fsg-preetz.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:17:71:41:be:b7:fc:cf:f9:7b:0a:94:2f:eb:e0:75:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fsg-preetz.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:17:71:41:be:b7:fc:cf:f9:7b:0a:94:2f:eb:e0:75:f1
Serial Number (int): 408029718245120201696489583842755291936241
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:c6:e1:92:e8:a2:7c:52:3b:a6:60:df:d9:4c:92:7e:8d:58:eb:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:7f:03:f0:93:a9:02:98:de:e1:6c:a7:e5:61:3c:09:a0:45:69:b0
Fingerprint (sha256): db:f8:ee:2a:05:3f:b7:d0:7c:66:15:c0:bf:f1:39:4f:da:1e:aa:ad:97:94:21:0d:ae:94:fc:dd:dd:fc:16:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fsg-preetz.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsg-preetz.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsg-preetz.net
www.fsg-preetz.net

Other certificates including the domain name fsg-preetz.net

(limited to 100 certificates)
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
www.fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net
fsg-preetz.net

Certificate

The complete raw certificate details for fsg-preetz.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408029718245120201696489583842755291936241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 22:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-29 22:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsg-preetz.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843954043873163709634146096928080330520679995078758783790012930483721073581789015254917947730925206054871637876260243661525237264564770953112263082117190117243187341328870715400716240236330112448948623555377187731724717538426757249029509896037933941028654864604392615460391578178414037685238007665815229100232006580762808738642115906711858116244758751254172775590744688700794929862242296374326604803514264279370684993508285619375169811446261126432002064627139996769007372342543539653178282386833836218473741888309862682797004590827086808402118705629790757221819122183959405417749504740265095856033741948386470787147530995554652789168938764997341932889078899532506017565565579072450149124155344080039304615114226790278788210006047521158966186987063671340883661375349888430801693479382331057451485673188765947203937180174222682478042824549792680872521178894533275737390772770291411318309899574600057195060481791003330892805186145578280673780787096210248970790901884228561634257127769585981679015071943737052221428905132797853035382345016490032873171377387484787724674689141797612043234561408112923423123733325437052025551523831753395234186458797286785650369615862188994645462790175455255581535577621645060026994436177568026414075916391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3c6e192e8a27c523ba660dfd94c927e8d58ebcb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsg-preetz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsg-preetz.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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