fewo-duenenland.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:b7:ea:c3:e4:ce:45:f0:20:e5:04:b6:38:91:a8:bb:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fewo-duenenland.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:b7:ea:c3:e4:ce:45:f0:20:e5:04:b6:38:91:a8:bb:fc
Serial Number (int): 342908811183276301689232208860937538026492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:e6:4f:9d:20:61:14:77:36:8c:9f:48:48:7b:77:11:44:17:07:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:8f:03:76:dd:1e:02:10:d2:8f:b8:77:90:28:90:e0:3c:3a:7c:d2
Fingerprint (sha256): dd:99:1d:99:ed:7a:cc:b7:57:5a:3c:f5:d1:98:9a:0f:58:f1:2a:41:58:49:15:e3:b5:a1:80:b6:72:ca:50:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fewo-duenenland.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fewo-duenenland.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fewo-duenenland.de

Other certificates including the domain name fewo-duenenland.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fewo-duenenland.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342908811183276301689232208860937538026492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 16:27:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 16:27:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fewo-duenenland.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809122298293011736473504728003177088578220097887007439104804000947657218312853340001222552869275166860679144289463401661216222251339263712765879798344232392404399580155621180363651922689064717789730648625646431735618607520270230109879211257409909749865398097216788947062651977929514182852636120035258367817798006219328086817299473829496242035745866554930666208773072112390495718670033593109764303722375848104250162775621120673040618699592510997817083232530805804795276957653538931494241665456467532712348555316490930797084151569456790535681927543515188792997025510279294242062458483419836513493452492019399526159984445091556838195576061937280375116336804691799443451744445499296393159785329138705576939418066319935827690760373781613118988361352736790996075540331513506229680931954161175124051037002499599798839465073297416104312659408006164197277162595847494032619896215907442042061086329216291222653073087986235149402697398150094491818479126571958528391640068359299016845564968008891240810414804733294988184843457720563134765115529122500922327105815860109930512317558661680846107616208051616284630162396208252250381899453010470908681472231829388233882213608209619936953567970597247760031137059943156893969428197881690161714557833691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2e64f9d20611477368c9f48487b77114417070d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fewo-duenenland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff77e27c40000040300483046022100ec339e47e46b42e875db419968f7a60232c1c2a305efdc5ea70ca08ea4309403022100e7612aace7754258faa265d1d61bf6cb62b5a40ab51f06895d1b9ea6de53de5f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff77e27c4000004030047304502201a42de84b6939f163dde9cef155b87cd29365d8e8e16dd7bf6f6e0317fa9c76e022100a87b3f2cb1ed20b07355c55c8a37c7cc8c13d1c5bb49fe99a2b7e18ffb704bd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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