wandern-in-der-pfalz.kruemelhuepfer.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:6a:2d:15:a6:22:2d:c7:ee:37:21:b3:3c:31:c5:a1:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wandern-in-der-pfalz.kruemelhuepfer.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:6a:2d:15:a6:22:2d:c7:ee:37:21:b3:3c:31:c5:a1:06
Serial Number (int): 297547920948905106706954489484179728081158
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:1d:4c:9e:32:c2:16:2d:b9:64:33:8c:ed:d9:ac:be:72:07:83:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:5a:58:91:95:f7:8e:67:21:2b:5a:ec:de:e4:8c:ef:cc:46:4e:e3
Fingerprint (sha256): f6:8e:06:66:c3:63:99:ee:78:bc:9d:32:10:8e:89:c4:62:92:e4:1b:72:e4:a6:e0:f4:68:b5:95:6b:a7:59:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wandern-in-der-pfalz.kruemelhuepfer.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wandern-in-der-pfalz.kruemelhuepfer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wandern-in-der-pfalz.kruemelhuepfer.de

Other certificates including the domain name kruemelhuepfer.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for wandern-in-der-pfalz.kruemelhuepfer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwTiy8V73JJPY0V2K3TJ
PhAYkNu2C/4kzCfqcIZqulWHeM31qu8QUVl02LAiJvl2jZ71CqedJoPxF2dPcnnr
JTf+9eVFVkaWHIRXxXiyBTHdQ2W2PWJ7vIFjYoZX3aSPKmg8siR5ZXElNgwVXkyj
uIqiHwCzyMlB67hFZYbcwriBDLcal9J5YrL16DeCqAyXVhlCEbV0PGCU+gQOdNvp
WvolldyzYxEV4HZpVRO88OPInLebBaQbdelIcd7y0FL52m5uvGJ9+Q0GTFUq4UQI
mwONOI/Ord7eTBGfSZroai0C4kw1nsdSCoAKIwEHxNQg2xdQXEQTRpkvLRpRq/Tc
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297547920948905106706954489484179728081158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 08:38:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 08:38:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wandern-in-der-pfalz.kruemelhuepfer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123832026085028162120565591149616685982442129225632718052157215063655555956004035206091221862402662199913711737421722211553478255966595433909478969589724906865009398094098145895995306068514605230497879090309956095750255480748363106736596498674758856957736608501679806799776477140870673920228758715473440190794162454968746692272384532706363178627912208687010861343303297669443426424442121153548036424301364036693045823409916898952930637393299053674425014110634948282792293813460443634138460000980033888533217826015148049930625210393548650462122491517971213940555156996759383269613695756103115653023598351449408724163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c1d4c9e32c2162db964338cedd9acbe720783fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandern-in-der-pfalz.kruemelhuepfer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f93f7e0f10000040300473045022067849929dfd5785e812b085589ce8312ddc024e2f65de1204e77f266dc193feb022100fcefb4476a5e6e186d125eadb4d6229ce8d102ee9701a731d038c1693bfab5b2007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f93f7e0e2000004030047304502203bab9a24aeb8f70b8c1310eb01cf0cba061124ca03f7cd48556bafa9ef4c003b022100d5152a0b040551f3eb32ca33736a81a70e36cf4fae722bcf19aa10578968d3cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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