blikk.immo
Issued by R3
About this certificate
This digital certificate with serial number 03:95:4b:c1:cf:65:ea:4d:75:dc:81:f9:c4:80:cc:96:77:55 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blikk.immo
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:95:4b:c1:cf:65:ea:4d:75:dc:81:f9:c4:80:cc:96:77:55Serial Number (int): 312139628886011482414121915781723173844821
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 30:60:29:fb:22:5b:21:a9:f1:71:4b:9f:61:4a:b5:46:11:5c:52:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 81:64:f9:c2:d4:94:6a:e9:ab:07:b5:ee:ef:ec:02:d8:e6:9d:2a:bc
Fingerprint (sha256): e4:7d:1d:66:bc:28:3d:f8:12:05:4c:32:b5:9a:28:db:86:69:87:7a:67:1a:d3:d7:55:66:fe:d7:12:a3:d8:fa
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate blikk.immo
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blikk.immo
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blikk.immo
Other certificates including the domain name blikk.immo
(limited to 100 certificates)
Certificate
The complete raw certificate details for blikk.immo in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgISA5VLwc9l6k113IH5xIDMlndVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MDQxOTA1NDJaFw0yMzEwMDIxOTA1NDFaMBUxEzARBgNVBAMT CmJsaWtrLmltbW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCETvJj Er7qeOLf7ttn46BGHhvbsqI16GLwAuemIoqeBXe6Q6i8azITeNGFTVo2Ht3xB0D2 sIGvermaNFUP4aRo4wIRA6bGvCajvOtNzWR67SXtdmO9t3m28iq+B13odjdUVLTo hF7eT4ry8HZnoYoCNCWvns7M5IIOOryVeUlpul9C4Odx/h2EUJmIY8Rvc3c/8KEh O7OLbiNCEWQ4AXNyOPCHs2kHUsh0YCRVQPUD+jWwaIT631e/r+kNAdK6a/t472OB KdhfG5dUOo2HnKyInY3aAkgNEbEWbLG6QUk/eqKOjtHmzOSMWeZBtbCnxgqtdPmw DYTRPJpAq+hqcWc1AgMBAAGjggIMMIICCDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FDBgKfsiWyGp8XFLn2FKtUYRXFLUMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBUG A1UdEQQOMAyCCmJsaWtrLmltbW8wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmB Je20mQAAAYkigsQLAAAEAwBHMEUCIQCMx58X6Axy2Xh0RT/soQKAi62jcatqLb+j zHKfD/XRfQIgWfsB/j2De0ddcWpT5rdwu0XFmZ6DGRqBEu+8OYviy74AdgB6MoxU 2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYkigsQkAAAEAwBHMEUCIQCo Wkh95HiVhywAqi3v2ISexzFs+QONj1bD3i6tqg2q/QIgefG2WKIh5hyhXkcByoS9 mEkqLs+lxwo3jLWtjwH7mcowDQYJKoZIhvcNAQELBQADggEBAA/EgqQLbmgerRQo I7pdRidGN8P8Bz/g6DCufb/QoaMrSVAOtI79WPDlYtwmNqNzpWUsL7xjmOcrWYJ0 C9XrMw4uEV3R8RK0Dyo/HmX6jjU4Gg7w3pkUsAUtSPhFdkC1MAUyPvr5pw7xtK9a tFqJ7ccuVwgQS1KOw3wDLvBq1B52dDr6dOi2TGEKlzWzUBmgTokG5wE5PYpoezGI pSj5LIVHG/G6D6DkprHTvCeY72F3ixt3TtsVD6+TZB6LBGyhjOTN2eaa2QagLSaM kFFgewlZ55w/lFPCep76ddiV4MxFK6cRRbPmr/Bj6ConH5nhOJk25PtFnU0PebWg k2ok0XM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE7yYxK+6nji3+7bZ+Og Rh4b27KiNehi8ALnpiKKngV3ukOovGsyE3jRhU1aNh7d8QdA9rCBr3q5mjRVD+Gk aOMCEQOmxrwmo7zrTc1keu0l7XZjvbd5tvIqvgdd6HY3VFS06IRe3k+K8vB2Z6GK AjQlr57OzOSCDjq8lXlJabpfQuDncf4dhFCZiGPEb3N3P/ChITuzi24jQhFkOAFz cjjwh7NpB1LIdGAkVUD1A/o1sGiE+t9Xv6/pDQHSumv7eO9jgSnYXxuXVDqNh5ys iJ2N2gJIDRGxFmyxukFJP3qijo7R5szkjFnmQbWwp8YKrXT5sA2E0TyaQKvoanFn NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312139628886011482414121915781723173844821 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 19:05:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 19:05:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blikk.immo' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16702386385497040003592048657046881179928797478494419312158972493718587463085193007523536729967447200183243609090750779490213266388112946850931130799186130955941776130439957332245039377931888688665945910970470802630135948226966148419564171325873420302104205672876467328258245215884862855582019862522762386449921822200075785021620706731236727534928739529292644421468885370464915221886634200844720355187373968841172871462205416612789803395221685858365440897894677405405901052292981291178495625375007639271191049847093510543400202813740150906532027484621471753169195519610426594143913763453590703621917071825149201835829 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 306029fb225b21a9f1714b9f614ab546115c52d4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blikk.immo' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001892282c40b00000403004730450221008cc79f17e80c72d97874453feca102808bada371ab6a2dbfa3cc729f0ff5d17d022059fb01fe3d837b475d716a53e6b770bb45c5999e83191a8112efbc398be2cbbe0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001892282c4240000040300473045022100a85a487de47895872c00aa2defd8849ec7316cf9038d8f56c3de2eadaa0daafd022079f1b658a221e61ca15e4701ca84bd98492a2ecfa5c70a378cb5ad8f01fb99ca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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