saale.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:09:e2:43:46:b5:cd:6b:c0:41:10:54:68:83:d1:b1:0a:c3 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=saale.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:09:e2:43:46:b5:cd:6b:c0:41:10:54:68:83:d1:b1:0a:c3Serial Number (int): 264700153942678643292438870954591655103171
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1c:ee:52:9c:a2:1f:de:bb:0e:53:9b:9c:df:5b:67:81:29:8e:43:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 31:5f:9f:17:04:4c:f6:a8:3d:74:15:cc:b9:b7:64:d2:ed:c7:db:34
Fingerprint (sha256): fb:4d:57:38:4b:3a:ec:50:aa:06:7e:2c:53:5f:83:c4:80:0b:6a:6b:19:2a:d2:1f:7e:36:82:fb:6c:c3:77:6e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate saale.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saale.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saale.org
Other certificates including the domain name saale.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for saale.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAwniQ0a1zWvAQRBUaIPRsQrDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYyMzUwNTFaFw0x OTEwMjQyMzUwNTFaMBQxEjAQBgNVBAMTCXNhYWxlLm9yZzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMQqUcYV/84XBSnLITyfVrn644mQDGZKZ0uGP0ok a23D5MN/bMeHwtRKW8+avimSEmS7fvcnEWnSDb6y0jn3RPBacJ+I9jzOa6YAL4w9 pQdi1RUflfogR3lHI3cu+qrZcLgyMPFBg6lRE4DgaBVEl7OFkaGA+BNQIPVY06RA SuKXRkWFVSqaWu1LLdTQfX+Cu/r+ODL6aE5j65rjdToC15N+f6uPDx5jJz7Zji9D DaXNXFEJAmGRn81qE0dP6t3tdLkBiWMffgDSxnzl1G/RLbvqyLUeiZZpTOYejg6N 5i2TqAEE49gdQFiNUo/m18Qrov0kiRGgkRnaZNDFO4H6kMfJGtHgpQdsX2nfyVDU KQIRIfL4Ooikp1FVswG851ACKAhfwB4nfMyTuVLpEfcDci+0gdqclH0UJ59iJRS9 oTqrHAkn8t3wRCyK2FMmv/Y7yCSQQAAfxjS194viyJBU2jsAJ+hKyrtJf8a4PZeJ eTPS8UP6JJdmN2dNko0CANsP0OH9vBaJLP42G+D3xhKOsmjFDcSYO/Ous1Yw0FOb A+diHCyw2UhT71UnKYXOmYlAMaFnU3yph8AjHCbGo5vQFhfRrI+67OIA/tSuzbwm TYt95lUU68r6Z8dWAEdnWCcZsTvxOWlYNKl+/UHDHd5s3OvQGb9gH950vEoPSU9u UwatAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBzuUpyiH967 DlObnN9bZ4EpjkNCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJc2FhbGUub3JnMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsMOiw8wAABAMASDBGAiEA jHZDlZCvqbhq1uvGQ0iVsv83wP7GD0UF7C84DefYU4YCIQCoxjfMrH5RfcA0wvVy Q4NHaX/QjpRZyoozrfhDIcH7XgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM 9OVFR/R4AAABbDDosOEAAAQDAEcwRQIhAK93RQ/vSag53CElofv84usVV1m+Fv3c outi1zL8XOD+AiAu92Tb2UyuoXaBuulyZsqdpDgLRJ0+lyFj30XKjbiKOzANBgkq hkiG9w0BAQsFAAOCAQEANKEKcuGA/dXVY9pQuu8qmaEUbtVx/If7eioJ1SHtFIz3 l//tjWYTxbGMdK4ISMeGHfcEVIcOanq6UIesny6HcpGyst/Lc7HpUplxvvRyx4nI qBz74M2JWomfFmvUoEjPqJRvWDHmdmlp9EexTx1qhSVYRld2VFv96nHHPPVCfhVR 90sFKUqcBBUpP6i95Q3auZX7XrgwCY7kHadv0oZbRyGQ9NmexJgNWaS0aZf+lldn oAcO01H/V/LKMKhPUZ/oOlJi9u3uUVxRKsfmwxANu/cQakgAmK1qkFwUxYVhwawh DvWD6/drP3WuKTJ3mOZEi9GPj6/L6STyslgYs/A82A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxCpRxhX/zhcFKcshPJ9W ufrjiZAMZkpnS4Y/SiRrbcPkw39sx4fC1Epbz5q+KZISZLt+9ycRadINvrLSOfdE 8Fpwn4j2PM5rpgAvjD2lB2LVFR+V+iBHeUcjdy76qtlwuDIw8UGDqVETgOBoFUSX s4WRoYD4E1Ag9VjTpEBK4pdGRYVVKppa7Ust1NB9f4K7+v44MvpoTmPrmuN1OgLX k35/q48PHmMnPtmOL0MNpc1cUQkCYZGfzWoTR0/q3e10uQGJYx9+ANLGfOXUb9Et u+rItR6JlmlM5h6ODo3mLZOoAQTj2B1AWI1Sj+bXxCui/SSJEaCRGdpk0MU7gfqQ x8ka0eClB2xfad/JUNQpAhEh8vg6iKSnUVWzAbznUAIoCF/AHid8zJO5UukR9wNy L7SB2pyUfRQnn2IlFL2hOqscCSfy3fBELIrYUya/9jvIJJBAAB/GNLX3i+LIkFTa OwAn6ErKu0l/xrg9l4l5M9LxQ/okl2Y3Z02SjQIA2w/Q4f28Foks/jYb4PfGEo6y aMUNxJg7866zVjDQU5sD52IcLLDZSFPvVScphc6ZiUAxoWdTfKmHwCMcJsajm9AW F9Gsj7rs4gD+1K7NvCZNi33mVRTryvpnx1YAR2dYJxmxO/E5aVg0qX79QcMd3mzc 69AZv2Af3nS8Sg9JT25TBq0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264700153942678643292438870954591655103171 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:50:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 23:50:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saale.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800284644389257401809743450282720035428145184454405186352529777159845137022449685707598035469580644288102590000379623026714513984223964190582979984102954260826990976317627027991256860617459847383309146763836145843685119809676113352574776198833196379029410595101414691716350184652962918991110455937578341956455996352478263343059462988733709451595519454961304403357447752058300904952231870469656508932689209271282639447683857438640651153074379758205141229612175543470763780136910707926867369070273572415887025304701416694675503154404943747531420566338330682356377483620369714961448309236017008277931153764222818560203572244706155519747940995073281366715676749217590770040286536193241797007514421994471702175825962218416404378140330965696099887975083577951053031203824044108362651385130435443582370347798917048204638052809203938881651163475095971743482839326929307337075851523028949245525056934812283422641629709025709855329493047824842341880868180306326094493562187466980005250325850136001259639862157484991135701948999164112998609803892054222054742774393053312085954380038300948746192536410965351516852559448765405209812696831443786161279865691853935416803689283066458943016218998167655859725525134065137862667377792467738975802689197 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1cee529ca21fdebb0e539b9cdf5b6781298e4342 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saale.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c30e8b0f300000403004830460221008c76439590afa9b86ad6ebc6434895b2ff37c0fec60f4505ec2f380de7d85386022100a8c637ccac7e517dc034c2f572438347697fd08e9459ca8a33adf84321c1fb5e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c30e8b0e10000040300473045022100af77450fef49a839dc2125a1fbfce2eb155759be16fddca2eb62d732fc5ce0fe02202ef764dbd94caea17681bae97266ca9da4380b449d3e972163df45ca8db88a3b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0034a10a72e180fdd5d563da50baef2a99a1146ed571fc87fb7a2a09d521ed148cf797ffed8d6613c5b18c74ae0848c7861df70454870e6a7aba5087ac9f2e877291b2b2dfcb73b1e9529971bef472c789c8a81cfbe0cd895a899f166bd4a048cfa8946f5831e6766969f447b14f1d6a852558465776545bfdea71c73cf5427e1551f74b05294a9c0415293fa8bde50ddab995fb5eb830098ee41da76fd2865b472190f4d99ec4980d59a4b46997fe965767a0070ed351ff57f2ca30a84f519fe83a5262f6edee515c512ac7e6c3100dbbf7106a480098ad6a905c14c58561c1ac210ef583ebf76b3f75ae29327798e6448bd18f8fafcbe924f2b25818b3f03cd8