habgmbh.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:99:a2:e5:c1:66:c4:3c:2e:6b:a4:00:08:61:13:01:f0:bb was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=habgmbh.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:a2:e5:c1:66:c4:3c:2e:6b:a4:00:08:61:13:01:f0:bb
Serial Number (int): 400728873759889390241245255224723358478523
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:f5:67:39:9a:9f:b7:28:b2:bc:67:50:2e:db:ee:b2:10:9d:15:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:a7:94:b6:d9:03:9b:ff:dc:a4:ee:ee:5c:6e:20:ac:da:7e:af:94
Fingerprint (sha256): ef:e5:2b:e3:fb:d7:60:d0:1c:30:c6:27:20:0d:ea:d6:6a:5d:5c:0a:f9:ba:cc:27:73:b4:9e:93:9f:d8:7c:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate habgmbh.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for habgmbh.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.habgmbh.de
backend.habgmbh.de
cron.habgmbh.de
hab.api.itool4.net
hab.b01.itool4.net
hab.cron.itool4.net
hab.f01.itool4.net
habgmbh.de
www.habgmbh.de

Other certificates including the domain name habgmbh.de

(limited to 100 certificates)
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de
habgmbh.de

Certificate

The complete raw certificate details for habgmbh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cUFOa8zrwT+Mucj9RbW
Pdae7bWSpi2k68adeWCtlpq5/N3S85XUwZdZXvkvWOw8HolIOakHtdnUw7f6yAij
aT4ykDvC+8wrUXTdQBtLXSn7S+2wZXTp4qn9Iib4xdK9zVOoVadz4ZqLuIVzV6FA
UGmN1gDU5QyyOheZN7XouL50UNkf0Dm5Eoo8byrC1alHinGSe2xu7h3i4/pDN1LS
9569a7OJ64TbaAp7fwsUBPF7bY8eoNcapUFs84J+TxMbZ2KkI2JZQIJYxLR4ZNnZ
/SMlvLN0KXKYDR2m9a3JwVjM9fvz7lz9GMEVB6XTL4LneIAJHyMKwbFeAezxsFoo
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400728873759889390241245255224723358478523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 00:05:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 00:05:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'habgmbh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26480960123782750751372169836922291380267136481628062177133732064029662392351648670385384138888214391621583659621172515124296007664589913242707161565754600553158096919605789906322215743214489645286497822262781966410784090725778031647396096691355101051453010993697590424638736266454394917345153249172291669516815447419319441066105055554339591763645244315001510154934630380937214449502019779579652353205994723608396294932339437369097110870746198496827465886935369118290688922235069669419680687431545396087762165753181278728622605033394886451966852267696669842814729605384277159140293899891702511858038316613201057949767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80f567399a9fb728b2bc67502edbeeb2109d154d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.habgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.habgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.habgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hab.api.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hab.b01.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hab.cron.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hab.f01.itool4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.habgmbh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a5c537af50000040300473045022100930651eec4ddb189a4ccdad9e690a704ee0d55e749486fe9dd4b4feeea6b1f510220025bac79b1241235ab738d6ccff1876b3652ac726efbda0875565f002ac11c2c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a5c537cc400000403004730450220148731c07b7fa47f34c4fe36262fbb2b00e27448ca2b4ff90705346a245d7eec022100c559a8486401e53809de07450c8afa0feffc4bee439fcd4c506afb0366c28e59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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