www.lotharsblog.de

Issued by R3

About this certificate

This digital certificate with serial number 03:e4:99:b6:00:ef:90:0f:50:5e:7f:18:29:14:31:34:eb:dc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lotharsblog.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:99:b6:00:ef:90:0f:50:5e:7f:18:29:14:31:34:eb:dc
Serial Number (int): 339125554353618170272446999314296217070556
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:d6:ba:c0:86:02:eb:72:49:f5:7d:71:4d:1a:02:32:df:77:d5:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:a2:2c:5d:30:f2:3b:33:bf:df:c7:98:40:bb:60:bb:d1:e2:ca:86
Fingerprint (sha256): ff:4d:ff:10:d3:b9:b2:c0:f6:4f:b2:88:5d:10:38:2c:c3:5b:2d:e3:61:3d:88:c8:1e:3a:2f:40:7b:b1:51:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lotharsblog.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lotharsblog.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lotharsblog.de
www.lotharsblog.de

Other certificates including the domain name lotharsblog.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lotharsblog.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbusnFhjX81SC4ATtcoz
3xZqTIDMWOdpMvWku9fQQs5aXifonsU/F1Q7V406CCjpZeRqwSS2S2Z9p+79Q7Dh
xAZoSvUW8gRPR6dRufGIGP1l9eMT+Oge23xYzKANYpstrriyw8ceYbUhMAlnGKfu
bipJfsZq+8elfXpUs8qqseDxDJi0+dysCSrTGg0cp+93KVyLpRCAR1ZZ2M33xLRr
501fS2d10gYoVwUGuptHqhVEnIiqX1nV82UsaJvg3r+C0O9qQKe/hUDCHEJTkiVq
EhbnBqhn/skG4RqDpk20NItkPAosdCt/s7vhgFm70czHRLvAp6w0yx9Knp3K/vtz
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339125554353618170272446999314296217070556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 01:25:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 01:25:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lotharsblog.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21426819166407974274784390742192571336449222729315138352352046743798123300156052146519950052448688223898432662763946336854305740839046910436364531659668399698985614789705636689028532078534485977629409931385995284976141557007183351612341461739824610548470594872411335203699747567961161631711343605241699438136509617931404945202487623098690713172498125904308479782217671860360742915769243482984574496694004418353269538517367854488058916674834697233824680900550632178391919461703632042985097670126319154311399266582045684657256149294957488620628795645395657593393417984517656688603602301756752190727273975401350583514011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ad6bac08602eb7249f57d714d1a0232df77d595
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotharsblog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotharsblog.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a39f606d7000004030046304402204ad094efa3170151ef5db9883833908ca00b46f845a3fd09406e69915cf2e4f4022026aff3481fbece8f17b0b6a0f8140bcd96bbe4a70ff4b6595d3eb9a930305c8d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a39f606e7000004030047304502200545c2db40cc9f6183a8774deb09b5b72d3d29b4cc54114c2a3cc7afcb5d201a022100e6e91b2bd441683431554291717817cca6ebcacd962d329560054b4bbcc29de9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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