saale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:e2:43:46:b5:cd:6b:c0:41:10:54:68:83:d1:b1:0a:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:e2:43:46:b5:cd:6b:c0:41:10:54:68:83:d1:b1:0a:c3
Serial Number (int): 264700153942678643292438870954591655103171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:ee:52:9c:a2:1f:de:bb:0e:53:9b:9c:df:5b:67:81:29:8e:43:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:5f:9f:17:04:4c:f6:a8:3d:74:15:cc:b9:b7:64:d2:ed:c7:db:34
Fingerprint (sha256): fb:4d:57:38:4b:3a:ec:50:aa:06:7e:2c:53:5f:83:c4:80:0b:6a:6b:19:2a:d2:1f:7e:36:82:fb:6c:c3:77:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate saale.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saale.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saale.org

Other certificates including the domain name saale.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for saale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxCpRxhX/zhcFKcshPJ9W
ufrjiZAMZkpnS4Y/SiRrbcPkw39sx4fC1Epbz5q+KZISZLt+9ycRadINvrLSOfdE
8Fpwn4j2PM5rpgAvjD2lB2LVFR+V+iBHeUcjdy76qtlwuDIw8UGDqVETgOBoFUSX
s4WRoYD4E1Ag9VjTpEBK4pdGRYVVKppa7Ust1NB9f4K7+v44MvpoTmPrmuN1OgLX
k35/q48PHmMnPtmOL0MNpc1cUQkCYZGfzWoTR0/q3e10uQGJYx9+ANLGfOXUb9Et
u+rItR6JlmlM5h6ODo3mLZOoAQTj2B1AWI1Sj+bXxCui/SSJEaCRGdpk0MU7gfqQ
x8ka0eClB2xfad/JUNQpAhEh8vg6iKSnUVWzAbznUAIoCF/AHid8zJO5UukR9wNy
L7SB2pyUfRQnn2IlFL2hOqscCSfy3fBELIrYUya/9jvIJJBAAB/GNLX3i+LIkFTa
OwAn6ErKu0l/xrg9l4l5M9LxQ/okl2Y3Z02SjQIA2w/Q4f28Foks/jYb4PfGEo6y
aMUNxJg7866zVjDQU5sD52IcLLDZSFPvVScphc6ZiUAxoWdTfKmHwCMcJsajm9AW
F9Gsj7rs4gD+1K7NvCZNi33mVRTryvpnx1YAR2dYJxmxO/E5aVg0qX79QcMd3mzc
69AZv2Af3nS8Sg9JT25TBq0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264700153942678643292438870954591655103171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:50:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 23:50:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800284644389257401809743450282720035428145184454405186352529777159845137022449685707598035469580644288102590000379623026714513984223964190582979984102954260826990976317627027991256860617459847383309146763836145843685119809676113352574776198833196379029410595101414691716350184652962918991110455937578341956455996352478263343059462988733709451595519454961304403357447752058300904952231870469656508932689209271282639447683857438640651153074379758205141229612175543470763780136910707926867369070273572415887025304701416694675503154404943747531420566338330682356377483620369714961448309236017008277931153764222818560203572244706155519747940995073281366715676749217590770040286536193241797007514421994471702175825962218416404378140330965696099887975083577951053031203824044108362651385130435443582370347798917048204638052809203938881651163475095971743482839326929307337075851523028949245525056934812283422641629709025709855329493047824842341880868180306326094493562187466980005250325850136001259639862157484991135701948999164112998609803892054222054742774393053312085954380038300948746192536410965351516852559448765405209812696831443786161279865691853935416803689283066458943016218998167655859725525134065137862667377792467738975802689197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cee529ca21fdebb0e539b9cdf5b6781298e4342
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saale.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c30e8b0f300000403004830460221008c76439590afa9b86ad6ebc6434895b2ff37c0fec60f4505ec2f380de7d85386022100a8c637ccac7e517dc034c2f572438347697fd08e9459ca8a33adf84321c1fb5e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c30e8b0e10000040300473045022100af77450fef49a839dc2125a1fbfce2eb155759be16fddca2eb62d732fc5ce0fe02202ef764dbd94caea17681bae97266ca9da4380b449d3e972163df45ca8db88a3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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