www.tsfmg.lima-city.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:c6:aa:da:75:86:7e:64:39:78:f8:a0:16:7a:ef:8b:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tsfmg.lima-city.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:c6:aa:da:75:86:7e:64:39:78:f8:a0:16:7a:ef:8b:2b
Serial Number (int): 288483239046542855216509337670712860576555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:86:37:35:ea:f6:d2:74:6d:96:26:10:72:53:2b:b6:db:56:be:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:e3:bd:44:07:cd:f1:2d:43:f3:f3:24:d5:7e:34:b6:10:67:6f:7f
Fingerprint (sha256): f4:5a:dc:d3:01:1a:86:4d:d4:4a:f8:5d:7f:c6:12:f3:52:46:ad:ac:0a:bf:d5:c5:f7:b0:d2:96:19:a2:a4:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tsfmg.lima-city.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tsfmg.lima-city.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tsfmg.lima-city.de

Other certificates including the domain name tsfmg.lima-city.de

(limited to 100 certificates)
www.tsfmg.lima-city.de
www.lukas27.lima-city.de
monteure.lima-city.de
tsfmg.lima-city.de
monteure.lima-city.de
fdehnst.lima-city.de
dounia.lima-city.de
dev.buch.work
roboterin.lima-city.de
www.tsfmg.lima-city.de
monteure.lima-city.de
isvfyljmpsmroke.vasistas-magazine.com
www.toplistenverzeichnis.lima-city.de
www.tsfmg.lima-city.de
www.massage.lima-city.de
roboterin.lima-city.de
hnckg.lima-city.de
fdehnst.lima-city.de
monteure.lima-city.de
www.tsfmg.lima-city.de
fdehnst.lima-city.de
tsfmg.lima-city.de
tsfmg.lima-city.de
www.ascommunity.lima-city.de
www.tsfmg.lima-city.de
www.tsfmg.lima-city.de
monteure.lima-city.de

Certificate

The complete raw certificate details for www.tsfmg.lima-city.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjYSpkai+dbHqZbMy4r
iWuM+DYqHYFpelQy1VH4B32bfLnc8OKEvaw/uAbCG1MdqMrEZb57E62310lL74oN
WDok0LWIcUVS4hPm50dZptg/sYQCh99wWOcdv7sWkHnpw5OBQqfEO6SrjaZBO73w
7Cm0wSTd41wVK67FMEMpCRtuf3Xr/kECKBv/50LEjKkVjjn3UPXDg3CYu9JSjlqT
BMxcA5SNVifwmXGiSNFFm0HGA4BRJt0bgW2b75AR+THgfHpuaxhBhdCZcvjn9zXV
fbqRtTovg5FJ+nbxwkMNqtJKZSxAT103RY3WuOHRjUThbPW5/9fQWDSjZ9TnbCt+
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288483239046542855216509337670712860576555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 12:05:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 12:05:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tsfmg.lima-city.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21378084586532936304804389784349746727524895948833930926368228848148155193945833569271919193837709305437812915996799484541963581123637275195184970451150725056156959950527057395996395703395246269169170149259271718550841300502291191164688011373910310126194026098320450400975819476421884622395313402927638581497934515206362492262461414853727891487959012270328316297930158603832603099732535591041642752019082952089809599165874279162631538069737689840671566201187495761462983561888659466424570424950819727118043937309805994423534534230924377830295637587948328595065424297268400171647854637106381465297527224745104465690181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e863735eaf6d2746d96261072532bb6db56bedc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsfmg.lima-city.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e36859293000004030045304302206f8a7a0c1d3b1cd5e631b2ff78888ac528b65ffa68371bb914df4539e5853a52021f6fdecfa8c31b8568e670cf7bd9a1b9a261a7467aa6d410eacdfbd02747507c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e36859285000004030047304502206f4e335381aa4b39b4893700bf78a77316d218a69b3ae43404dac052882b14d802210082278a9644118d41c887f62e7a09b8756b298af536a1c6d8e937e7f0d19134fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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