klopotek.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:49:72:b7:25:47:c4:fc:34:46:9a:4e:f1:9f:0c:aa:b0:32 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=klopotek.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:49:72:b7:25:47:c4:fc:34:46:9a:4e:f1:9f:0c:aa:b0:32Serial Number (int): 286329953518489158887386648395605932159026
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:9c:d1:bf:3e:63:fa:84:12:64:d2:f0:62:5a:3e:e8:07:70:53:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 42:2c:b2:2c:cc:91:57:63:75:ad:96:b7:a9:9b:fa:d2:d6:42:de:05
Fingerprint (sha256): eb:d2:94:85:08:da:ed:4c:5e:8f:db:02:a7:80:11:13:16:33:11:63:35:c6:4b:9b:3a:b4:4f:b9:94:7b:4b:bc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate klopotek.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for klopotek.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
klopotek.de
www.klopotek.de
www.klopotek.de
Other certificates including the domain name klopotek.de
(limited to 100 certificates)
*.klopotek.de
klopotek.de
webmail.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
webmail.klopotek.de
klopotek.de
www.klopotek.com
klopotek.de
klopotek.de
*.klopotek.de
www.klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
saas.klopotek.de
asp-unesco.klopotek.de
sip.klopotek.com
saas.klopotek.de
klopotek.de
autodiscover.klopotek.com
klopotek.de
mail.klopotek.com
klopotek.com
*.klopotek.de
klopotek.de
*.stream.klopotek.com
asp-unesco.klopotek.de
klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
webmail.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
klopotek.de
webmail.klopotek.de
klopotek.de
www.klopotek.com
klopotek.de
klopotek.de
*.klopotek.de
www.klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
saas.klopotek.de
asp-unesco.klopotek.de
sip.klopotek.com
saas.klopotek.de
klopotek.de
autodiscover.klopotek.com
klopotek.de
mail.klopotek.com
klopotek.com
*.klopotek.de
klopotek.de
*.stream.klopotek.com
asp-unesco.klopotek.de
klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
klopotek.de
*.klopotek.de
*.klopotek.de
klopotek.de
klopotek.de
Certificate
The complete raw certificate details for klopotek.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISA0lytyVHxPw0RppO8Z8MqrAyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjYwMDE5MjdaFw0y MDAzMjUwMDE5MjdaMBYxFDASBgNVBAMTC2tsb3BvdGVrLmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIf5dGB4WR2X9nM92Ktyl1HcRyPbeyUqQiUj hOzNuXkuPDWj2wFSLTI0ukvx4YAPizShH+mN4sjQ9RSQfiRscwsw4XEv/m6SBUFs xGWAi8EhOif1mq3dqC13pXPk3YUKkxENh4GE1Zr3kruhWw+xA54HscI+HZOW3tlJ fuYFWltyGwSG1dQW4cOiKHjsEfvqA+kJ57G+sIrerJ+HueIuuB6X1IhY+HMAuCu8 2LEQpyOAOqG72uPUAemVGtDPbAFNvUce+B4Ue5/OTOLkJUz8p37s55NK+Esr9M8V 5MPhFHC6CIE5wC1TIaySv8Ldsvlh9i4A/VIr4VJpz+6WdPLA2wIDAQABo4ICcjCC Am4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSGnNG/PmP6hBJk0vBiWj7oB3BTxTAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MCcGA1UdEQQgMB6CC2tsb3BvdGVrLmRlgg93d3cua2xvcG90ZWsuZGUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW8/yX1BAAAEAwBI MEYCIQCWxlzeXWX1ckxebFrUCqGvggkC2fedq6nYTekLTOkfCQIhALooLbkK8wX0 lZA9w5HtZEoJhAXIrTy73+E011BJ2oRqAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC wQApBo2yCJo32RMAAAFvP8l9eAAABAMARzBFAiB8LLNazi4Nz44JfQO4uV7/LkMw vIYwrbO0GRNuRPzOyAIhAO8PdIdjoCmQc3WMxxfsXeotw7FcFsT4apb3k4NHP//M MA0GCSqGSIb3DQEBCwUAA4IBAQBXtTgYKjri3hLl/gj0b76K0shOBAS8tpKDXXwc C0K/HMxQnu62E8z/wZE9Fu+GKsxWyPRgA0Hbv7T5xD4leYxSKoSRVx7sQpEYv/AD xhoBUJNXmqfGZX2w8zokmesCZpz182x96nGlYV7KPNq5rWcQvFHMsC9hLozYNh72 iIKPnzDmlVcS4KMfyh8k6d5KGmXIuZL5XuwSE6p4KlcadiocsE9YcIHpb8HsleAt 6/7XBqbYyuZJrv5Fmmz21Jqse8omkNGgMvCo89eNs/rOFFaFSxcGV4XFbLKowbeW dPu+DcY0CG1CeMKfu0PcGuIvxIs/VUEmrOHnO3Y2hQyW5Bc/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIf5dGB4WR2X9nM92Kty l1HcRyPbeyUqQiUjhOzNuXkuPDWj2wFSLTI0ukvx4YAPizShH+mN4sjQ9RSQfiRs cwsw4XEv/m6SBUFsxGWAi8EhOif1mq3dqC13pXPk3YUKkxENh4GE1Zr3kruhWw+x A54HscI+HZOW3tlJfuYFWltyGwSG1dQW4cOiKHjsEfvqA+kJ57G+sIrerJ+HueIu uB6X1IhY+HMAuCu82LEQpyOAOqG72uPUAemVGtDPbAFNvUce+B4Ue5/OTOLkJUz8 p37s55NK+Esr9M8V5MPhFHC6CIE5wC1TIaySv8Ldsvlh9i4A/VIr4VJpz+6WdPLA 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286329953518489158887386648395605932159026 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 00:19:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 00:19:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klopotek.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24304806044955429706273982161422351062000772834401302172905223910132962191798163558457321381467755544844509636175957223577545724223201310552259854425290860790802663392371024543405635843989774349599368399480792771094722859538801361475972484356152011997061494100723125735424857161404882520513947541757795419108750645066104074893519735921083532518149962160227676204909621670210656598916099239932938273156814488041089569827842107192153185705528918163145234345212802218214871229254115945004725884996247115121726723544597772221063768114900595624081689822650638673678867784434677452975934985986693359506744128033372966666459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 869cd1bf3e63fa841264d2f0625a3ee8077053c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klopotek.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klopotek.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3fc97d41000004030048304602210096c65cde5d65f5724c5e6c5ad40aa1af820902d9f79daba9d84de90b4ce91f09022100ba282db90af305f495903dc391ed644a098405c8ad3cbbdfe134d75049da846a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f3fc97d78000004030047304502207c2cb35ace2e0dcf8e097d03b8b95eff2e4330bc8630adb3b419136e44fccec8022100ef0f748763a0299073758cc717ec5dea2dc3b15c16c4f86a96f79383473fffcc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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