ledo-ranch.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:45:b9:10:c7:04:23:0b:11:c0:52:81:d1:e0:3a:2d:2a:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ledo-ranch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:b9:10:c7:04:23:0b:11:c0:52:81:d1:e0:3a:2d:2a:00
Serial Number (int): 372174621337082955693292891605899544439296
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:41:72:cf:64:b4:ee:11:26:5c:61:fa:17:8a:c8:58:b5:f2:93:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:c8:1d:80:d7:13:30:e0:5c:a6:f2:c8:44:48:bb:a2:fe:40:c2:81
Fingerprint (sha256): de:87:7d:50:b7:a0:57:bf:1d:1d:69:85:b3:ef:7d:27:45:02:b3:7b:c1:40:04:7b:aa:e5:a3:c9:f3:f5:5a:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ledo-ranch.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ledo-ranch.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ledo-ranch.de

Other certificates including the domain name ledo-ranch.de

(limited to 100 certificates)
www.ledo-ranch.de
www.ledo-ranch.de
www.ledo-ranch.de
ledo-ranch.de

Certificate

The complete raw certificate details for ledo-ranch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372174621337082955693292891605899544439296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 10:15:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 10:15:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ledo-ranch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784616580535096552643477529355136588865574512946679585349585434550235128966371071161210073782014449715826729976395100832004518657157849746860135657480466266301790734065881314478965536688719059196773276905536038593789386347075777783145373192314747404856291975530186459551692342735247782399792153506175212343773484013906429479844388384626174525397773506925806000850497761736284333302359653357461382434642207226322083151945809979985127545951122762542636395745609762704369975009437031502105963671545167324789059380028534159086556729451868114867299214004301588360387416530932004246646019548532309923658644229932524950403846101715080797195900746523588024485532888302945621917537999120934793196727434275809486169574181293674682210656548967318657923249520805693000926001145553795101635687738255218342826142906394572774309221540522033781074055614158974353606807254596643718823762847736384108093437425093994248067981993054051287758595423846282880069497333462122746804991503014241978321564905470602225731354208005232449299037908709916434003862830116523295452999881777834597895301650412157607273376800458540899087231958750363199358874757283338051298900662094885246392162367064035298394846578228799740691850353753909194555383027021779185602188561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							764172cf64b4ee11265c61fa178ac858b5f293e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledo-ranch.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001687a6c754000000403004630440220477959b77b70c1089e7b74b8b54275462c48662d9e8d69beb2395dce351da56f022060d53f099737232db8f5e39a30aae084817923225dbdd4a13702d1f66abd40c100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687a6c773800000403004830460221008cb24b58dbc32b25d603bc0f0ebd7ed5544ed1b1b905f7f71e0e3b5b1b935ef0022100f093f5118069812a20c5d35adb2257b42785ae03c99561a6ba00c63157c65cfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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