hommage-leipzig.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:be:4c:20:0a:76:11:0e:6c:d6:74:8b:fe:a4:a5:13:66 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hommage-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:be:4c:20:0a:76:11:0e:6c:d6:74:8b:fe:a4:a5:13:66
Serial Number (int): 340535315504564774919140880450278352294758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:76:8a:c9:ad:54:6c:18:3b:06:17:66:fa:88:6e:3a:fc:87:3e:f6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:f9:23:48:c8:fe:bc:9e:e9:f6:73:e4:a6:5c:57:7b:b1:f6:8f:a3
Fingerprint (sha256): fa:bd:68:74:14:a3:92:94:b2:dd:f5:36:27:3f:c5:63:ac:68:98:2b:0a:c7:bf:a8:1f:ad:43:78:6c:55:a2:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hommage-leipzig.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hommage-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hommage-leipzig.de
hommage.isp-vhost04.domservice.de
www.hommage-leipzig.de

Other certificates including the domain name hommage-leipzig.de

(limited to 100 certificates)
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de
hommage-leipzig.de

Certificate

The complete raw certificate details for hommage-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsCMi/I8Td1yGQgabHjFC
4EYH9ckqmJOmDbbrxQk38wjxqL8XHi5ZHUkefom0ASJ2HsBwgVAZYJKayJcCn5JA
qS7l9xPDgvVbrndQiG9SavUvadaG9PFi1puWomeUY8mXdKgjlEl1DmzFAHbrGPIX
xggGl7K2JdsOA76Hyscu0BRikxYkvnJwhpaQ6aAs+SbNKtq39nCaKkUYRecQ3u+o
pA2RNBDjb11RgmbnZInmnTQQ19Bi+2j6lGSkGhtXpa7k+YGfFofiETGHB/lmQFO8
WldQ+mUx/mPgpv8hi+5T6j7QxDEtraCfzv7O64wHyDcspztZVo7vwF9xxfkiDPa4
/YcrcvGoN8b0K5bOD2nuay14BT1xeLgKrseKCDk+jSlWLG8HowxAxcaYuOtZfnf3
IwYiV4fo/3KRTustne7F+dUfjf2uRpmxyh4bvUPT7CbDzc3+XBfUEdOhU/SvONtK
AY33/XHCVcBMLz/sQ+Kww/tOFPwAxbEPRau5Mr8CcsSYEUESy15ecQ92a0LekUHO
nk8+AUAGd3VTcgn5e8skG7j4vAcSyJDKk3X62aGLIJ3GtLkKxGkw+Km2EdGFZcd/
h5ucJaCLuhnun+9hAdGOF8+zWId9jHK5bti0FsPnZR3VercniM9kNW4a4dwO75hW
j0NX0u+0UcSwKDGTe1PWapMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340535315504564774919140880450278352294758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 01:12:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 01:12:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hommage-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718577297737197061032562478161519091670553562993802986791077518825193851613694246789453070107159337471046478639565321362989405781576775598960897169587511890819372556481881660575062613626999910625885089744005122357764734830582521411762307487381644466318842312828083258203923992111082778056648711454524253779808457677490486499254277697946424491163964141339773548584428692550380925160573168148230058149045244363244041452233638409604893306702925632366657258934127648134612489992419788767346034283901698011245668861586461714869581052513235080742570988839924743128053098261141833837249076733789217650113947636138737024602913230042815523005897791747997985072310763998802228776501897862195289222802485112752979438645641878654890422842620636546124348013463144659933217684184302055536081757295270484726996555215603057332582239080659395914077118747467678550602849772299704301402739720626432318299017474509348041934349270714612749661629864710931466713699418853666328463187846770454323879012988160977917536002256887180452285143409677125765702891112243070230645938226440499667277648975515351994920333277221788050159677001679138791727510057529306307918829081339421459896560192076112931363766113182350490576562432697330473003769017428964194131536531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32768ac9ad546c183b061766fa886e3afc873ef6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommage.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hommage-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170b7ea06cd0000040300483046022100b08134f12180b6b856a328dddd69d128e362a28d6d0937c0fc022b2aa3765736022100e3511654ad0c2276039b742b12c961f4f9bcdf24f338df561260264ec40ea8d2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b7ea06e30000040300483046022100bd0a978ccba340680c637455ed7ef35261e45b42afbc820012ff86dad3ee95ba022100c22b4c04731b28f0b67fcfecf2179f9fce1fe6d7822e70e4465a4399a5aea167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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