andrehans.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:21:d9:59:5e:6a:90:e2:5d:f1:44:31:9d:70:32:c6:14:66 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andrehans.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:d9:59:5e:6a:90:e2:5d:f1:44:31:9d:70:32:c6:14:66
Serial Number (int): 359967368339927219696915233744094925034598
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:fc:e0:78:27:06:53:8f:52:22:27:f0:4e:a2:70:65:52:bb:28:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:b5:4e:ac:67:46:36:fb:b9:fc:9b:28:43:04:63:84:87:94:dc:89
Fingerprint (sha256): f2:8a:60:71:3b:5a:2c:96:64:aa:16:2c:34:d2:93:83:1b:67:97:85:2c:97:6c:78:25:40:e5:06:2c:95:23:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate andrehans.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andrehans.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrehans.de
www.andrehans.de

Other certificates including the domain name andrehans.de

(limited to 100 certificates)
msd.andrehans.de
elton.andrehans.de
app.andrehans.de
app.andrehans.de
elton.andrehans.de
app.andrehans.de
app.andrehans.de
elton.andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
app.andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
elton.andrehans.de
andrehans.de
andrehans.de
app.andrehans.de
app.andrehans.de
elton.andrehans.de
elton.andrehans.de
elton.andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
andrehans.de
app.andrehans.de
app.andrehans.de
app.andrehans.de
elton.andrehans.de
andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
elton.andrehans.de
andrehans.de
app.andrehans.de
elton.andrehans.de
elton.andrehans.de
app.andrehans.de
msd.andrehans.de
elton.andrehans.de
andrehans.de
andrehans.de
andrehans.de
andrehans.de
elton.andrehans.de
elton.andrehans.de
104.andrehans.de
elton.andrehans.de
app.andrehans.de
elton.andrehans.de
msd.andrehans.de
app.andrehans.de
elton.andrehans.de
app.andrehans.de
elton.andrehans.de
andrehans.de
andrehans.de
elton.andrehans.de
elton.andrehans.de
andrehans.de
app.andrehans.de
app.andrehans.de
msd.andrehans.de

Certificate

The complete raw certificate details for andrehans.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2J/IjcjfyD32eMT/rEh
wsiIGUsTgEpv3IELCmDtXiDU7fRhmmNkjCWAkZ89f06t3z6rP5/tDNbaSL7nGgOV
4wDRy9eql8jZu4/rqXB+p2hunXOy0xBc/jyOIq7WxEX27+ty2tDVYF2LEQTRo2OO
vMA+7k9QdLGB0viONUDIBQgNigWUG3n2dzky2GcYcIs94m9XzEqPVfhyebi1ocYZ
Io4GNOHKXVLNQCeJ0VDIom/UUi4aGTj6ZFHYSeVbvfANNBC320o2DJ9B9LlMlkpw
lgkLwIjMXx4KL3nSl3Umsec9Amxa/q3y0TZFrMzPq0AL2pIYcOQSAIpVo/W6JPaz
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359967368339927219696915233744094925034598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 19:46:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 19:46:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andrehans.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24160086740032616445077831371869774130449242477885869881967246773714514846981833151326532125500332305448731044654388135359639678105623738034123993460194761089950747677509309313560726216870156781106843667395582907268399490781204630184471979250457561644750979713683904112462030144208633669005151345995341566590367990511769563800382705036353813347371450955595555299255555650556330281661554879196169917990166034439609399161876223920556560096745500884132924579291948610195028210324591713846677810474820085673629488011915284209339169379942640673428210869600096076333267223305333712322163446634021287454621830964568135218139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14fce0782706538f522227f04ea2706552bb28cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrehans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrehans.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001670ed3767c00000403004830460221009d2e2b45aba39f9e30a161351088ecd5e21a20ea55caa38f9a9c28ec0743f33c02210091b99509afce4f99710f1a2618068c871ac8f47506f64aa9398032d11617a860007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670ed37866000004030046304402205870d583610a74f1973b9c18f107f11603f952bd1fc3928227a0ece5394a3aaa02207e660c5e1a5c966873ab3b53974d431c6443c76e7e40a8b3dd1e69f957ff059e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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