compendium-heroicum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:44:9c:93:3d:02:af:7f:a5:3e:ca:b9:39:2a:f4:77:6b was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=compendium-heroicum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:44:9c:93:3d:02:af:7f:a5:3e:ca:b9:39:2a:f4:77:6b
Serial Number (int): 328463684567076883739616538701915739158379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:96:90:37:c6:86:41:ef:70:44:40:77:e4:80:cb:8e:d1:5c:7c:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:3b:ac:c5:99:53:32:f5:44:14:88:f8:1f:42:41:8e:61:24:b7:66
Fingerprint (sha256): dd:e5:43:5e:00:2a:27:5d:9f:ab:a6:1a:7b:c1:5a:ce:7a:2b:94:21:91:36:0f:94:8e:eb:da:47:eb:af:b3:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate compendium-heroicum.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compendium-heroicum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compendium-heroicum.de
compendium-heroicum.net
d4.sfb948.uni-freiburg.de
heroicum.de
heroicum.net
www.compendium-heroicum.de
www.compendium-heroicum.net
www.heroicum.de
www.heroicum.net

Other certificates including the domain name compendium-heroicum.de

(limited to 100 certificates)
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de

Certificate

The complete raw certificate details for compendium-heroicum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsCnbtgyyfGrUYMxY9pMY
avTMwBs+jhIJzbn5vJdUUp0yw+ycpp96NHpUnOmQSK0q8Pe/v68XxrGS2C7jTsVz
UMphAEMIB9xi1ELmeKtOe8yl9w2O7Su4F0/AsFHRQG9FB2HtXsTG/a12zK5kJQHo
TeBVd6xf2xfBPO42XAKzc2T8M+gU4JXNjkQakeG5fqlKge/RZWsxxthAY+3mTZQ0
wzbpPZcgLUXH/h6hl7NNUMPqDn9CrdyljXOGX3TiL566FxoOrA4GoXWKikRePAGA
UecBWxl662sVaOdYxCNsM1ocSCsdGbpPxC7G0i5us8m7aqCdinkOU3BLsnJy5YY7
14LedIcQDTIkXdUSF/6uIOZ9P8hV+9EBRrkvlneAHmpVizVynjYUZSZx+r8posJ7
cEF1EBx3JiERrnBM3dA7L7ifLSYsTHvbhFLKjR5cAZsPqOAQW4KJ5pcaU61YxnKo
3Ubtz0C/LvsjRuOsJDxgqOgzNqIwxuD/tQuf4qps2GNIpkeiL38l7d8xZpVOszB9
p7QihH1fFh0ry8tRuWPZVMpPCQcGaws7/hv4nrxKNLDFicVuujfBGrwanIcfh/E8
78hz74Dfj54VC5wKS8kEv7Z0duivQOf30Q72IHOfHGkbpkw3qfh6FHhqJ041JNIw
Z9EfrKAOKnoArpqwwKQ6C78CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328463684567076883739616538701915739158379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 10:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 10:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compendium-heroicum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718684413578829901584700050002403819851731243713951866432597328180078548923010288731415868942238750532359322078825599657701438042186137622073469762405409473035086484781247114079999549748808534930376025531507338617593552985402538005063170025184835540697013270629730865353759265721960920504387602973280865503889642744257024312019476290349137917655989491994410166944363002918103005486312940332033654288121608214793872640359953414499709727058893229360625525585728454490052340483332778987541280237107402989922515116212568034834931106501599561914687628060189392644333317109054617177918298551602561483341947085289301371630869312195504688560745669049546603571113780613342914885808895377864126553521863133239004815597905203377427484524160914943683502735728289659279148098806243863250278206414193352252112343235051441340399444447543538912104267288036752950938233344357480993978217526101017574311906281791035059232205285706665894857943684889173718405618355852579611202719673628255287436125381124310413526323116458669425143825282557589688836964863220889907045696459390570345043511995582538195503800264056134689042771041510236087727352276280214244254949771019563900222290048289143772740770676540959572821392068572559426349601570091713348608068543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc969037c68641ef70444077e480cb8ed15c7ce8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium-heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium-heroicum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd4.sfb948.uni-freiburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroicum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compendium-heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compendium-heroicum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heroicum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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