a-f-s.info
Issued by R3
About this certificate
This digital certificate with serial number 03:ca:25:60:20:1b:97:ed:8a:4f:18:17:bd:e6:f6:0c:66:08 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=a-f-s.info
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ca:25:60:20:1b:97:ed:8a:4f:18:17:bd:e6:f6:0c:66:08Serial Number (int): 330123576460876057900009614934337854924296
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ce:7b:94:b2:b1:eb:d1:12:7b:f1:7e:ef:a1:99:4d:c6:dd:87:46:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:84:df:06:a4:8e:f7:22:26:f5:7c:46:af:29:6e:ca:6b:d1:f4:99
Fingerprint (sha256): ee:79:df:a3:fe:e4:2f:41:e7:4f:83:da:b8:3f:a1:30:f8:d8:ab:66:51:dd:f5:98:25:0f:c3:d3:1b:da:82:03
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate a-f-s.info
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for a-f-s.info
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
a-f-s.info
wp-a-f-s-relaunch.web10.pagebuddies.de
www.a-f-s.info
wp-a-f-s-relaunch.web10.pagebuddies.de
www.a-f-s.info
Other certificates including the domain name a-f-s.info
(limited to 100 certificates)
Certificate
The complete raw certificate details for a-f-s.info in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISA8olYCAbl+2KTxgXveb2DGYIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjUwMTMxMjFaFw0yNDAyMjMwMTMxMjBaMBUxEzARBgNVBAMT CmEtZi1zLmluZm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1xAQ dwsZxh66fU/ZyUxhifH6FQRicKz4FPITnpfSjK3cBe2XpvrukhwatmoHUkrcfqUz aF5UHExpi9DZGJitONsFIacvGLSjtiDn4yDROkoMoIqPUbengmNrODLouuBhUDNT gDGJdYV2dW5mjQpf1KI2RlEobz07FhzGzWlK45PgPjfh8uW0btTZa6YM2kFJUr2C otOTbLhaG6jMzN5pkKmgiWd6FVYXA4leqEgjSy/GRYVXPgAnHB7Q+0DjjjdNMgx+ s6HPDEQBVUEf3hKl3SwrtkBNOF8oP4GMkvIqcPel7ieMvxq07PnALms7Kb8J8dGj 9GF+usMDeOQtjv5NAgMBAAGjggJFMIICQTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FM57lLKx69ESe/F+76GZTcbdh0ZZMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvME0G A1UdEQRGMESCCmEtZi1zLmluZm+CJndwLWEtZi1zLXJlbGF1bmNoLndlYjEwLnBh Z2VidWRkaWVzLmRlgg53d3cuYS1mLXMuaW5mbzATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABjARRObIAAAQDAEcwRQIgfjEFRTBnGzsMyrOG5TpzCCIi PuvwWH7h9EVnibN+Bo0CIQD3eH9gGLtoD0mn3ZepcMoci0bhu+wsxIP1mhBR8/Jo HQB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjARRObkAAAQD AEgwRgIhAPTpigRwMs1iRU2cL0tNZTk/wkEU2ToKdf0HUFhchlozAiEAph9/Fs3O SlzOhwjtj585T2jAA0CHPZncq4VCzxx/qnQwDQYJKoZIhvcNAQELBQADggEBAKsb Fz0EVFSzZ8XOjFslVwQeNwr1q1kDIDVw9z0G0b7uMh+r7LZ7DEd+tG8DdulMSvJ0 WJaXbQVTH+WjwMVT1oyIv9NH/MNVaP4ENsqIRCJWQ6zvX4sd9X7anY9tHTjdaPiN bpLsP4H4/w8xV8bjXN4sz1VlMYp8Dp9aXM+PK0stRNYAtD4rR8an1sFZc5XIoRUk DNLR7W2+PppxpkWVfXtcq1Vngg8Zx28gSOvj1vy/n5Y2AvZ75ytw1Hn4nxXbG3f2 bjk83RbRPvZuI74yV2QQeHMH5+MjquIOn9lpy9hs46mdgdn944+xKy5WlOAiq5FE GC/wiQOnDl5Vpq2VXgw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9cQEHcLGcYeun1P2clM YYnx+hUEYnCs+BTyE56X0oyt3AXtl6b67pIcGrZqB1JK3H6lM2heVBxMaYvQ2RiY rTjbBSGnLxi0o7Yg5+Mg0TpKDKCKj1G3p4Jjazgy6LrgYVAzU4AxiXWFdnVuZo0K X9SiNkZRKG89OxYcxs1pSuOT4D434fLltG7U2WumDNpBSVK9gqLTk2y4WhuozMze aZCpoIlnehVWFwOJXqhII0svxkWFVz4AJxwe0PtA4443TTIMfrOhzwxEAVVBH94S pd0sK7ZATThfKD+BjJLyKnD3pe4njL8atOz5wC5rOym/CfHRo/RhfrrDA3jkLY7+ TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330123576460876057900009614934337854924296 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 01:31:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 01:31:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a-f-s.info' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26237380523198315505703923314746472378954386847610966954662898610281435223650484025984739013592150886195440100768900695516872305359435109583717831489229378279820016601386023923789531588156227092179606093374949111681445110623916745879317863988637782985531499550465799898039225844220926036930673223915478218116105822748696686099180262081372056354063125972080303629076095155826628545085408979670001441053336235984618038988556243597685896207735610801850033404692265429359717786269194399399206513904177449503930068553973631494642404937590544366896599676396199420476819534073749340213503994612592858386295475367777072512589 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce7b94b2b1ebd1127bf17eefa1994dc6dd874659 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-f-s.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-a-f-s-relaunch.web10.pagebuddies.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-f-s.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c045139b2000004030047304502207e31054530671b3b0ccab386e53a730822223eebf0587ee1f4456789b37e068d022100f7787f6018bb680f49a7dd97a970ca1c8b46e1bbec2cc483f59a1051f3f2681d0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c045139b90000040300483046022100f4e98a047032cd62454d9c2f4b4d65393fc24114d93a0a75fd0750585c865a33022100a61f7f16cdce4a5cce8708ed8f9f394f68c00340873d99dcab8542cf1c7faa74 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00ab1b173d045454b367c5ce8c5b2557041e370af5ab5903203570f73d06d1beee321fabecb67b0c477eb46f0376e94c4af2745896976d05531fe5a3c0c553d68c88bfd347fcc35568fe0436ca8844225643acef5f8b1df57eda9d8f6d1d38dd68f88d6e92ec3f81f8ff0f3157c6e35cde2ccf5565318a7c0e9f5a5ccf8f2b4b2d44d600b43e2b47c6a7d6c1597395c8a115240cd2d1ed6dbe3e9a71a645957d7b5cab5567820f19c76f2048ebe3d6fcbf9f963602f67be72b70d479f89f15db1b77f66e393cdd16d13ef66e23be32576410787307e7e323aae20e9fd969cbd86ce3a99d81d9fde38fb12b2e5694e022ab9144182ff08903a70e5e55a6ad955e0c