brennholz-ehrhardt.de
Issued by R3
About this certificate
This digital certificate with serial number 04:fc:ca:f7:44:29:39:96:ae:e3:6f:5d:45:4d:40:42:7f:91 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=brennholz-ehrhardt.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fc:ca:f7:44:29:39:96:ae:e3:6f:5d:45:4d:40:42:7f:91Serial Number (int): 434470088126060121009735204245107565035409
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e8:23:99:36:a2:29:9f:05:a9:30:8d:66:5d:6f:1c:92:0c:ca:a0:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 77:d6:2d:2b:15:39:3b:f6:0e:1a:cd:9b:c3:f4:34:e5:63:7e:eb:f6
Fingerprint (sha256): e8:71:e7:c8:96:63:4c:3a:9f:f3:69:52:c8:cc:37:23:7c:5d:36:29:b9:30:36:d6:76:11:ce:79:2e:df:22:75
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate brennholz-ehrhardt.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brennholz-ehrhardt.de
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brennholz-ehrhardt.de
prinz-heinrich-kaserne.de
www.nurpuurbio.de
prinz-heinrich-kaserne.de
www.nurpuurbio.de
Other certificates including the domain name brennholz-ehrhardt.de
(limited to 100 certificates)
www.brennholz-ehrhardt.de
seo10.info
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
*.maximilianwo.net
brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
brennholz-ehrhardt.de
brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
*.goette-investment.de
datschiburger-dart-club.lima-city.de
www.unserfussballmanager.de
www.kreuder.lima-city.de
*.moebel-nach-mass-stuttgart.de
*.immobilienrechtinspanien.com
www.mosti95.lima-city.de
jonasvahl.com
ferienwohnung-schinnerl.eu
www.kijevo.lima-city.de
*.frenchsister-connection.de
www.bersuit72.lima-city.de
www.brennholz-ehrhardt.de
brennholz-ehrhardt.de
*.gentlemenfreuden.com
www.jcwebspace.lima-city.de
andamioshelf.com
www.script.loox.tools
brennholz-ehrhardt.de
test.mclauchlan.de
brennholz-ehrhardt.de
brennholz-ehrhardt.de
www.old.firmaketzer.de
seo10.info
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
*.maximilianwo.net
brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
brennholz-ehrhardt.de
brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
www.brennholz-ehrhardt.de
*.goette-investment.de
datschiburger-dart-club.lima-city.de
www.unserfussballmanager.de
www.kreuder.lima-city.de
*.moebel-nach-mass-stuttgart.de
*.immobilienrechtinspanien.com
www.mosti95.lima-city.de
jonasvahl.com
ferienwohnung-schinnerl.eu
www.kijevo.lima-city.de
*.frenchsister-connection.de
www.bersuit72.lima-city.de
www.brennholz-ehrhardt.de
brennholz-ehrhardt.de
*.gentlemenfreuden.com
www.jcwebspace.lima-city.de
andamioshelf.com
www.script.loox.tools
brennholz-ehrhardt.de
test.mclauchlan.de
brennholz-ehrhardt.de
brennholz-ehrhardt.de
www.old.firmaketzer.de
Certificate
The complete raw certificate details for brennholz-ehrhardt.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEWzCCA0OgAwIBAgISBPzK90QpOZau429dRU1AQn+RMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTYwNTAzMjhaFw0yNDAzMTUwNTAzMjdaMCAxHjAcBgNVBAMT FWJyZW5uaG9sei1laHJoYXJkdC5kZTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA BP1fCeizYEyl8ft89WWJyE0ShuyHi/Vnpag+E6W334bjA2EOaeKSbSLtXjMhhnnD EkHrMeUrnlQ5SZra1UJvxHajggJGMIICQjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOgjmTaiKZ8FqTCNZl1vHJIMyqC1MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvME4G A1UdEQRHMEWCFWJyZW5uaG9sei1laHJoYXJkdC5kZYIZcHJpbnotaGVpbnJpY2gt a2FzZXJuZS5kZYIRd3d3Lm51cnB1dXJiaW8uZGUwEwYDVR0gBAwwCjAIBgZngQwB AgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYxxOPsHAAAEAwBIMEYCIQDq0K8h8UkpCwarAUZxJb+U lfaBF2GfQe30qpWjhVr1dwIhAIQ6XwNwlsDsyoLSCg1R6Djin2qAuH0F5rAQ3TAA WKDzAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMcTj7AQAA BAMARzBFAiEAobZPgBtm0y2UJlqhjtyt9pzvhb4Y9yWNfmPMolEJWf0CIHXqicQG sXW34UPPDMm2mQoWFzZpGSuDnW4QMioMAX0sMA0GCSqGSIb3DQEBCwUAA4IBAQB2 GGKAf9Xd0TuMDm0TiYKUUk9w+3t52MS6e+7gKWuLf3NEFhJR1eHE0uyVC+4oKSVo oTxqiPJashUrXxbWjh4GjttmSb32d0T3ZaGrIXyW1+fX/gr+8uU/o7WjjdaR72Uu ieNP+6TNtghnIIzE0MTCkjFcUiM0HNKU2PVhHmIiO06ajA4MtlvMHddwrLGdCa58 hp3tPl+SUA6BZM9e4EyQrwZs4ZtdJzCPhnHplpiKVSWHWHLgZygW+bmASSTcBcGY DzStK5Cm2UyxUNH4Ba8xOwzYMkJ9sretAYQeRbxwpMYPNZ1W52Vl/FF7sz6052q4 59PfJ5yvwsht1MOoApZ6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/V8J6LNgTKXx+3z1ZYnITRKG7IeL 9WelqD4TpbffhuMDYQ5p4pJtIu1eMyGGecMSQesx5SueVDlJmtrVQm/Edg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434470088126060121009735204245107565035409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 05:03:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 05:03:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brennholz-ehrhardt.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004fd5f09e8b3604ca5f1fb7cf56589c84d1286ec878bf567a5a83e13a5b7df86e303610e69e2926d22ed5e33218679c31241eb31e52b9e5439499adad5426fc476 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e8239936a2299f05a9308d665d6f1c920ccaa0b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brennholz-ehrhardt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinz-heinrich-kaserne.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nurpuurbio.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7138fb070000040300483046022100ead0af21f149290b06ab01467125bf9495f68117619f41edf4aa95a3855af577022100843a5f037096c0ecca82d20a0d51e838e29f6a80b87d05e6b010dd300058a0f3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c7138fb010000040300473045022100a1b64f801b66d32d94265aa18edcadf69cef85be18f7258d7e63cca2510959fd022075ea89c406b175b7e143cf0cc9b6990a16173669192b839d6e10322a0c017d2c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00761862807fd5ddd13b8c0e6d13898294524f70fb7b79d8c4ba7beee0296b8b7f7344161251d5e1c4d2ec950bee28292568a13c6a88f25ab2152b5f16d68e1e068edb6649bdf67744f765a1ab217c96d7e7d7fe0afef2e53fa3b5a38dd691ef652e89e34ffba4cdb60867208cc4d0c4c292315c5223341cd294d8f5611e62223b4e9a8c0e0cb65bcc1dd770acb19d09ae7c869ded3e5f92500e8164cf5ee04c90af066ce19b5d27308f8671e996988a5525875872e0672816f9b9804924dc05c1980f34ad2b90a6d94cb150d1f805af313b0cd832427db2b7ad01841e45bc70a4c60f359d56e76565fc517bb33eb4e76ab8e7d3df279cafc2c86dd4c3a802967a