www.digum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:18:24:16:96:74:93:25:e9:ef:50:ef:1d:d2:fd:17:ac:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.digum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:24:16:96:74:93:25:e9:ef:50:ef:1d:d2:fd:17:ac:5c
Serial Number (int): 356663890023120101978079237787981631171676
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:b2:6c:fc:35:bf:65:33:5c:31:b5:d0:8c:72:42:75:c0:a0:0d:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:b2:b8:62:76:03:82:72:c3:27:71:e3:e6:01:74:29:e1:79:da:6c
Fingerprint (sha256): e6:58:42:66:d7:1d:63:10:1c:6e:17:82:31:a1:58:4f:8d:4a:0c:f5:66:4c:b6:3f:af:14:18:87:42:b8:b5:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.digum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.digum.de

Other certificates including the domain name digum.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.digum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356663890023120101978079237787981631171676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 07:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 07:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 638433756838763938579292846276230666508305946713481382613352459214110979329870721410378193402476303494026540709700858665241256583950948075363627100813040909753694304280684394281648915912724602516553584873826344077094311636190424251712828913351761276136343976896880559267479463303365976514582459209030998524953298671905065379231115445310628375116227659436372415317146186270116246288987499499524902114223602056427073777319962845658642502392169975747569281216677639345301292688467809662699747315763737666321427502938054580846112553711565760980925627355954446796242194217062429434320806439229648297594029296087177362499756454921891497001435063359171815080962118140947435713760613270437572093165083427298822027016806515976560216709378090971739378921702286812521802554999020179253867166831090532081465101170841965683039863085519338237436017027549770521516926564719048539911964913685729847142893785391700512604526555139032179920759642269919152577922094919343793116689362074000830409651568868435701421297007288908303025222445785798931703615764579987828559331504838038720682152748330512296211154918412596626814900795897372098454922025160782476222189788248034519618972810062350811139996115046306329915881623637105266134849063912442516118507563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fb26cfc35bf65335c31b5d08c724275c0a00de0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001714e993f780000040300473045022100c2188b3dcf2db67201534cf7383422f4272fca6fb54c3ac74b5095e140eb3c22022031a3fa4eafd13fc7eee77e39821f4b0607a29a25eef016ad09dd46a653028c4b00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714e993faa000004030047304502210093360219b024f64e08d1fc6e2d00a4eba2bf9e9060c681d2be7c5d594870ba6202203b5f0d4f35e9561181b44b7fdb9a542de9999bdd3c137e69af37015303426e51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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