hommage-leipzig.de

Issued by R3

About this certificate

This digital certificate with serial number 04:4d:84:06:7d:b4:18:83:a2:b4:34:ce:07:a2:4e:f4:ea:1b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hommage-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4d:84:06:7d:b4:18:83:a2:b4:34:ce:07:a2:4e:f4:ea:1b
Serial Number (int): 374826377778747864864256571200906494011931
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:89:92:f5:6f:c9:1d:d1:6e:4d:fc:b4:53:83:2b:b5:e0:30:b3:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:72:a7:54:b8:6b:5b:19:b4:4e:51:58:4c:11:59:5d:b6:9d:7a:fe
Fingerprint (sha256): de:d6:6a:5d:bd:33:33:96:5e:d3:35:01:42:49:77:80:4f:9e:58:fa:eb:6c:d0:9d:2a:fc:e0:4b:56:3c:32:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hommage-leipzig.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hommage-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de

Other certificates including the domain name hommage-leipzig.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgISBE2EBn20GIOitDTOB6JO9OobMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTIwMDA4MThaFw0yMzEyMTEwMDA4MTdaMB0xGzAZBgNVBAMT
EmhvbW1hZ2UtbGVpcHppZy5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBANrhoi9Ws+4CRMEq4M6+ykkeNp6pDhinxY6ZT8T10BGtIW4hTDuULE3kHDtm
ugNIoa9pI63CVxp09i4mi/G8dVFu2BAKTwFtN6/qffJXR/JO6cAhYhQB2QvY7qP3
J99+8YGrfcyalwFiiSBEZu+sJEzVGNxpVbbKD3KwOPycporH2aeQwwcwK0CyIpjP
Z/KMr9+zi4b6KiizMB8h4SHOuEeLlkjqXym7BPLsYLohCZK4R6/1YJk2qFhr8zVu
cNHiadgv1CiVg7unT9zoX0Map93GsmR8JQn0CPgpktPy6ZuQVd3g2JVfyMjiyFB7
uiAGbcev9N1avKEsUMLSMY8IQspzFNAwIE6yWK315FwAJEaaUvFJjNLN9ZF+GjzC
O7slEHb61f3C2RfkX+Fqs3b/W6n74aFtsUizfUvoC8iBaVdaMs/nWhmGRULY6fav
WeyhTk/jVpoLhEwkvTvoWNhKGabjfkLcOxURi96imN8x6bxzfbzsAGqcTWIcu0gm
TnxOvmsIz64DrE3SD32JncTM65s3eYbuLT0VrrbOw9tflSvCeFDVZEruQxeIUaA2
e3sZCCDkn7H7TwBVISo+ZxSLZxSDM0NESWtagBnayJWcCUcryqQg/3loXQyf2AUO
4DrsyyVVuIqMnvF6vlBwXE7Tol0UAXdq+4ENObnkwUV/mXhpAgMBAAGjggJPMIIC
SzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLyJkvVvyR3Rbk38tFODK7XgMLMsMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMFgGA1UdEQRRME+CEmhvbW1hZ2UtbGVpcHpp
Zy5kZYIhaG9tbWFnZS5pc3Atdmhvc3QwNC5kb21zZXJ2aWNlLmRlghZ3d3cuaG9t
bWFnZS1sZWlwemlnLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkA
AAGKhu6biQAABAMARjBEAiBx3mAyHVwAyXIDXPOKXPF68Qt6nzAuYRVvmLBvBEsZ
fgIgRhz+Jsi7mmGSfIQgt7he730Fho6Ov+Li5nXBZyJ9bIIAdwDoPtDaPvUGNTLn
Vyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYqG7pu5AAAEAwBIMEYCIQDJZqxogeQL
qwcSlfGGUROHkQNqoIzNvmHRfBZvaOMD6wIhANpB8D3vnl2ZOweUXi8Cn+WrPHnU
guRWySLSkylUFLjpMA0GCSqGSIb3DQEBCwUAA4IBAQBJvsW/eNQIYLbb9BOXSRg0
/vexvj2yOnioIOuuukygpZVBlL+6Pkw4019gR0znh6x9cr6c8o1fqYswUpywiRX5
Gs9nyTYkG9rUdlGX/cN0U5faFRNX0Ww5LDNLVx+sVv96SztZ/xT9cH34HnaNS3Pl
8zVWGm8Py6lCo8vcr/Sri4zVw4e8LujtrmmgLSwq6cnAHm6qjRUs2e4F9XCH80I9
8sDNShMVDICpJbehdujsaeWHEHstepXtzhQkiOReZ/z4Ggr8jWkJmEtL3vij46yk
vuT3wNJG6WPQIfXfTUqIWB/r+R85a/3Ir7+zZcUFMHTcsZULREddLohhwcDwjoGo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374826377778747864864256571200906494011931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:08:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:08:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892958127578073674876975031923768984170661178459605871259924650669791227198241545787359217256474097718174828527156134855244380160903286877030764630574711639243118361019936248103810507257132862563059747335099593010233741661697235435410242204246621887508017899693163914386333080679292681194722037911733903414554767793705866372669491335872514520935422104663873470431938085939566943601746268657351558623645369910617828863722987230730150066827350831828841846782615607821622523804714680364649487637311604188128400155825893660363137615349540414865195526096190833113883867160741537164330416977292862866493104036267703308737952157729442506160035075109965985718640856829956343326124188583088728875736235654328036112270167757575664847720974138524100413054502366270112418398025597228267438682360870872070745823136087835074282703392466179609636153198917469605241622145304110175544778827414430315146906307470233009721093904598568310999852704656007640768353307796291275303281215309289479079740181080285316560551983996247835487068684614084732027732769532304054149659806860479175266807453701407458414839329366555804218191719366676027274478057975538758485771713787279181618113128359711657421468426481356498660152981439514705172381935336430162260097129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc8992f56fc91dd16e4dfcb453832bb5e030b32c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a86ee9b890000040300463044022071de60321d5c00c972035cf38a5cf17af10b7a9f302e61156f98b06f044b197e0220461cfe26c8bb9a61927c8420b7b85eef7d05868e8ebfe2e2e675c167227d6c82007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a86ee9bb90000040300483046022100c966ac6881e40bab071295f18651138791036aa08ccdbe61d17c166f68e303eb022100da41f03def9e5d993b07945e2f029fe5ab3c79d482e456c922d293295414b8e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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