mk-pflegeagentur.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:80:09:c1:46:83:11:5b:07:a1:a9:96:16:9b:04:9f:5b was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mk-pflegeagentur.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:80:09:c1:46:83:11:5b:07:a1:a9:96:16:9b:04:9f:5b
Serial Number (int): 278861450342472386020356698827456189341531
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:6c:90:2a:49:20:e1:92:20:71:e7:7d:f3:40:98:65:72:59:2d:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:c0:78:e8:35:68:66:2e:9e:2c:e3:f2:08:ae:ee:49:ce:6b:9b:dd
Fingerprint (sha256): f0:82:59:bf:4b:d8:90:70:70:ab:fe:d9:23:d7:35:82:5b:ee:4d:90:c8:ec:b5:40:33:a5:19:0a:a8:76:49:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mk-pflegeagentur.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mk-pflegeagentur.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mk-pflegeagentur.de
mk-pflegeagentur.server326.star-server.info
www.mk-pflegeagentur.de
www.mk-pflegeagentur.server326.star-server.info

Other certificates including the domain name mk-pflegeagentur.de

(limited to 100 certificates)
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de
mk-pflegeagentur.de

Certificate

The complete raw certificate details for mk-pflegeagentur.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278861450342472386020356698827456189341531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 23:30:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 23:30:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mk-pflegeagentur.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893826182843989630389079322941951114200695937932358757050601239369354157353789794181606380466312119825785982631912092905762222103135030493868042351876452773000794408681448675946269198155649270932552631827112253346696602952847239096731813775103505957844552894779869580122118970378769119455352888774695256548929771556955920248166414348018483281315028266684907760522121756893747819174884298029482465818535137925643377372951157755671862293338815662192102711119616111981692259229719094235975219002535007898750507953865134990731284629502134258172301847028096042255637207067900858872595359827168481428048263721424071059719961489614438461792036940207719279906811854044842228846171166230506293507789417978287942318580287806095264100998041739073107815718285865710392826677570757368733062169579473033278197053589343789703454786734630626126004351816750212536965232255390218221943249016812979943751476127190729218220378352451253713868417972128473269124773293585202504026223876963875387203752142213119056721111290683134694693522452212440107631720990593887098554562907172605160001607672147361059131378412850033649972557697347532233909186964628723413838144811635924899171827359813758415105151605699359263726373843902368747117536565199546667813187703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							486c902a4920e1922071e77df340986572592dee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk-pflegeagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk-pflegeagentur.server326.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mk-pflegeagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mk-pflegeagentur.server326.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da8c628e400000403004830460221009046ada9d3d9fd7437b6d944e0b4d7f6d9351b68a29756ff461a0419448dcdfb0221009936f7330a9ec9f055133082838e80c37b963138ba91a04f038d185caa472d69007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da8c629070000040300483046022100b43e24154d665c993e320a86d6dd0e0d4c61d732b2ebc12edfb0ecc215c8f250022100c6af268e1e5f41b46af9ded06d3245a23dd87c0459d1a1131c83f115250f7854
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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