*.snkb.de

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:40:64:b0:9f:49:ee:15:a3:aa:aa:52:aa:a5:36:71:6a was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.snkb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:40:64:b0:9f:49:ee:15:a3:aa:aa:52:aa:a5:36:71:6a
Serial Number (int): 341729089792362553730569666483738916581738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:66:4f:67:b5:7c:2c:85:98:89:0c:66:e6:72:fd:fe:55:14:06:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:66:d0:ce:b4:78:f9:81:22:99:a1:a0:61:53:08:a1:dd:68:88:d4
Fingerprint (sha256): f2:a7:7f:5c:f5:d4:b9:82:22:1d:6a:6b:2c:a7:dd:e1:73:f8:88:c3:4d:a4:cf:b6:79:ee:5d:06:df:4d:ee:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.snkb.de

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.snkb.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adifference.de
*.de.snkb.de
*.from-fat-to-fit.de
*.nk3d.de
*.snkb.de
*.tntparts.de
*.united-technology.de
adifference.de
from-fat-to-fit.de
nk3d.de
snkb.de
tntparts.de
united-technology.de
www.adifference.de.snkb.de
www.boreo.de.snkb.de
www.elektrolager24.de.snkb.de
www.from-fat-to-fit.de.snkb.de
www.nk3d.de.snkb.de
www.omema.de.snkb.de
www.osonu.de.snkb.de
www.tntparts.de.snkb.de
www.united-technology.de.snkb.de

Other certificates including the domain name snkb.de

(limited to 100 certificates)
assistenza.rrdl.it
assistenza.rrdl.it
ticket.snkb.de
support.hypeboost.com
support.truviewgps.com
nk3d.de
assistenza.rrdl.it
assistenza.rrdl.it
www.it-strategien.org.snkb.de
kundendienst.snkb.de
assistenza.rrdl.it
assistenza.rrdl.it
meet.verdom.ro
www.namikkara.de.snkb.de
snkb.org.snkb.de
united-technology.de
*.namikkara.de
kundendienst.snkb.de
assistenza.rrdl.it
assistenza.rrdl.it
*.snkb.org
support.weekome.fr
helpdesk.tmradio.online
support.hypeboost.com
assistenza.rrdl.it
assistenza.rrdl.it
www.united-technology.de.snkb.de
assistenza.rrdl.it
support.hypeboost.com
namikkara.de
helpdesk.tmradio.online
support.hypeboost.com
companyhub.io
namikkara.de
deild2.svar.cloud
nk3d.de
assistenza.rrdl.it
*.snkb.de
helpdesk.tmradio.online
deild2.svar.cloud
helpdesk.tmradio.online

Certificate

The complete raw certificate details for *.snkb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ0U8DJxtYQYhtIEhGkW
cEDGTF9+iu+4uP+zrs7ofgObuuQL88bumfzpLZdXsXms7DYyGKRjZslIWQp3f6OX
Ol9Mn8XSDwVxBHRFPNVs6NMEw0JVoUJhipfEIhsExrzfTdiNVu6E345tSZeT8rCQ
HB/vi6CHrltO3Sv4d38FyEX7XsElvRrZ2agbpQKNM74jW23Lp4m11S3R+c/f7gkb
wdmpYifsgVYS4raC3Jpl+mQbm737jv743gRREEYO7IjBHMom2Q2147avgIHvnnwg
S2lNheC0etJ0Y92MViRK7ZsJvPQYUsU7JZf01/vcEOhfZ1yJybJnbbQRQKvSCuoQ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341729089792362553730569666483738916581738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 02:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 02:07:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.snkb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22855584069990110454190949970724897386230587355512845190914313682443782811476663358032448502769585085030475148875460555558300700859553465698735359905637922994191192318221651606220933090731841945731626421008974673117411983781884606452783207400127721551539903334347281466811250108809281157729533145973290520968515993605560894777167415397684259416453966610376188855210777797543521578811841842461486321903104916845117170242958198431700159893290966854897409736825292669506883732601324549406949155762949821724399833021066011612501324853892801824415949573442603248956003530066575731821283202928833916174877227202194990305331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14664f67b57c2c8598890c66e672fdfe55140649
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adifference.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.from-fat-to-fit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nk3d.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tntparts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.united-technology.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adifference.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'from-fat-to-fit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nk3d.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntparts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united-technology.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adifference.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boreo.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektrolager24.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.from-fat-to-fit.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nk3d.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omema.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osonu.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tntparts.de.snkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.united-technology.de.snkb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a258287130000040300483046022100a1d05c56f6b602ba47e5a9860a43f766dd4cb79e76a05900c0bb712f9e046539022100cce8dcd2524c18142fff3281383c79b5ab115faf72862ea6061a36fb03511834007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a2582870e0000040300463044022022eafb722c6c0482de71611d720f6314ad48e4d188464183782c7adec21a356702205e841291a2682202e6ceb2c81e4b5421cba1e65f14ea1119b65f09c00a66186b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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