barth-herzberger.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:c0:e8:1a:57:98:ba:d1:4a:e8:0a:cd:57:3d:fa:23:e8 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barth-herzberger.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:c0:e8:1a:57:98:ba:d1:4a:e8:0a:cd:57:3d:fa:23:e8
Serial Number (int): 335774830706389976306230808506736689423336
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:45:0b:c1:83:f3:76:09:f2:39:f4:d8:8f:0c:d2:6f:85:d4:2c:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:28:4d:53:00:b6:8a:27:46:4c:9f:87:7d:c9:dc:a2:aa:8a:ff:a0
Fingerprint (sha256): e7:5b:04:25:19:8a:55:f7:09:b4:96:90:08:3c:eb:80:9b:9b:2d:6e:60:f9:55:44:e1:2f:eb:56:61:46:9c:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate barth-herzberger.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barth-herzberger.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barth-herzberger.de
webmail.barth-herzberger.de
www.barth-herzberger.de

Other certificates including the domain name barth-herzberger.de

(limited to 100 certificates)
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de
barth-herzberger.de

Certificate

The complete raw certificate details for barth-herzberger.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXpKo3nItRI49MD19NpC
N3JvT6cDG46UoSZQgkpmP1uLL3I8zPeH1PeCt3xvCs7Rm4Nf5OYLAglXYpOzPDu2
499xrJgGby2bOnRhSCx/RE6uLXE/LWD86Fgbz+CBKEFBtu0CQRMz6M2oV38YdfOq
X7vuvssVcNxqyLRL8bwWBP/VdfHA8fumaLzODmD7GFgg9CkDNduTe2wZgmzgPZJJ
GQf3+DIsQzaiTvLwhe2XqQAqm44au8jfrbwDkWB9FTN3qL9qPQMbUSojznznHoJC
NIveCwR9ZSR52Kncs6IhlAYPmEGOQZJ+StVbNmhzVl5tzYkK0+3gKUUPmebC9oJZ
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335774830706389976306230808506736689423336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 07:58:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 07:58:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barth-herzberger.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20384671313832143125844688822166439895559663851641855745715089075821381022864394399486089752366322828489930728628336192859846818365036566698793722899084828335945034023588750209539557500872387539303537968480014785529010513474977828100039432018318035714887455496590997841846429883599059258579626846961424965134927818499953260881564559132909201976936257229184812140456220682469098690614773679483349884973210961535454726617722701217053960562853007400363958567095601385407993036735782934145967237858459147128590566205436868503813540142508876860151848310723440966997129229854424072177055193025428188633339514653804096281043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39450bc183f37609f239f4d88f0cd26f85d42c4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barth-herzberger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.barth-herzberger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barth-herzberger.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdc98fe67000004030048304602210082099395342dc7a7c64c5e353c649dc055f6b1f2f020d529922802a9e9b5cc44022100e687e087b67384cf0b05455637d86545ef8d8ceb65535c4f25257a70fe2c063800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdc98fe660000040300483046022100cc833b39afb6b6e1b770b1338dcdd79d9f338cbe5ff206b82e9a2459678187ac022100e0f914148cbf7850f5bf8e378443494d22bcbf97fc45c7fe7ee85b2ba5db28d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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