digum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:40:f1:3c:0e:77:5f:b6:c8:fe:3e:e5:02:fa:01:09:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:40:f1:3c:0e:77:5f:b6:c8:fe:3e:e5:02:fa:01:09:c6
Serial Number (int): 309062712317575981255668361694765834635718
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:bf:37:d8:a5:e2:64:41:d6:c5:26:b7:be:22:8b:e0:82:98:7a:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:71:42:16:6f:02:e6:55:49:44:9e:9e:68:47:be:f0:b4:3b:39:64
Fingerprint (sha256): ec:bf:b9:bc:ae:ff:3f:f5:92:d5:bd:7d:fe:99:45:85:e3:2b:38:de:81:ee:82:38:13:67:f0:56:a0:92:bb:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digum.de

Other certificates including the domain name digum.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for digum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309062712317575981255668361694765834635718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 08:26:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 08:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783104648049944379785987309981710693267411030293704503973232988002702046137788723771721209235298035068804459737746434109574473651344068379979158112487675177371271020345912143484764483883658143910184093044218478942990978539262085506173800213237575674912087486527293402634136546622996220589269658141706587844770039504054493036119843308665288898522459370290860880693569834157330860193469559223277095112866075329559278226063351013075779245408876792142471815767866100263681212260815792831023774735679009215609198094026361509264944538522488393125070904950659953172343627426908768582256446442136214406139141275869498796880553639867184550125140524433301709438408234953530344063999078793230328323123341629210234780263017430144364800737169222306383128944305006881433482083834222801375060337589461864764020578891139184297571750760493281852610603690540140494789704189344317884887374628012423823000048233890924735802552536771357892668945194990844848440812698713984933731837952144213139382618079452406675044770998238164446613034790331361300297841715083465930669389685361322165594629999165222504194049878762426205873869572919364057875082150701069418929562613373710986872042212577778149138721777461335798074005624466861101300411181826966339058039821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2bf37d8a5e26441d6c526b7be228be082987ac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016edfae83090000040300483046022100a49d531b2a81d411697b8ca1dc886d6835735b3593e8013ba5a6579c685959630221008c48fdc1b2ac979cc58242dae35c71f6d6d836ce4c02224e412c30df7c18b7110076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016edfae83c30000040300473045022100c6eae46901d4e58683b345447e1fe024854e43d3464ca5809cc4bb935542e7ab02200cdcd9483a61503e9dbaedd96983d8677e03ca65281f97940b449bb6032e76b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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