ekipa.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:4b:fc:22:29:c3:fe:81:8a:93:1a:e9:0a:87:6f:cc:70 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ekipa.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:4b:fc:22:29:c3:fe:81:8a:93:1a:e9:0a:87:6f:cc:70
Serial Number (int): 330174897164713467469560048096425259551856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:8e:7d:64:73:01:66:aa:03:da:01:fd:72:a2:51:b3:3f:90:39:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:80:1c:03:3f:80:f7:61:69:48:e9:54:92:57:dd:91:18:70:5d:f6
Fingerprint (sha256): d9:e3:9b:15:18:2b:40:fb:2f:fa:70:74:ec:1f:74:a1:6a:54:23:7b:98:86:fc:25:9c:8f:9c:78:09:a0:a5:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ekipa.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekipa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekipa.de
www.ekipa.de

Other certificates including the domain name ekipa.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ekipa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330174897164713467469560048096425259551856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 15:11:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 15:11:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekipa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800201542020304624006815279879918738918213911199989418196273220424203198509027255139696978918138498637336357780697614486885309098721580165399153435812800346106429991613716614922899943276653290225991337218296945984294958957935469249903807686259352076836826107782219688346623836900556097889673103663087749884328024053207880930172599871748969043179258016017920885303571266338643899509102866760322519035507686799458012006097120522705399373083921040877943288047207755122432089485899943661941623300336573593311863868418512686049819913907473573977424426173566002382415179332251030091524056471584257105837906560123750893537395824679315406732962112841299249405976828200608692224885372908982141298176013842158477379316363037920923703255679069662010403570395115295962910137817793496239740001625777467149681750805679709437698352205040448574376503361097583609216610594293567037856383572693271727738781402540726491998611700485007111889965442743214745240101718442356193997247257132915222495075483910930384369463042046866172838600622683662196928700383341666537107786636482716949817472147580185141166340759431218391230453698045142675378684621337659985633325544270382712773215896451364626570181904620769266554656959396255266794565392805868893858369339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f08e7d64730166aa03da01fd72a251b33f9039ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekipa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekipa.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f526d44ce000004030046304402205b185b6ed49e4d832d71baf8120af2daa478d3eaca09bcbd968257786d2c11680220775c38b31f9c11722338895b76be9203d8cbad393035cc812dfeda9a690ba2db0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f526d45880000040300483046022100c7a8760b44bc172e05db1823cff3d2b926810bd3fe36c53926311db81140796b022100b7d5c32568a4979a0000783aa257f2f078c50330faf461ea6578a28d712ee10e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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