gudrun-petzold.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:27:a0:ff:9f:01:a0:0e:2c:13:ba:58:2d:e3:42:38:79 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gudrun-petzold.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:27:a0:ff:9f:01:a0:0e:2c:13:ba:58:2d:e3:42:38:79
Serial Number (int): 407030386681387609344671000357822384978041
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d0:b8:80:70:21:19:c5:b1:26:db:e0:0f:87:7f:b3:b8:90:9a:e5:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:b4:bb:91:f3:dd:f4:e4:5a:16:44:ee:42:4a:33:36:39:3c:f2:55
Fingerprint (sha256): dc:6f:e2:9b:9e:0a:fc:f1:8a:a5:75:05:f7:29:9e:d1:27:4f:21:e0:d4:2f:74:82:87:60:a6:1c:ff:d5:9a:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gudrun-petzold.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gudrun-petzold.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gudrun-petzold.de
www.gudrun-petzold.de

Other certificates including the domain name gudrun-petzold.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for gudrun-petzold.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuWOm4ieRe4nprLUHSstI
00A4W9FSJLL+8AnO6cl3sjCinYS5mS/yHVX09q4uGk2Pzg3f26bzXKIB0bQQrJQc
1x8SppFbC12nRXfWBFhyX/gKMZm1y33eln7bfYA8BRH6zgNYiVBgbiT/9zsPqqik
fsPxpjRjxvQnd2y9oQ9omta7vA2Sdx3c/of17l0FZwvpBGlboRl9P0Vnke5d8WVO
p9CkD3vjDQVJcPb0qw48NnYZfXHovgYZrf/rHjKBM25CvX8gts7sSIXthWyjMO1O
uDfTtdqpYs0I6Q62HQv8SL67STAVxEjsPbVflwxS6jm8WYocrrdzsQ+OHKYnJIlM
WWH6Of0UKYsi9IkW29RCS3oYo1hC7evMIK9/vp9iJO5nipTjdwPK1I9qkXqzi3jM
KYq6sPJetctM4LPpRfnNOLeGms/UcobjZCNbxFKzDEODxVhEHXm7IuYEQg06AIOt
aO/tHLEpeuk5rxu1AIaDGEXv90iRUMIVi79pLL8j18z/gIcqCkBiBl8Qtg9J+jgl
zmsxqQcF1rIfz7XvQ5ulPgNGec9mzc4cDIc7J5fpe8XJ2/ir372JLigIBrgz9crg
eOGScvfMA9jgHJdk2SVMBLsISdoKTSkb6TB+TbNEBaDaJxrTyzVdwzDnGSFhkcoh
Nm23geePAWiCOkpPn4QMiSECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407030386681387609344671000357822384978041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:04:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:04:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gudrun-petzold.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756322216002289093553964077482479475867222769864257231657184314813596654076747097246875700249288731080335290403118269410348841802656664137475295873650511360982108427193289391481233813816476475631646669279847120099337291115846849904960849495664037328090909414732778484281679135929880855848893182964980496010154916724842781308960758001175624266181976317070748015638076081690438486924668691294881411314548650184174273788431869755505040965744423276959375797003058026453179309241465642534801545950459398837731290380408707278979595696844149819426130276475033163782225526905762319528906207660991525885064204716670815595543032077756122759866931534162403591244641948381007800768796487172948391723217259506990460503894563906422157540994083054768344814851800404744406202681918553206258311793193205154079852808717004471901279108489722894458240807765269481385858419610869930338630123044996796972503690816808377366219363843470806020616634063041925471239679657549017656086182295970592771894271197138303684092875485650276222859433902189390270810850993991398918888540112778526714339921719151834271625362956575678885972388925314583015562176160789906021384756925100479619118739809329124340642154052689001951013970853450805413516747308314582781350676769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0b880702119c5b126dbe00f877fb3b8909ae5bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudrun-petzold.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gudrun-petzold.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018af310d829000004030046304402205437cac1d0d6e01a82641563fe3ba78063aac4808832dfd435d3bd4d3624b4bf02200c9bb91e99ec0152519c8770e24bb091961dc64bb85e75a68bfb403619a9148900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018af310d8600000040300483046022100c12de57c558e42155d3754a76fac175468fbadeef30448b032a48f308cd44d1d022100b1b4445c587d02250c7b303730e7dbaf8e1320c1eef44158362aabf6da0b015e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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