12bis3.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:1a:f8:0d:e2:64:b3:e3:3a:dd:16:7b:1c:fa:b7:9f:5a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=12bis3.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:1a:f8:0d:e2:64:b3:e3:3a:dd:16:7b:1c:fa:b7:9f:5a
Serial Number (int): 311394213631778074066397475503455681879898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:e8:c7:74:5d:12:22:31:cd:15:40:75:e8:5a:36:bd:52:ed:60:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:3f:d1:45:82:4b:31:3b:2e:9f:d4:6d:9a:93:98:03:46:11:59:95
Fingerprint (sha256): d7:64:64:cd:54:1f:ee:9d:27:3f:53:fe:ac:80:13:b9:c8:04:91:01:42:04:ef:a7:6b:d9:60:c1:88:88:5a:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 12bis3.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 12bis3.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12bis3.de
www.12bis3.de

Other certificates including the domain name 12bis3.de

(limited to 100 certificates)
www.tekom.de
tekom.56.stage.12bis3.de
www.tekom.de
12bis3.de
webmail.12bis3.de
www.tekom.de
12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
live.tekom.12bis3.de
www.kaercher-municipal.com
tekom.56.stage.12bis3.de
12bis3.de
www.kaercher-municipal.com
tekomconferences.72.stage.12bis3.de
12bis3.de
www.tekom.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
webmail.12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
12bis3.de
www.tekom.de
apps.12bis3.de
webmail.12bis3.de
www.tekom.de
www.tekom.de
www.tekom.de
hoeveler.72.stage.12bis3.de
12bis3.de
aussicht.stage.12bis3.de
relaunch.maxholder.12bis3.de
hoeveler.72.stage.12bis3.de
hoeveler.72.stage.12bis3.de
*.12bis3.de
git.12bis3.de
12bis3.de
git.12bis3.de
git.12bis3.de
www.tekom.de
*.12bis3.de
webmail.12bis3.de
git.12bis3.de
webmail.12bis3.de
mail.12bis3.de
webmail.12bis3.de
relaunch.maxholder.12bis3.de
*.12bis3.de
webmail.12bis3.de
webmail.12bis3.de
git.12bis3.de
*.12bis3.de
relaunch.maxholder.12bis3.de
www.tekom.de
www.tekom.de
*.12bis3.de
tekom.56.stage.12bis3.de
www.tekom.de
www.tekom.de
git.12bis3.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
*.12bis3.de
www.kaercher-municipal.com
12bis3.de
relaunch.maxholder.12bis3.de
12bis3.de
www.kaercher-municipal.com
git.12bis3.de
12bis3.de
cloud.12bis3.de
git.12bis3.de
www.tekom.de

Certificate

The complete raw certificate details for 12bis3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311394213631778074066397475503455681879898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 19:35:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 19:35:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12bis3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835379317830805873781549121581995392631504087301740865395876911623241013700343961954417254364211556906149050885760514589425563232471750029071712394947823855357556229373228443798243165021005592361265876818979096440565359390028048817174369713446730803329757178915046064390908521371056863770644967468906110994831547370909145005771601803276088638055776939321753222981107368373110438739766194078728860424934494601882981339698910789161793545337399489565205005794357297429571970854838132833327493013518566407819273535294381382667289160364393026942759933085265854667601710182236803920179382535621044081128044914639246179630039291823674662639006039771795450394698634593383059639888908737336345060635918609969554160794895672467991635286300875707480973409824553967585388048218625937278487175428047256577647987516345882423827106391777760988376716319026735128788273287779391775500083817425587399085602024663962182801594090014436662121289300828789297338631387500616718937376156663674887148011746247831388325792516539471493246015089254647087070630760231123941205047569282729131420656439886093108882444470765390759206525178954345566247570819505103635602812863267996432349612187722386278320475729121679313218052991873128587442299091847518559795401323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1e8c7745d122231cd154075e85a36bd52ed6021
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis3.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a46c27638000004030046304402206913180b4136debbbce1a4234fc62cca1014b58527885f611e0b2041f59fe19702205ba9949cb0649bfd2929443cfa18f3994bd46ca92c67140531e7e1a1303a8eb7007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a46c278900000040300483046022100e4c4c523b8f6f0fe32079aa3b6b336c3e0ae7a7036e4aab2f888795db63659ba022100c1545cb2427b742e65a4d0f772ff6c80a6c90d9fa4813b76695479376870e3d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065155586b9124baad939072e9f3444bd6dbb61e27dc9757e5cb989ebb446720d7969fac13f7f26a38676475de83b6d19b95d55fba76c5f5d7def9ecc37654aae262a5d8b524ccbabab0ec472d179b2584eeaafa5d02d249d5765aa95c43d9ddeb53ea0aaf25189e63f349d70ae476a8d38fb7bb05d1c98da4221dafa70fe186575915a09f94e4ea39315a9dfa2cf7b12a99b543efa21bd73d499909f997debe4df49db1313378ba54b292942bc7e806c2aca0a5f1e1da0b8c76a3ac116fd945a19280296fe80667be1df8648ca1a3ab47c17372719f4a491ce0f4c2244b824381afb7dae6d13416b78553b458b5e6b816158642dc0e978474907e892923e23a8