lux-reisen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:17:83:63:5d:76:6a:26:4e:59:68:45:71:db:df:b1:f6:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lux-reisen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:83:63:5d:76:6a:26:4e:59:68:45:71:db:df:b1:f6:e8
Serial Number (int): 356450282966705258209943445844555635750632
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:be:fd:52:8d:2a:f3:e7:10:a8:6c:86:ee:03:fa:4b:1d:22:0a:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:19:04:33:78:74:70:0b:7c:31:b7:98:5a:49:d5:04:7b:f0:56:0b
Fingerprint (sha256): e0:c2:c7:e5:29:67:24:b5:85:23:be:3d:e7:8a:6a:c2:69:70:8e:54:6c:c8:95:af:63:b6:a6:7e:9f:ca:7b:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lux-reisen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lux-reisen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lux-reisen.de

Other certificates including the domain name lux-reisen.de

(limited to 100 certificates)
lux-reisen.de
trackman.ch
lux-reisen.de
nayfederal.org
mauve.com.au
lux-reisen.de
lux-reisen.de
lux-reisen.de
escribaniadevoto.net
lux-reisen.de
lux-reisen.de
trackman.ch
nayfederal.org
lux-reisen.de
lux-reisen.de
lux-reisen.de

Certificate

The complete raw certificate details for lux-reisen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356450282966705258209943445844555635750632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 15:27:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 15:27:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lux-reisen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842835881021246911585089869260555506594992139906539475630961239094034277454946274718249948570783568931147135605132427420046796053816391518504116074519954148179948718763700873263872423303946898741734205167521122016230238033953913497663536147072335049282420537707432448975397459450317963632029475009502543722796838932386116806806647547586840092193485817659968324153496776055610450156608556105438817831627121505227589796038626767998103146056872274604968526195526502185803083429680946093711840748627049870731459510248574078995169179151885628522843636411484832736692311951143257647547141122374829908698094980712608830899346332531712155135541862048939257362815365580063615343455586971996522526473118988536649001115909422629937094821649716473158384089472233075753218206130449899804168222552163568908226731395248308769940684693919599523922272166099009990974161797964981850523031541800307076350173371450442354490076075308571175019421985225145464406959140196154763354031825988670688390821480597050299548501736331233901095298082766863327989984992481184870663600207230607850946571984081717323793799535149025564344803314131512558882772334884059596280963509138729120792200698752096994883365745770757967610955490909122432946321233246140213944265889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edbefd528d2af3e710a86c86ee03fa4b1d220ad9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lux-reisen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f94ca2510000040300483046022100f6c4ed2dcd75154d34c635ca1176f6985ff7a3259a945879ed4f66b2499aadfa0221009f1e120ca9c2fe4c36482127446a5ea65344f9331f0502472c81aac7693ddb6e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166f94ca28c0000040300483046022100ed499217638cd711d8a9363aeaed4f6dfbdffe4c8fe3589a567a6bfb16d1811a022100db4ccf99d215fd95853bf3f227d0982e6922d03d0aadeb50c86daad4931ba89c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033bbb784b938eccf9f0748936ffc0023885526800cdc6ef9ddcea0762b00674c07728aa7ccb02edcd90452063df6d41b04c5d85ec53a14af7e26cc66de3229d0fc9031e6bf178dff275db91064a66ef322cbbfb6a02735d57d3e922593bf4f57d85b3dba546423d3cb5c576e5342e0d05f4e428a1d1cc853989e81c755f6c493fe20975908b4dbf2d1d17218761af1f8103a9e213a5ba37a45995a14cd76bbe6e12e7cf128e89a540f8a629a2d6901f563df30237ac9e4697401a1a1f1e451a910c2d843f45e45dceca336428d0a5a106cde04fda73ec0683586a142e0faf360dc78942c6f8ac93a46cae44deb53313f496624b52ec064b49361b3c627e28e43