rubenkrapf.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:59:d2:35:3f:b0:f7:a9:93:4c:b7:99:fb:53:82:9c:96:16 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rubenkrapf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:d2:35:3f:b0:f7:a9:93:4c:b7:99:fb:53:82:9c:96:16
Serial Number (int): 379013688745665453947968252313124694955542
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7c:dc:a3:07:3e:2a:6d:39:f2:36:9d:85:b0:22:72:78:c1:b6:26:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:5d:50:28:7d:d9:aa:21:2a:70:6f:b1:5c:81:6d:64:5f:0d:e0:f0
Fingerprint (sha256): d4:d8:fb:a3:86:67:f2:ba:0f:4c:6f:fe:cb:f7:ba:a4:cf:13:8c:b6:d9:1a:02:ef:50:04:d9:d0:4e:74:4d:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rubenkrapf.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rubenkrapf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ruben-krapf.de
rubenkrapf.de
www.ruben-krapf.de
www.rubenkrapf.de

Other certificates including the domain name rubenkrapf.de

(limited to 100 certificates)
rubenkrapf.de
rubenkrapf.de
sni37394.cloudflaressl.com
rubenkrapf.de
keys.ruben-krapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
sni37394.cloudflaressl.com
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
sni37394.cloudflaressl.com
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
rubenkrapf.de
sni37394.cloudflaressl.com

Certificate

The complete raw certificate details for rubenkrapf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379013688745665453947968252313124694955542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 21:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-29 21:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rubenkrapf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894202160166346812572256790746039523104216330090909318241179847192004598549598493894418399160166582781891059888835820638251766746746947304335550877336949453750258631022729303033909166879833227160385328176964026060963799655013523422527828135276455491129773846459527210780801991412794398894190416735115146666332434576401721180933746750180766223201538807005706578388315302556615189706225701977145035032036679031505077371077487903596571541477225185479939022847288040387766136880289533293628771319664262373457690448470521647740580868061081866129497944904820275901766906823851670434134599910661831281047811780880684321015082989970740219037106187641269951611396236690201735973610086193481956792180137007681716705617393291103428554599868682017261072803754151681614832941183580917225371031544293297209608153959247412008943767063208902015231877680871444602575743561021542902119470903680835024901389617651845732181670778953530002378999206862747386133385679652991808220633736804319792941525190053369229867375892326255897025683939150170394867236103223010594320219642939033907987190219954491979539469478486966689024070355626881934218684916261206135504707319878381527450490956784021827422395114749853253002800676652505267803027633762807049618701421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cdca3073e2a6d39f2369d85b0227278c1b62626
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruben-krapf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubenkrapf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruben-krapf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rubenkrapf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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