www.spfau.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:fc:9c:6d:4f:60:8f:6e:c1:6d:0a:c5:32:5f:b4:f4:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.spfau.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:fc:9c:6d:4f:60:8f:6e:c1:6d:0a:c5:32:5f:b4:f4:34
Serial Number (int): 288214660085433225920119132953810799227956
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:26:0d:71:27:82:a7:64:3f:16:cf:dd:87:0d:50:a2:5d:a8:33:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:42:30:07:08:b3:ba:be:c4:4e:65:cd:13:04:52:fe:f1:0d:79:6d
Fingerprint (sha256): f1:8c:90:78:35:d9:53:e9:e9:f6:0a:a0:9b:93:0f:bf:a2:47:73:8a:78:1e:f5:7c:56:f5:a5:6c:2c:e5:0a:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.spfau.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spfau.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spfau.de
www.spfau.de

Other certificates including the domain name spfau.de

(limited to 100 certificates)
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
spfau.de
spfau.de
www.spfau.de
spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de
www.spfau.de

Certificate

The complete raw certificate details for www.spfau.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla+Zm6WwBVutUA87nOiD
oz3u1uaBc5Tf/XF4G3CpATyNpt1sNgosGEQeTaC07LzSGI3gUdBAL7L3AAJ7XRHn
OGoxtIlp06iMSkv8JIN26Bd0mBrpkinhSQiLimSi1s+rPH/dqc627YS0OZhtOuaC
eTkLxQans5ldJvPXTYhGr0FMSZG5qdEiPwLEsBpHUBSPeS4cXgoMX7aeU+iNMM4U
Zx+djXLOFV5aD00cbyzWOIUiXIBrQOHIA+ArQw0q2kCBLg/3FMElgEV82cTipp4V
leuETy8vtbIFBPRqbO4pL/XZuAMOvwmt1SSeKL1tUcHnk6Q6T3AZuglU5+kLy+2g
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288214660085433225920119132953810799227956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 15:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 15:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spfau.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18896099042659449168703298893743615099178287131040194536709708167913000710416396539731890870878504740798940434181891641687332292427646961440157742379149073338802269927068787846899931373706005738766333999147394131189814908850256417315703235757754975713768924607098058165611744707207834132692508794786479186830869099755051933775745810353966331012759439647369555877311520144170377851977796501889788767078128646715465768132560556692572800248252561420847218886513742553524768469481432872449083847150929669884391663892150960873042037019821605457589937755499217210267684778764678495555354802876353960213720497015007591899171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8260d712782a7643f16cfdd870d50a25da8339e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spfau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spfau.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169634d49df0000040300473045022100f44fd19e25c3e4fdde7e185d35e747f42c2bcfc7a43d95312d3dcc5707737fad02202fec3280a621091cbd42d30c691fa0b563f091d8254b6a9114bf08fc9708ba5900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169634d483d000004030046304402205f2de4f04579720d913a963538c525a7688061c7885974ebc574be64266c1fcc02201aadf804958a72eda12eeafe1973ded2e56fbc5767c325991ecbd24fbd8c124c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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