sonok.lima-city.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:ce:b8:aa:a5:d1:4f:8a:34:44:7d:15:db:18:ee:07:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sonok.lima-city.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:ce:b8:aa:a5:d1:4f:8a:34:44:7d:15:db:18:ee:07:fa
Serial Number (int): 291556485895224045763231236729013032323066
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:ed:7a:dc:5d:24:51:2a:28:1d:a8:7b:5a:a1:78:3e:80:9a:bf:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:bf:d4:9b:cf:f2:37:3c:ac:66:6d:a8:0e:4c:54:ab:d0:3c:e3:ac
Fingerprint (sha256): e3:5e:d4:8e:1a:a9:ea:e2:27:01:de:9d:6f:89:8f:cd:bf:a4:f5:8a:b5:fd:02:e2:72:96:2b:ba:63:23:63:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sonok.lima-city.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sonok.lima-city.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sonok.lima-city.de

Other certificates including the domain name sonok.lima-city.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for sonok.lima-city.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFHBX34+Xuqefb/G3/fe
4U+vBI76SZfEcXBSqoLP9RXTTbVkP0dxmIWTB+ms0OOIufyXbyQFOQvia+80KXK7
mWhbdYYbpu2LZSlooB6SHSHP/T67CA72wAoDZ90N9sFQqYdES7SWVMNppOD1iFxv
sTeqNqq8M+ZrdSNr8rZI2msWAiFSnidEJdNA5AWcDhFAC2b3k2DwSBaCZrYfS5Ex
etvgPhHRaqfTggsy99xferjjOzxv7aibcvU+69CvTJlbxFcc+fNYFIK0JGa1PXwe
ThM+6eVdCTkDwsVSv1tqOefyuZE5ZPDgoi5IHnZjR1But3UEhqvZHvB0gbxIy7kR
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291556485895224045763231236729013032323066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 19:46:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 19:46:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sonok.lima-city.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21248350306533820043682081458086908646964953805415570788462549429672458370384506417379153520057591074024317977330241441725560143105698001944186049081101819196225791628825720063120570586075345460177324740735302194715426041153523176720190284513850844505836479392318403836252481663672266393148310031441247170362263785882731790440966948847273758740050881147065663618365492178575365551831319176460380323081759231438065110038115689704540220262513049133168926958456978436107743805927296247302081237712615198259216023603484579636210408147557128423423781918015047580781066188381799089132351565441607699303440288039626545369383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68ed7adc5d24512a281da87b5aa1783e809abf8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonok.lima-city.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de09ed53a00000403004730450220624d5505f70087aee333254ebe8a06cea4b97281eb9ab1a15110bc70d40c6406022100f907cbdc8498cb09e71bd820dd2ec76655cc6b00e72afdccaae6b3f775c2a5fb0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de09ed741000004030047304502207add79838790f8412b5da5bd63ca432cbb32d6b178489e4486d47a79dc0be3a7022100a2be79c3afcdb9d9b328660cbfb9c1dc7a81a69370727661a76e61e30f967720
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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