blumenhaus-brehmer.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:8f:ba:fe:0d:56:54:d3:e4:87:bc:dd:f6:3d:de:26:02 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blumenhaus-brehmer.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:8f:ba:fe:0d:56:54:d3:e4:87:bc:dd:f6:3d:de:26:02
Serial Number (int): 324480146199056009829818325811332663617026
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:90:92:f6:03:4f:77:79:0f:b7:6a:ec:fe:13:c3:96:57:8b:6c:f6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:76:2c:c6:68:56:c2:b5:92:c9:b6:99:d6:88:15:61:55:68:47:fa
Fingerprint (sha256): e2:b3:37:56:75:03:17:6a:7e:12:4c:66:06:23:05:b0:a5:7e:c2:5a:1a:f0:17:87:45:81:d0:e3:58:ef:85:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blumenhaus-brehmer.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blumenhaus-brehmer.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blumenhaus-brehmer.de
brehmer.isp-vhost04.domservice.de
www.blumenhaus-brehmer.de

Other certificates including the domain name blumenhaus-brehmer.de

(limited to 100 certificates)
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de
blumenhaus-brehmer.de

Certificate

The complete raw certificate details for blumenhaus-brehmer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324480146199056009829818325811332663617026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 00:03:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 00:03:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blumenhaus-brehmer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807015165249343021964120790105425807562888839067859773955286728381803736534042884437825499993911551248208272321966431130831487388473652164715752847935620771814490832815224982241374248518097099987279082236603323146181550331990013461909499240938064194121604124288522881676578005452845580718205587734711733029530517160073542363244527621219539193737990933407226292427333518233857510904308279061589194781653234769893465578142470147615666386467173408049609125137318221246904445449814856635147523206469065327221044815091224370904847595063241029414050302320087432263427151583639786644310828723529196257226996708196929255905015828237016232429817584461746085716567675884620466479817897081558904664729062739638967929812113204257033970234581045102407227906520048183214033083620850421742062689411534409946598178875125298025463777885565301746978044180497845851945220582080635372281480613333517528896150503221217648486659212246436329261116150940986031933365125368278066846107812802314998760346766701808759594385491451861499644032188855451011217452599489324767707538135682731921343565344169648908306767318762731853963026557553149971983621750443408251211584193198263224597221904396619318628928203654324335728646576209871632142515962859787904221124461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea9092f6034f77790fb76aecfe13c396578b6cf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumenhaus-brehmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brehmer.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumenhaus-brehmer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001713869ee39000004030046304402202f22f56f7544a0aa79fbb40cee93b340eec631c4c9a050d48bbbc74659b1148a0220749ee84b4d5d549962bcf814c2ac54f046656bcb7a5bbdf57c58b7e9a216bd18007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713869ee2c0000040300473045022068fef3fb0ddd43957cd000f130dc1331ce98fb3b4f772d8e209a37f3bd24208c022100c18ba29ce81c2ea947049aa0756ce720c451f2f7d3be5cdf52812f74a71ef281
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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