lp.viversum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:79:30:4a:fd:24:0e:7e:84:ed:48:c1:1a:cc:85:c3:86:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lp.viversum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:30:4a:fd:24:0e:7e:84:ed:48:c1:1a:cc:85:c3:86:60
Serial Number (int): 389687502432546077521614219776426026174048
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:00:87:98:9b:cc:88:f7:5a:aa:bc:25:79:28:9c:5f:c1:90:b3:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:1f:35:16:eb:47:77:8d:d3:e9:0c:4a:93:be:8c:bc:57:4b:c0:f4
Fingerprint (sha256): dc:b9:b0:9b:71:48:43:15:e4:50:75:cb:b8:6c:a6:16:2f:fc:84:cf:48:ff:3b:1d:7b:6e:0c:47:a5:ea:bf:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lp.viversum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lp.viversum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lp.viversum.de

Other certificates including the domain name viversum.de

(limited to 100 certificates)
www.viversum.de
trck.viversum.de
*.viversum.de
astrowoche.viversum.de
ssl810159.cloudflaressl.com
trck.viversum.de
*.viversum.de
dev.viversum.de
ssl02.viversum.de
*.viversum.de
trck.viversum.de
news.viversum.de
trck.viversum.de
lp.viversum.de
lp.viversum.de
viversum.de
www.viversum.de
api.viversum.de
dev.viversum.de
*.viversum.de
trck.viversum.de
beratung.viversum.de
beraterportal.viversum.de
trck.viversum.de
lp.viversum.de
trck.viversum.de
*.viversum.de
viversum.de
dev.viversum.de
www.viversum.de
vivcdn.com
api.viversum.de
ssl02.viversum.de
trck.viversum.de
trck.viversum.de
*.viversum.de
www.viversum.de
trck.viversum.de
vivcdn.com
ssl02.viversum.de
*.viversum.de
viversum.de
www.viversum.de
api.viversum.de
www.viversum.de
www.viversum.de
viversum.de
trck.viversum.de
viversum.de
trck.viversum.de
www.viversum.de
beta.viversum.de
adventskalender.viversum.de
viversum.de
trck.viversum.de
adventskalender.viversum.de
trck.viversum.de
ssl02.viversum.de
beta.auramind.fr
stage.viversum.de
www.viversum.de
viversum.de
www.viversum.de
lp.viversum.de
ssl810158.cloudflaressl.com
beta.auramind.fr
trck.viversum.de
ssl02.viversum.de
trck.viversum.de
*.viversum.de
*.viversum.de
stage.viversum.de
www.viversum.de
*.viversum.de
media.viversum.de

Certificate

The complete raw certificate details for lp.viversum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISBHkwSv0kDn6E7UjBGsyFw4ZgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTkxMTIzMjlaFw0x
OTEwMTcxMTIzMjlaMBkxFzAVBgNVBAMTDmxwLnZpdmVyc3VtLmRlMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx8FZGpmH3yzKDTlk3tkTClU06R6a25GF
tVfCHO6jgJRVqHtDlZVr8+2wRL1YJOFgoG2uvyhHmHETfa10hrcOnZwMzp/+U0k0
V6JMjD1sSqIMIGEndYWVJuQdAYxXp+O5gea8UaaqHrKTdyfMbgVDoLnUI4sXCtyo
qDQ//yS2lcV0mAwUfWHBKaQt1q5XO9yM68FqKdiDjXA00O9CMwyL7t7AMQikWPZy
PgO+tP6MKXgn8QOkbkdhPqvw1yf7gctKdaQ/6qZSXZ41FNtZD2sbCop5P+7txC9d
SU2znZ8ugN4xTGZR+Dubhl9w29iFoFsv1qHOY0IqjRTYnmB0irXOu8452NmJJxME
0MutRcypQiGDBqWO9rdPrvfN+gDjrY3/bCxBT5PIuW/cjC8R3LcUxo3mXsnCp/jT
3DHhT0Hz0sShFgwO4GRWWZ/pht9WD02wziIQCYaf3xSdQLAEpOz/Hweudnz/wgSw
PgdHO9029KdCydNg3/eC6BLiPl4KHCJn7PmehzcSjmnDgPcr7I8RYEtBH8Y9pZ8U
ZldQ6jRH3Ma4IXxcnpGiLzqcM6NoQx6DQUfOqk1RjMpYVDPGyKb2Z0hVQN1kSf6s
8oNq/tBMLY4+q+x8g+k5SjCOrLihtf5fbxKJrfK9MSi1eMlhelpJYFF0Evhc1UnE
nFeWqlGyHBECAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBQCH
mJvMiPdaqrwleSicX8GQs0gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5scC52aXZlcnN1bS5kZTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABbAov8VYA
AAQDAEYwRAIgdJwSwF4k5WraaxYTuKqOh/gXFxMEHEg85EcxXMh5x0YCIDEr3vcj
+cDAAoW08T7Ncs2QMaT55zTZCsfNu50tMeS0AHYAY/Lbzeg7zCzPC3KEJ1drM6SN
YXePvXWmOLHHaFRL2I0AAAFsCi/zTAAABAMARzBFAiEAykPHnxmvaHk068tFrIau
cr/cym63quMxnhto/IS6snkCIC6RkznG4KljMXdZDe3ZnHiBsB5vg451b5b/NyQu
KDmnMA0GCSqGSIb3DQEBCwUAA4IBAQAnLxhRqNBX7QUKETV7U+vC6LvrEwukXpxS
DncjWj567nFnSZTJW6aSmMghGUiHIrhWUOmQ90qiMUWt/9JzeQIhZJQzWi6+KRS6
9tn+V7EUpsV3rMEJDNBx3aOV1c/R9Lxc4Do0wrzlHWG0X2KisFJa4OmIL9iw0/XD
Y2N6XrnyHMbIdNCXc/52b8RYRER91Xc7VxfOIt5FeGvvE5azlHDCuFPu9sBYVER2
SPTRF1zhack2eRMismoQrx6NaEL1QZLkKyB31z6sLpwi1xqb8R4tplQVpaMFPf1F
QTYpmTxuY+igozCBi5QrURGcrqMaTWPa8PiseEDNrocCXxmRctWr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389687502432546077521614219776426026174048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 11:23:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 11:23:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp.viversum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814930385452921128423656619556626665748400388282777925526495587392360606964723402082146520571642276204187503006863380732637159269705962669526757677515489759909818861497542542571431161220946888086931337920518732260123999117606306100834622630103204978921234248282048853203949884128422447738243558969629670765713251354840535221978441194434560070254793448320476177764791009031531906001350211747775693613803759941921430404978320843900500270581254406864319174566754143398061443337950766927545263241574568626482512640811844979877240880467805770508923426575148357565055724558504367934296337953014208795160397325346205839198594241100513149392374359936683118520528296870471818048618740037608161842273256526907595785882360852529008410590454147695909735563702005571530530738172745489345294835798771519986967890116391832328591671171293088510037307548249633323225126797755006516270255060629005438589550049909532141214720106080537882048354064557368248924131494080990182246555785095802431165056835528754441722480933456357405107564644538627588105450655551879238950449658125191515100964618331713613307829607102759174822521701894435867954511918635811362431386382178322729448826094208976544547306993748133329812472614811979716632785531481361137018215441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							050087989bcc88f75aaabc2579289c5fc190b348
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.viversum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c0a2ff15600000403004630440220749c12c05e24e56ada6b1613b8aa8e87f8171713041c483ce447315cc879c7460220312bdef723f9c0c00285b4f13ecd72cd9031a4f9e734d90ac7cdbb9d2d31e4b400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0a2ff34c0000040300473045022100ca43c79f19af687934ebcb45ac86ae72bfdcca6eb7aae3319e1b68fc84bab27902202e919339c6e0a9633177590dedd99c7881b01e6f838e756f96ff37242e2839a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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