german-warmblood.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:dd:2a:53:74:20:1f:9c:d6:ce:56:66:8f:9d:2c:aa:41:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=german-warmblood.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:2a:53:74:20:1f:9c:d6:ce:56:66:8f:9d:2c:aa:41:26
Serial Number (int): 423707807708335210735431746175163152613670
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:d7:0f:b3:c6:f7:eb:0b:f0:43:bd:a8:a3:69:f2:62:23:62:b7:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:47:e1:84:0e:50:0f:71:f3:e3:85:92:10:f1:43:67:58:15:f7:b2
Fingerprint (sha256): db:69:d1:cf:9e:67:2b:5a:24:2d:4c:62:47:c0:3d:c6:08:42:9d:0d:7e:d0:88:69:34:08:0f:07:8d:2f:ad:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate german-warmblood.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for german-warmblood.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

german-warmblood.com

Other certificates including the domain name german-warmblood.com

(limited to 100 certificates)
german-warmblood.com
www.german-warmblood.com
www.german-warmblood.com
www.german-warmblood.com
www.german-warmblood.com
german-warmblood.com
german-warmblood.com
www.german-warmblood.com
german-warmblood.com
german-warmblood.com
www.german-warmblood.com

Certificate

The complete raw certificate details for german-warmblood.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423707807708335210735431746175163152613670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 12:18:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 12:18:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'german-warmblood.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938527082919810978792926539602852246435683160090845957623550712581062501246205425513674568565110098661993116749711265791310672935788456529175882882593339191101383862514458950253131688432481421437053529788694036146064810168597732923921645382975548482053823179267758552367909916594072684120972020425359198165626634984366765308872818281390103088248654692016617826125916945051145100015726985697891703341896711367969663053979154182899357560229579981689171099713609992405967459333135431240249758571537148522635129624582290160444814220566229700672312455639530368386082574808074176047576710845581896921228897869048717445846454386405463413320604411238761057553532669741206616303069352127359087944248978710368827485844204450540325083901015274120701457077387464394202348063473067413072231395905170915991650122771037047323605733492090002547031226017209127852113706397822514642760341864476994812562845604822531227938024428263752168161706705634355931613927364664002296717689892686936303800607459944888636365628311214527947079809775499944388430400267274919531566568487808339221983230681229336426564335592687830534688285448024208201106649690038587784734850974405987072586442365625656179502218229767067922288373505998920583026231308179728992076081281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4d70fb3c6f7eb0bf043bda8a369f2622362b7f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'german-warmblood.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbaf86d080000040300473045022100ce3c0a50adb60b214ee86144e198b1ae2140ab48720ea377d8f33d8b5504ef97022006afdb50162b4445bbe8a917f453aea1fde7a51ce5d904f4688d42539e907c9c007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbaf86dda00000403004630440220343f7a62c94aa5e0885d5301d1f23194d02371d1e6cc92cb5fe1ccc41f5415be02200430a82915e40e2232b616b011f88044c86d5df178328247380e17033c4204a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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