webmail.benjaminlindner.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:cf:22:73:85:aa:d1:36:f6:57:ff:73:24:f7:3a:e9:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.benjaminlindner.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:cf:22:73:85:aa:d1:36:f6:57:ff:73:24:f7:3a:e9:e6
Serial Number (int): 268758116576908430853490237165570669341158
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:25:0a:a1:c4:dd:24:3a:86:b6:66:27:aa:49:80:e1:f4:2e:70:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:35:06:1a:b8:92:7c:5f:37:d2:48:03:1c:1f:20:3d:47:92:fa:4f
Fingerprint (sha256): e5:59:f7:51:69:b0:18:2b:e1:e2:7b:d1:54:1c:ad:e4:52:87:7c:55:1f:28:a9:85:d8:5d:36:49:9b:24:e8:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webmail.benjaminlindner.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.benjaminlindner.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.benjaminlindner.de
www.webmail.benjaminlindner.de

Other certificates including the domain name benjaminlindner.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for webmail.benjaminlindner.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268758116576908430853490237165570669341158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 02:00:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 02:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.benjaminlindner.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918621893266128240529900004734647893275246124971699436967401441142940238854634639600888076680528378047870687019823315803957330500225856543478102964251096972832717126607352584077923860762539792172424134214596221251276420265366048052121732663377783321648263039666777700672730127773299583501766578921900225455858803159111117477205848581753279398959377513594510022573703012611328629916469453761486529436994001501881678582488572195857037662350215552516190169135089965530780482028748186394876666475326435621515632414125947488596694420433071326211369226058390948880005978730080416471710045473520201259796998738944255451850377203542056254370066395054753149141476592245899032982960870767682376019953753785752013632498392167866899022190776951089556645934283043118840844633224348115356111304392498884263323802363808326125861528441130866747188779227125167460617203521608049724919532802677035920773165551516984835100237237335580228969585307873090251407284563581048429634540716670904419551016450843473402711576277910955579051538036891963841622375907861006156100137114128568073207448948115584610594145273061695306576457708192895501209685430791089216367662998426303428238443381798589204709078655034867561006810343790927834104621419480620688846146539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e250aa1c4dd243a86b66627aa4980e1f42e70d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.benjaminlindner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.benjaminlindner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167e34e48730000040300483046022100ce954c41f283791f0a16713575dcfa721733d55b4181ba0456eed1306e22d847022100d564dedb7b8dd9a0cd3d08f52937b1b94ef507495f0ef8d3c44ab6977b9129cf00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167e34e466d0000040300463044022030cf03d38b6efcae2500929f282fc034976e03b408ac4883dbea6d8a239b6105022065d79cb3fbab6fa97c32edac8336edae3482062d38ebac1ba7c182009cc0351c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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