simeon-trefoil.de

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:d6:ad:69:17:bd:20:76:7b:d7:10:0c:87:c3:1d:fe:83 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=simeon-trefoil.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:d6:ad:69:17:bd:20:76:7b:d7:10:0c:87:c3:1d:fe:83
Serial Number (int): 343630263413215196189785756950433969864323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:9e:b2:be:08:3a:66:b4:b1:c0:8e:e5:2d:a2:e8:fd:63:1e:83:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:b0:20:31:66:5b:8f:b4:0b:94:d6:9d:83:c0:70:12:36:43:f2:3e
Fingerprint (sha256): e9:e9:f8:0d:e1:0c:db:f4:04:16:b7:8b:dd:28:33:85:81:23:02:91:7d:09:56:ea:01:de:7d:a1:cd:fe:3c:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate simeon-trefoil.de

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for simeon-trefoil.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chraebi.ch
*.dtk-koeln-1.de
*.edb3plus.de
*.goldschmiedewertl.at
*.jasonsaint-online.net
*.johanneskirchmair.de
*.kleinesgaribaldi.at
*.mm-finanz.at
*.pferde-orakel.de
*.rainer-schrecklinger.de
*.silmeris.at
*.sottrum-blumen.de
*.tagesmutti-heike.de
*.ullrich.ruhr
*.webschoen.de
*.witchbook.org
alicepeters.de
as-photographics.de
chraebi.ch
closed-bedbug-csqwyv54k0i1gdsite.woeschka.com
data.eishorn.de
developer.albertus-dienste.de
developer.icekey.de
dtk-koeln-1.de
edb3plus.de
goldschmiedewertl.at
jasonsaint-online.net
johanneskirchmair.de
kleinesgaribaldi.at
m-sz.at
m.medien-dachsberg.at
mm-finanz.at
pferde-orakel.de
rainer-schrecklinger.de
roeder-riesa.de
silmeris.at
simeon-trefoil.de
smgc24.info
sottrum-blumen.de
tagesmutti-heike.de
ullrich.ruhr
webschoen.de
witchbook.org
www.hexagon-blog.de
www.kbv-schoenach.de
www.launcher.creativemd.de
www.llxxw.com
www.thomas-metz.de
zirkus-arcobaleno.de

Other certificates including the domain name simeon-trefoil.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for simeon-trefoil.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEZUbNS4ON+1Uz+6ryTnKAh5+LG8U5
n4j0gReJYo3XgxU/3jpVDarK7mg2A8k5/7QVOVrBGYbNf6kziiVlp4bw+A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343630263413215196189785756950433969864323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 08:05:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 08:05:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'simeon-trefoil.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046546cd4b838dfb5533fbaaf24e7280879f8b1bc5399f88f4811789628dd783153fde3a550daacaee683603c939ffb415395ac11986cd7fa9338a2565a786f0f8
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							569eb2be083a66b4b1c08ee52da2e8fd631e8347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chraebi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtk-koeln-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edb3plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldschmiedewertl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jasonsaint-online.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johanneskirchmair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinesgaribaldi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm-finanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pferde-orakel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainer-schrecklinger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silmeris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sottrum-blumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagesmutti-heike.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ullrich.ruhr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webschoen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witchbook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicepeters.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-photographics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chraebi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closed-bedbug-csqwyv54k0i1gdsite.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.albertus-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtk-koeln-1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edb3plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldschmiedewertl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasonsaint-online.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johanneskirchmair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinesgaribaldi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-sz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.medien-dachsberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm-finanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pferde-orakel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainer-schrecklinger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roeder-riesa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silmeris.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simeon-trefoil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smgc24.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sottrum-blumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesmutti-heike.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ullrich.ruhr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webschoen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witchbook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hexagon-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbv-schoenach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.launcher.creativemd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llxxw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomas-metz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zirkus-arcobaleno.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa262f2d50000040300473045022100920aea02c44c68804aa9a952280fc5bcce38e3db07070c6d5ecbb95c3d86df1d0220796cadd455dafd9ab5631ae6907a4e19fb9616f20ee80d0560fd5253de232747007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa262f3210000040300473045022054031d5da37755e3fb3cff1b31b290fd57f43fb6d24e75dcb39007142602b836022100d253169fb59f9b2c91b88130135f727105c5476d3ed830dd9a9600ed1475128b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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