www.web.digum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:ef:ed:e7:ae:2f:45:f6:1b:80:6c:8a:e4:0f:7f:78:4c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.web.digum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:ef:ed:e7:ae:2f:45:f6:1b:80:6c:8a:e4:0f:7f:78:4c
Serial Number (int): 347066652656821311011521186688712986032204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:6d:f2:4d:90:8d:1f:f1:d5:bd:a5:50:1c:da:6c:28:36:b1:7b:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:19:1d:30:34:13:4d:48:16:8e:d8:73:56:f6:fb:49:58:49:75:ff
Fingerprint (sha256): dd:93:8c:07:86:9a:a0:2d:9d:6f:8a:11:f0:a6:76:08:40:5e:6a:0c:cb:2d:7c:98:e7:85:44:b1:0b:e9:54:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.web.digum.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.web.digum.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.d-umsetzen.com
www.digum.de
www.web.digum.de

Other certificates including the domain name digum.de

(limited to 100 certificates)
facturen.youngcoders.nl
finance.robvens.nl
facturen.youngcoders.nl
www.web.digum.de
*.digum.de
digum.de
invoice.bmine.io
accounts.bcctelemarketing.co.uk
digum.de
facturen.youngcoders.nl
digum.de
facturen.youngcoders.nl
pay.classictravelandtours.com
www.digum.de
invoice.besc.be
www.web.digum.de
digum.de
digum.de
agent.tuketravel.se
www.digum.de
rechnungen.digum.de
www.digum.de
facturen.youngcoders.nl
*.digum.de
mybill.cityaddress.co.uk
invoice.mediologysoftware.com
*.digum.de
www.web.digum.de
www.web.digum.de
digum.de
www.digum.de
digum.de
clients.broomx.com
usinvoice.sujaynsg.in
werkbank.digum.de

Certificate

The complete raw certificate details for www.web.digum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISA/vv7eeuL0X2G4BsiuQPf3hMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTEwOTA5NDdaFw0x
OTA1MTIwOTA5NDdaMBsxGTAXBgNVBAMTEHd3dy53ZWIuZGlndW0uZGUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkpLe80y3FXUNP6sXGtoTaku5Qvu3
7isKrmwjjN+TNTPtP9CKu+GEVUR+EHTg3DUdgTZMfTsrt+h2q/jQHYkUI98LpuBw
pdqa2JeOylMTOjAMZ3I+XwRrePyLLer9YHiwklwduoI664jHbGNf/r8OXlcLtzqw
xBPIreYGbfdvNjAVd9/q4DUrl/DiroMtWNXoa2VwS/p4AzdZFeYs1B8kb+jcyuj1
41Svgd/6uXvcNffkG/tVh275sKACCiBvvIddJNa8A1il0GAwiLQ0d7KBouzOS5eF
bXpGAjcBFEsnRzxRUsnv3fEfaecMJUvzoVNR5kpz8N7OyuImhI4vJD0jAgMBAAGj
ggKFMIICgTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIRt8k2QjR/x1b2lUBzabCg2
sXvCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wPQYDVR0RBDYwNIISd3d3LmQtdW1zZXR6ZW4uY29tggx3d3cuZGlndW0u
ZGWCEHd3dy53ZWIuZGlndW0uZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+
dIj7pI8okwGd3fHb/gAAAWjcCMCjAAAEAwBGMEQCIHXtnQgV0bpaZpQooh9PMgP7
YEvEU6B7wPI8OmPFaU3FAiACvTze2R45wMJJt4d8Y1BPV+LfWtcYCuIT+sOS2lda
RQB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABaNwIwO8AAAQD
AEYwRAIgGOZH+7+RLACllsMjFTZjixAJhmQg5FHInfDjMGFIYysCIA9eK/BeackO
HoGUIq8LjgP2ftjEzeDGOaFG9tEbWFB6MA0GCSqGSIb3DQEBCwUAA4IBAQAcuaX+
oULuJlItBK4FZVtCadXk7Z9x5+vsLNAA7drxxGUvk86kWm+orsVdNBCB4TDTGlrt
FlwcSwni7mwilsf+2/QLJC5w9ulVQJS45Ek4lPjKcShljIgyayK4Kr61DgoxVMsC
xPECK2/Oja0tHnN5A26g7Q27SMcDXvphiTkoz8oYg1JKAW/ClcVydHN6w69JoMEV
mUjADk/u2dVc8VsHYRyf697rvFSF2huBe09Ej6earJfQSvxFmP7sGMFtmZuzbHfq
lyucLKjdg6lppyoXN5uEqAyg2gKNhOeAaexs8X6PnwfAA1tcB1iFDeFbhYRZsNbY
vVfF/tYFG3FVIJum
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZKS3vNMtxV1DT+rFxra
E2pLuUL7t+4rCq5sI4zfkzUz7T/QirvhhFVEfhB04Nw1HYE2TH07K7fodqv40B2J
FCPfC6bgcKXamtiXjspTEzowDGdyPl8Ea3j8iy3q/WB4sJJcHbqCOuuIx2xjX/6/
Dl5XC7c6sMQTyK3mBm33bzYwFXff6uA1K5fw4q6DLVjV6GtlcEv6eAM3WRXmLNQf
JG/o3Mro9eNUr4Hf+rl73DX35Bv7VYdu+bCgAgogb7yHXSTWvANYpdBgMIi0NHey
gaLszkuXhW16RgI3ARRLJ0c8UVLJ793xH2nnDCVL86FTUeZKc/DezsriJoSOLyQ9
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347066652656821311011521186688712986032204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 09:09:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 09:09:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.web.digum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17366925972791910298856708667528533964581198426035899874547618247405561550736365510897451640151382364028066917961628944023790076505519116708319771345653152141155026670956269568895997996864306357712473594221411852769042075029453530892169650587541608696592443949441500533911667738674963023958463958546971570778243468709343076296829835143669631506344467933134506320023007622662899937649374538541904946955502282699629617614967384795602908201695243438597408092686634228627329796314969676740583086658556663475709150866374587351733382346885198726666842349276872925371694777940089883222162023946133793061644631634332933700899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							846df24d908d1ff1d5bda5501cda6c2836b17bc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-umsetzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.digum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168dc08c0a30000040300463044022075ed9d0815d1ba5a669428a21f4f3203fb604bc453a07bc0f23c3a63c5694dc5022002bd3cded91e39c0c249b7877c63504f57e2df5ad7180ae213fac392da575a4500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168dc08c0ef0000040300463044022018e647fbbf912c00a596c3231536638b1009866420e451c89df0e3306148632b02200f5e2bf05e69c90e1e819422af0b8e03f67ed8c4cde0c639a146f6d11b58507a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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