smarthome.daswing.de

Issued by R3

About this certificate

This digital certificate with serial number 04:7d:84:ec:be:63:f9:b6:88:d8:34:35:51:c1:51:ac:e6:61 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=smarthome.daswing.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:84:ec:be:63:f9:b6:88:d8:34:35:51:c1:51:ac:e6:61
Serial Number (int): 391161126931239212854865394817700729775713
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:fa:0c:b5:96:05:d5:53:4e:80:d3:f8:e8:73:ae:1b:aa:aa:c0:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:d2:9e:26:b3:78:08:9c:86:68:3d:fd:13:36:b3:de:18:fe:13:a8
Fingerprint (sha256): fa:f2:60:6a:2e:aa:09:40:89:9c:2b:21:ac:da:e4:42:d5:38:5c:ed:24:2a:28:14:04:12:16:ca:1c:7d:02:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate smarthome.daswing.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smarthome.daswing.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smarthome.daswing.de

Other certificates including the domain name daswing.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for smarthome.daswing.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391161126931239212854865394817700729775713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 12:59:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 12:59:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smarthome.daswing.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 625760907156933163576703085519302532409981205767492084171390334824078727405120434540793030636492683171547553900687269496737399875827187003704247511079240238516518723454084319745012601624350345090830565608321776854590414546891082661022260512602023743533067453055189618892178967793482720015275239192068508905982244892925580724098386651437093011456693402617998465721806048740240737976742838973455835974224485174727080559589118268467557259311080515744336764184117061850512505894740324759462493046182679786456079376726961801538707455183547200102088588216630234282223573287169152171747017118567786173485738123979063093095405776007224825524482099239401706568747080148305481156826582949226230065255257632433399656202646239066736346199600459597486208282996246494097891063052569096904694602784212925211047278175632406473172694943483817249865677671218574543960354387918448037414864908066117499631773603379390403385282846427336731243917333535554355907621603116747471599470127965213959470761602887236329564489958766763568579279429371341362949535134346831874697382647572631693712470318553751595026109725501056673026835667590452629824219439415573941959028823568602739833423388992658833996626326034747567150528759626803340884055052121083814568607643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dafa0cb59605d5534e80d3f8e873ae1baaaac0bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarthome.daswing.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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