zalman-it.de

Issued by R3

About this certificate

This digital certificate with serial number 03:bd:12:1c:5e:27:62:5b:a0:73:07:d7:55:b2:e3:45:d0:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zalman-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:bd:12:1c:5e:27:62:5b:a0:73:07:d7:55:b2:e3:45:d0:3e
Serial Number (int): 325674298541241118377561350300489100939326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:f4:2a:49:f3:7b:41:b8:cb:28:29:27:77:6d:c3:39:ee:65:7b:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:ed:de:55:93:cf:e8:bc:d7:ca:cb:17:74:84:73:b9:08:4b:52:4b
Fingerprint (sha256): fb:ac:26:a6:cb:74:50:72:13:d5:42:0a:fb:30:d6:94:b1:cb:0f:1e:51:68:ea:e6:c1:fd:7e:f6:c8:f0:9f:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zalman-it.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zalman-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zalman-it.de
zalman-it.de

Other certificates including the domain name zalman-it.de

(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de

Certificate

The complete raw certificate details for zalman-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325674298541241118377561350300489100939326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 18:27:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 18:27:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalman-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705662596590842180946534386116141196528028800109897805198529391673736053650099364883574433055717646709283621638555458910221903931464553310034169924485337643546858708788566742935350040132865806372233690396373895968313531898837091712439742980276978498517137612220838994608419826645386826579287421672598396689466603060101100931538077661215411674709737890935873792071217404799330395125318509944776428069647761632869606111006435545302624746368862949155001757777569436353272218142878437158568916502760682370309257833364606540676763771098871558383786292646716130772524998472665881818172347023448965038332192244584486622799197316888571206364090091978164423502441194707271063770332865743800020292991964225042003515643710157462246740676183966572665819207096440374285044543266642923203463520177971646043163601306776967685372138099257277338139256231463270075860291098462765439310553536931536844075344636239949584446588651733081945280058295049006217012113161296618914029215269711944708909611009625143595010771579447008777836852911028420976609542065913837722748660633192567588435291126112310705254303478011527937250231763393395856563840260756325650854397155437691129413779394440714569799671132955825003587494192429348790728738963566847683024883209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bf42a49f37b41b8cb282927776dc339ee657bff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalman-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalman-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ede143a9a0000040300483046022100e55e0f61bcac26bede4c469ae7ebd2f62b47e4328eff4a61a01988ec6264f3c002210086c51ef5e14e82c521e8109307aa58254d5e148fae5af88272bb15e0898fb92700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ede143af20000040300473045022061ccdeee3d5ce443854c3b80d76b071c4ef78976c3093e840c90cde68328ce7b022100de0d84db36de2c071266c5901e4e295b55f334a33d5690d9f89ea4e9833af881
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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