www.gangolfsritt.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:45:5d:6c:f0:98:59:d4:f0:5d:56:21:09:af:be:0e:cf:7a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.gangolfsritt.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:45:5d:6c:f0:98:59:d4:f0:5d:56:21:09:af:be:0e:cf:7aSerial Number (int): 284940524964343000028215130184641898532730
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ba:51:b6:1c:80:69:a0:2a:4d:17:21:46:8d:98:4b:18:95:a1:68:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 37:d8:a5:37:87:d5:08:a2:3c:d8:93:18:96:a5:01:ae:8e:52:d9:8a
Fingerprint (sha256): fa:46:53:a3:b3:50:ad:a7:32:c2:80:73:26:e5:7f:17:24:2e:e4:15:f8:e3:14:b1:3e:15:89:63:5a:d5:08:fa
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.gangolfsritt.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gangolfsritt.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.gangolfsritt.de
Other certificates including the domain name gangolfsritt.de
(limited to 100 certificates)
www.gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt-neudenau.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
gangolfsritt.de
www.gangolfsritt-neudenau.de
gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
www.gangolfsritt.de
gangolfsritt.de
Certificate
The complete raw certificate details for www.gangolfsritt.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISA0VdbPCYWdTwXVYhCa++Ds96MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MzAwOTA5MzRaFw0x OTEyMjkwOTA5MzRaMB4xHDAaBgNVBAMTE3d3dy5nYW5nb2xmc3JpdHQuZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vwjPlv+WmduecU44VYcAulFL HxYu6qIQ1eXBjsBL3+SnLs8Q421rDRh0ob/fxxoWRQ1utJZAj4ea4IgtPulMfxEx StLU7i8Sbsv63R3osStvKurLNIg3SOeMVWFfFD3mCQCHktNaW9M2JfL+DnSre/rP orQKaUHayFeFz9/bVTm+QUbs8sMSkGoJqXBfycfMFld5p5QekkD1lAtqd2U+CCxe zln0Dg/+R5mGl6BvZpe+qXTShtWt59z5uUOW1DSX1iQoF9SDAzOjqsYfFuBxXEjk lspRlZfUKugsSXRVWFlQHRA51qh9Rxvs8RxPZJ5xaYw9kgIRW13dGrIQ1m3hAgMB AAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLpRthyAaaAqTRchRo2Y SxiVoWi/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wHgYDVR0RBBcwFYITd3d3LmdhbmdvbGZzcml0dC5kZTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1 AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABbYGlkSsAAAQDAEYw RAIgc6W2zbMfNrgddvm/+Cw0slP0XXpkODD8JhzsNuh+a/sCIGRE97uaUDWIBfxv af9KJOtsogtOvZKk4gXwnztUCkeOAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFtgaWRWgAABAMARjBEAiB2NI6vaPZWDvfFiP/P1yTVd1P6Pa6v kYIbzGAZmwyqPgIgX0mYQYIuCUZ7mRof23uJX538XDzg1Wsn4KZWeuWJhdowDQYJ KoZIhvcNAQELBQADggEBAADsxpZ4tBMSKph1IHhxc3rBdV7zWYBwCxW64Is3wiz3 wpb5AXJdxwJ5mdHxAYWzNfknzHTpje/pl0IMk96diu7HwW8JKKpLEIdHcILWtFPT 8/fCg5RfwfOUG0NkgUxIjwL3liaOQ7/STkJLJLTg6EbGfOMuOHzqASBo1nl0unA4 WLEgKV9fCBRhfX+PLmAZU5xegn/urynMEwZH9Oa9JeUsLxPDz6Vp4E8+0CUUZrU2 CZbr3cGfo+ltRS5QojbG/A8sUEtjAk+sLQSBGyoeZFDN7WQaEbSfNUtYqtoQZ0o0 aZ4qCBB5/YoDSDB0eEynJCP4DztC/tmDc3hAotDS+4I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt78Iz5b/lpnbnnFOOFWH ALpRSx8WLuqiENXlwY7AS9/kpy7PEONtaw0YdKG/38caFkUNbrSWQI+HmuCILT7p TH8RMUrS1O4vEm7L+t0d6LErbyrqyzSIN0jnjFVhXxQ95gkAh5LTWlvTNiXy/g50 q3v6z6K0CmlB2shXhc/f21U5vkFG7PLDEpBqCalwX8nHzBZXeaeUHpJA9ZQLandl PggsXs5Z9A4P/keZhpegb2aXvql00obVrefc+blDltQ0l9YkKBfUgwMzo6rGHxbg cVxI5JbKUZWX1CroLEl0VVhZUB0QOdaofUcb7PEcT2SecWmMPZICEVtd3RqyENZt 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284940524964343000028215130184641898532730 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 09:09:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 09:09:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gangolfsritt.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23195812391070591779533244153525298664283619932941727226846102822490158437934045235493831655238929290991485399021832043978112656800839423830971728049226458644654450595984473509050742696976763183803753369579922056149716307992519062280228248900598732205279849224229633268827007919470487620443962131400415961488127570287070969833026906580519595426484269560412033302555801065726118736861769751030109252314702936394762628200995058546077199067012427367318001213537194011327992713295796838245182078896365121935051300406804437476098167894469738992727295483094765287856681646364191296251111462663759620313559992744911991893473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba51b61c8069a02a4d1721468d984b1895a168bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gangolfsritt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d81a5912b0000040300463044022073a5b6cdb31f36b81d76f9bff82c34b253f45d7a643830fc261cec36e87e6bfb02206444f7bb9a50358805fc6f69ff4a24eb6ca20b4ebd92a4e205f09f3b540a478e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d81a5915a0000040300463044022076348eaf68f6560ef7c588ffcfd724d57753fa3daeaf91821bcc60199b0caa3e02205f499841822e09467b991a1fdb7b895f9dfc5c3ce0d56b27e0a6567ae58985da . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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