rothenburg-restaurant.de

Issued by R3

About this certificate

This digital certificate with serial number 03:64:cb:3f:f7:ac:6b:82:6b:c2:dc:b2:2f:20:cc:82:d6:de was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rothenburg-restaurant.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:64:cb:3f:f7:ac:6b:82:6b:c2:dc:b2:2f:20:cc:82:d6:de
Serial Number (int): 295635259908636700522260508952891154945758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:01:f3:a9:ec:e3:2a:b3:67:e9:61:21:22:b3:b6:4c:40:c3:73:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:50:a3:6f:19:8a:9a:56:f5:85:7e:76:ea:e5:e2:6b:c1:b8:6c:ba
Fingerprint (sha256): d7:16:e2:c2:ce:6d:34:b7:d5:13:f7:c3:49:8d:54:5e:4c:a8:79:8a:67:c5:ca:1a:22:fa:17:06:96:3f:33:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rothenburg-restaurant.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rothenburg-restaurant.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rothenburg-restaurant.de

Other certificates including the domain name rothenburg-restaurant.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for rothenburg-restaurant.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISA2TLP/esa4JrwtyyLyDMgtbeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjcxMzI2MDRaFw0yNDA1MjcxMzI2MDNaMCMxITAfBgNVBAMT
GHJvdGhlbmJ1cmctcmVzdGF1cmFudC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ7XaD3rfmzujnHeUfl6/8a/i6qf5Uc4hgt578RhEpZ2QtJEedC4
FkfchQVAzbXtheR9i6Pw4I+M/aBg0FsyGJ0qj+hV/e08q8AfPvRT88F5cPOr6iTc
23ArfhneAhp6hYbc6Ihs/YsdcBgTecyp0EKa5IaCA9Ob0ViY+/YzvsvjYQVemSfv
pxJbzIIlq1Gn3ctOX/aLIMpn+Jq86Ygvo7RL6TOqLrNkpetwk+qIH/ROZkHkINQa
miF7XkbHFl5Bm4nivU98MQfuYs4UZa55moz1dmsFCkGGXgP7JvnFnd8S28y13E9J
VeWuavvfA6kGo4V+wjX94UVcfCnpJd8umUECAwEAAaOCAhswggIXMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUnwHzqezjKrNn6WEhIrO2TEDDcyIwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYcm90aGVuYnVyZy1yZXN0YXVyYW50LmRl
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGN6vVcRgAABAMARzBF
AiEA8KN+j4teQ/ErkF8stip0ByfRggac/69KzzJPoz9rePgCIDw6qZ7pmtnPSdJ0
Fkivdndlr0Z8JD2lOhgdJRVWPHttAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC
Cp/mZ0xaOnQAAAGN6vVdMgAABAMASDBGAiEArmnsLmF5N6qKzbLtc5M5b6Mngu1B
4WzknexYZYkZX7sCIQDv31gzhUg6tmsRr7xgPUoscQhdgtl7kwVEElKTFFtkezAN
BgkqhkiG9w0BAQsFAAOCAQEARYnag7wyt9GixwkdFjf0JciJWO/fChQnCOVxUI/7
EBMbjdXAkCEb77SohByuFciQ8sM+9ubUp+VaHmIH0/WIiIXG4vQLp+cKacXs3T4y
eMa7lITUR0T2SQHyNUu1T18e0p/kQ9SMT4iEGV3wrJB2GWA7nSwR/kmHamHZBW/F
Fip4vYdl/EzuqnvkziqqHa46TD7dCfZ+iQ2IRu8+ZH3KuUTQv7e/GuOJW9+pMKpM
5BRl2P+f9YaVdutE2cN/f+rD6uzVnYSRIcSgSElD7sAMFSV6jp82cYEp34noeChi
kuwrMwOL+ger03cdvUMxP7Jg6UwWhKq25pm5tyXMFdRWtA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntdoPet+bO6Ocd5R+Xr/
xr+Lqp/lRziGC3nvxGESlnZC0kR50LgWR9yFBUDNte2F5H2Lo/Dgj4z9oGDQWzIY
nSqP6FX97TyrwB8+9FPzwXlw86vqJNzbcCt+Gd4CGnqFhtzoiGz9ix1wGBN5zKnQ
QprkhoID05vRWJj79jO+y+NhBV6ZJ++nElvMgiWrUafdy05f9osgymf4mrzpiC+j
tEvpM6ous2Sl63CT6ogf9E5mQeQg1BqaIXteRscWXkGbieK9T3wxB+5izhRlrnma
jPV2awUKQYZeA/sm+cWd3xLbzLXcT0lV5a5q+98DqQajhX7CNf3hRVx8Kekl3y6Z
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295635259908636700522260508952891154945758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 13:26:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 13:26:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rothenburg-restaurant.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20051873431324395778202287587649407770781257246505546939529813951559119250646725376555869693523226311255371800959362009321172396032488278308062556791700380288703848906664538637100863156880094217262600592508322091556051488657570779258267071066095947602158674870903379114108140186984956955865955614966906217714447835118008172555084331193843416464691022802273812599595226167239082663540295384755812723196138526006410605547337576422242602516658241139099403832386371486737875967966405177800703447198337200866674284147594993199650192352920601150611636722884429965996341794313928878608199289101836873645296080932291428129089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f01f3a9ece32ab367e9612122b3b64c40c37322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rothenburg-restaurant.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018deaf55c460000040300473045022100f0a37e8f8b5e43f12b905f2cb62a740727d182069cffaf4acf324fa33f6b78f802203c3aa99ee99ad9cf49d2741648af767765af467c243da53a181d2515563c7b6d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018deaf55d320000040300483046022100ae69ec2e617937aa8acdb2ed7393396fa32782ed41e16ce49dec586589195fbb022100efdf583385483ab66b11afbc603d4a2c71085d82d97b930544125293145b647b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004589da83bc32b7d1a2c7091d1637f425c88958efdf0a142708e571508ffb10131b8dd5c090211befb4a8841cae15c890f2c33ef6e6d4a7e55a1e6207d3f5888885c6e2f40ba7e70a69c5ecdd3e3278c6bb9484d44744f64901f2354bb54f5f1ed29fe443d48c4f8884195df0ac907619603b9d2c11fe49876a61d9056fc5162a78bd8765fc4ceeaa7be4ce2aaa1dae3a4c3edd09f67e890d8846ef3e647dcab944d0bfb7bf1ae3895bdfa930aa4ce41465d8ff9ff5869576eb44d9c37f7feac3eaecd59d849121c4a0484943eec00c15257a8e9f36718129df89e878286292ec2b33038bfa07abd3771dbd43313fb260e94c1684aab6e699b9b725cc15d456b4