a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715626213f0000040300473045022100b2ae24fb766976f0b03247b27e4319a9a3ea2e2520cc33bff4b348f08c3ecb7202204506ad71b315e8d1ccffd206ad1b37f75d3f15426c2e7d3aa49457b393cbc6a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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