www.theatergruppe-hausen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:b6:c5:48:76:84:51:29:7a:ea:a0:7e:a3:f8:dd:5e:15:10 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.theatergruppe-hausen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:c5:48:76:84:51:29:7a:ea:a0:7e:a3:f8:dd:5e:15:10
Serial Number (int): 410642768671002798986372030372336864466192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:f2:95:95:f3:1a:4e:f0:8a:c8:c2:17:df:d9:43:20:89:ad:f1:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:29:ca:c4:82:3b:98:a8:1b:78:fd:36:74:ba:8e:67:50:75:47:3b
Fingerprint (sha256): f1:c9:85:8b:02:69:30:de:ea:b1:e5:30:a6:08:8f:ae:e4:bb:63:97:da:98:33:18:79:46:f3:4b:7d:72:5e:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.theatergruppe-hausen.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theatergruppe-hausen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theatergruppe-hausen.de
theatergruppe-hausen.server320.star-server.info
www.theatergruppe-hausen.de
www.theatergruppe-hausen.server320.star-server.info

Other certificates including the domain name theatergruppe-hausen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.theatergruppe-hausen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISBLbFSHaEUSl66qB+o/jdXhUQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MDUwNTIxMzJaFw0yMzA4MDMwNTIxMzFaMCYxJDAiBgNVBAMT
G3d3dy50aGVhdGVyZ3J1cHBlLWhhdXNlbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAOBekNXbqHimUR0W8sHLqT0N7T7cElBLp5zWYpdU+nN2R5eO
i3GKlf8mi4A18fK52Hj3CD4wefxSZHSSMQkwVRXtbOLm4XVnxtrELDQ8X5IWyBkT
qOKqq0QOjK3BfkNWQC+GgMfKHbkOlnDYq3KD87j0NTOzfPd4Oy3hMALEmWjnla4F
/JbHBqv0Kjqdh6sT9KqLpnNmsvLqFmwh6gEsACYXoYX+PnGMUeI6FggYdDNRd85K
/l92H5dMuwVP9Gip1HtHiKNkirErY3gXcYPffElXWiTAnU6hqAbnGMG0jfb0Szck
KD+5LEOq9gYxoUb8GzHm2kwzueHgo7JgRbmPzSJIg2+1xHe5gaQFxt3E4Yg4YgrN
WT+qnh9v81j4YIMcnzMPTxHNqjprp2XF6fj8XDidAmyAQy3PAqlM44CGaPsWJ5N1
TUY3jfiYIPRgCDXMcW95CQpaCiyOTmEE/yUAb5NQcViMJnTFi9CfhKgVhQuCE4t1
kfILpYT82BSQgz+hFNaB93LjJcmnUZ9JA1j5LqoLuD8o3yked02rZ9d2Z5v+rtBA
To6p3ZYsgL3doE64IJQWcV9x2f9ueYYa/U2Y8Z8XPeCoO1npDJWZde6ka+ERJFrq
zOvPODNXVBRiHy5knJrR9htEtDlpzVkhbw0WZdPP4ZQkQGY1GoHaccsP4fW5AgMB
AAGjggLYMIIC1DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFH7ylZXzGk7wisjCF9/Z
QyCJrfHyMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIGnBgNVHREEgZ8wgZyCF3Ro
ZWF0ZXJncnVwcGUtaGF1c2VuLmRlgi90aGVhdGVyZ3J1cHBlLWhhdXNlbi5zZXJ2
ZXIzMjAuc3Rhci1zZXJ2ZXIuaW5mb4Ibd3d3LnRoZWF0ZXJncnVwcGUtaGF1c2Vu
LmRlgjN3d3cudGhlYXRlcmdydXBwZS1oYXVzZW4uc2VydmVyMzIwLnN0YXItc2Vy
dmVyLmluZm8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1Lr
UgAAAYfqkqphAAAEAwBGMEQCIHUxObg7CRJGWAtpxQQPEGmtPDpTNu3SHEeoJw1+
bFClAiAgS6d/CdkSm4QQNvaoSHnl5dezAuNarZf4QLMj+GeQ+wB3AOg+0No+9QY1
MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABh+qSqkwAAAQDAEgwRgIhAKS9dnc+
IKKIo8eag+h6PUH7LYxmtm5pXYLKcdAnSDTPAiEAsUSxZXZTCWAGZjn4WA4iZI//
MCSVhrHI7TsjwufioFgwDQYJKoZIhvcNAQELBQADggEBAJJX7E+NFkn2eNpJ4Dqy
XtYX2PXHJd7l5xa97vXX8feZpfd8mpy/mk/R/yx63D+Icym34stWDMZYA5r07wO0
HJwUfIQQwBVm783YCuWuBGky8aYjp2AIW0v3r5w9m5Y/FrxiYA29UQUo4MDpvRNS
oVAQElL1jIFlwT1wroyV959Qnv0uUaibEhPHiS5dROFXpzEc38BUuvVAGWV/HHjn
UKPNorBuregpw8+ucXrUiofMWa8iT6+F0/7krbqpzsoEadg25AgIs8IVQnKjEWL9
d3Tvr7a5bEh2M+lFMZS++HGYK05+wdAQcfrUr0DkpWe3+DV7Fsg1HtDv66M/3btu
zKo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410642768671002798986372030372336864466192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 05:21:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 05:21:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theatergruppe-hausen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915347281607354923802447812947346794372723453740559458585405613785783492936558284663970323534939100998397578753042764886363645509080154336268018073151518166838881923343546014634187400544826077048888296061319168295970892497730169037390866163104565473547122535547194022625593554364114727170800061749322085607024429385937793890102603789954304181220251475485943491943455358032321230934446336244682050315958745439423491824621595812970969327805066846957419929882134836744387126787183063996981902532162399868721046259818960294069970002567262354712150314472233964667998537175091707581162854814962454064175809153900922651789067838463918590221813380423953494619390777537736817124415622031169679148754573775413025441186545432900729872436223488283912559597926011797828506740772854238813296218064668527315697732385256306758596555228964739082866872735151519466675732002427672038178701190626299605690854537229450696027048171475776559130043954622481784433886457179507384504458387163783496476536851088431471443509261298431230915211498772320971134238598864960541519565945738899819393650634194125539153018763671097261351431780961709233315534798391890716763666860942331876934592330610937725449767001961244100685694784895897363249421539475050474286216633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ef29595f31a4ef08ac8c217dfd9432089adf1f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatergruppe-hausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatergruppe-hausen.server320.star-server.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theatergruppe-hausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theatergruppe-hausen.server320.star-server.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187ea92aa6100000403004630440220753139b83b091246580b69c5040f1069ad3c3a5336edd21c47a8270d7e6c50a50220204ba77f09d9129b841036f6a84879e5e5d7b302e35aad97f840b323f86790fb007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187ea92aa4c0000040300483046022100a4bd76773e20a288a3c79a83e87a3d41fb2d8c66b66e695d82ca71d0274834cf022100b144b16576530960066639f8580e22648fff30249586b1c8ed3b23c2e7e2a058
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009257ec4f8d1649f678da49e03ab25ed617d8f5c725dee5e716bdeef5d7f1f799a5f77c9a9cbf9a4fd1ff2c7adc3f887329b7e2cb560cc658039af4ef03b41c9c147c8410c01566efcdd80ae5ae046932f1a623a760085b4bf7af9c3d9b963f16bc62600dbd510528e0c0e9bd1352a150101252f58c8165c13d70ae8c95f79f509efd2e51a89b1213c7892e5d44e157a7311cdfc054baf54019657f1c78e750a3cda2b06eade829c3cfae717ad48a87cc59af224faf85d3fee4adbaa9ceca0469d836e40808b3c2154272a31162fd7774efafb6b96c487633e9453194bef871982b4e7ec1d01071fad4af40e4a567b7f8357b16c8351ed0efeba33fddbb6eccaa