peterbruns.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:4c:c1:8c:ca:89:9b:2b:90:bc:e1:d6:24:4a:07:c0:5f was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=peterbruns.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:4c:c1:8c:ca:89:9b:2b:90:bc:e1:d6:24:4a:07:c0:5f
Serial Number (int): 327453663274500173054533888465191456718943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:3d:65:ba:35:de:ef:80:b7:7e:25:80:10:b6:ff:da:d8:1b:7a:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:3b:b7:2e:bf:0d:41:4b:cb:19:e0:b8:f8:29:99:bb:db:a5:28:13
Fingerprint (sha256): e2:46:05:68:a6:3b:a1:b2:50:fa:33:e5:a8:2f:ef:2e:b0:cf:4b:f5:72:ef:af:4f:8e:fc:87:cd:bd:9d:65:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate peterbruns.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peterbruns.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

peterbruns.com
peterbruns.de
peterbruns.isp-vhost04.domservice.de
www.peterbruns.com
www.peterbruns.de

Other certificates including the domain name peterbruns.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for peterbruns.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327453663274500173054533888465191456718943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 01:15:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 01:15:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peterbruns.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905115781395577834923231927078800160486305603373395146683098520273167410190151247727055377922569775783797092155896691323880848931488383612345198965525300584832673005461547860197907156719182229205558592772848947986536868500852077467122090914370236262933856876354331648205616330229345213528611523894843426055476381167484153006207366503176026956436236179934860727378368114914544695821022749614483970260168341774489796388574255349414097431429764785734550137462550037430045816499005308647636915703359730553350702769907871671200483018857995139769349931892985528722929979030614918703189538141627307981772522664819830631674400146369489778198979817721855694313976625102076329939760179163474387933719514506354350552753211710697931498566583119545584218928805086537307246863652011438298036385142953067350691311433262918164255335653712242759597086953226083597379689351088972921503336097991923554468429456422570230247583938088644078763239927837986013387937102080468471210705693584023291196499204172178249939001803107594336008057378907048408650831315641254067365991713211526443735743929672872420129293971116609067814423022732553433258248973051028832702410228645103983558705047263840724127261839354033067666185274035634935354244348331623229145844631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							983d65ba35deef80b77e258010b6ffdad81b7a05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterbruns.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterbruns.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b2c6b396000004030047304502204888fdf9fadc4c00b6b8889e6cac544792f1b47799186c587cafe9009b3551dd022100d2a30e518f1a039a2975f7677705cfb992dbbbfac3eb502236ab656dff2dca1900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b2c6b3bc0000040300463044021f178734dc276d8015eb93e0162afd88f6c444907b96595640cd4dcf57fcac8e022100cf59fc0a810de62546eef4a3d84c8ccf4aeaea2c93f9721a096236e3b63bc973
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059af03624278774612b19ba49572f54f80c674809d9a0a27d5fd8e61ae14615c1e47258b1e42b96e63a27ece76ab760084952ec0d61ae52f057d1cfe76cc548817cf4173124ca0fdd7db4c50cfd7ac41de9df93d13c49b489e8b891036f49eee57d37dc6fd0611c3a4d13ab62441cfcfa9d199181dccb068d041f24ac15c50ca28a4e65d7e4f517fd705e2d1c2d00c8cfa01be1be8371afc6fbaea078d5a9ec43e53983f17ec4473a766b6d9b21172bdca5531e0fa9203f11ce2fb823c06dd33a3b017b15d7c38e97a1448dfde6f2d700e92f31c041522f63b2ef29febd292d84e6b18ee4fbd5737c172187ca4a79dbf11571a41b11e4f679ac93f5a3aa30e35