DV SSL/TLS Certificate for kohlerundkollegen.de

Certificate has expired

Issued by Let's Encrypt (Let's Encrypt Authority X3)

About the kohlerundkollegen.de DV SSL/TLS Certificate

This certificate with serial number 03:b2:45:ae:20:80:05:fe:e8:ca:ec:42:b5:6f:c5:08:c6:c9 for kohlerundkollegen.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some minor issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for kohlerundkollegen.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 03:b2:45:ae:20:80:05:fe:e8:ca:ec:42:b5:6f:c5:08:c6:c9
Serial Number (int): 321999739957750498401808973941093106763465
Serial Number Length: 138 bits, 18 octets

Subject Key Identifier: 8a:90:94:ad:fd:83:65:d1:dc:22:c1:fc:11:a8:8d:1c:5d:13:8b:7b
Authority Key Identifier: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (SHA-1): 1f:7c:e4:55:a3:a2:13:77:a1:bb:96:ee:95:b8:4e:e4:17:3c:aa:bd
Fingerprint (SHA-256): 39:14:2c:1f:62:e6:8c:b4:94:24:a9:b8:2e:91:40:e3:88:43:54:55:75:88:fe:01:68:50:65:39:f3:d0:c4:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation Information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kohlerundkollegen.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for kohlerundkollegen.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for kohlerundkollegen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoTnPtjcQYtnQKJGip3u
9Mz3BRnpRir5O36uifY26bYotU69bMvaNC/0plwUQKduR+FwMRy2C+KTARNue8yJ
KFxHHeijyNPztxbyOIZ+6cw5Fgd3DQoDhnUTR9XSFcOc/eOyJcWAq3iFjLOBH2vX
W28Tervj6z4GYB7ZtATnM3KTVguY0elMqvpjZ8gu8YSkYOS/7tDjAPNhJnUtGCI0
rVLuT68fxjjcb89Cf9l2epHEIZ143YJK/pNV9dHuxpNrj4fi6sM7tk2rywq8jrsA
FR9Mn/vjNPQrqCkduKgsB8B5eup3MfYMhl+RQ2QMk8jbQdmJKFLhyDBanmLDPr3t
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321999739957750498401808973941093106763465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 09:40:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 09:40:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kohlerundkollegen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24050815004722488644653559369604072213238771311491920196688670726648607788178498215198410742037825964191337121119559382427294840746597441755282138919468940916003005450797128280740105622969267633487464484327615010375917945671922867204473910878472487077396082299688757936228571365882671379402591819562902258317813885686365280461984051281729531040903881134907690342477307852936807342711416811460256896586484213921594064055847375425942899767246292583691354746645966418117315552519709896365105474166156539649936787095592226970052652893321809295545154218480008607285663056865615229283713474216191077910590686241720903789903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a9094adfd8365d1dc22c1fc11a88d1c5d138b7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohlerundkollegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kohlerundkollegen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001742f81748b0000040300473045022100c53d34b0255ae34af2528269ee16c6ad52ceb171470da0974b7e2d97fc5887d202205727e27ce4ae6479466aced218e3fcb3c22ef2c0735fd5d130cc9fd2f618157800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001742f8174b90000040300473045022074570f5abd063aa01f81be33931af64e795e097fce93d215486812d58abc95c50221009120fe166b6ce494e96a83a0acaa4887b6b0c378fe88c01db4496aca74754d1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f78dbe840d0bc1aed195c7c682c88936caafe3414bb93434a486a3848415cdc5e4c8564cd3fc9ef2c3b0de69cfe7cc311bc3b63f011063a32df0a848545b37db2163d3ad2086431291371e9dc14d34bfc85ecad873f1f0933045648524586b1914ef2e5ab4d648a7a7504eaee2ffca0f4fc17341528510a2198fbf889a76189e11db3f4c4d619dc42a724d3517e2c8c8ccc4bc72dc8456f775c5d249f0e8f96f81e295090c342f07e6370347ff9db7f68fcb5597091d74214c55cd9dd590cc8aab3c367219d5d95196c162880be5adba0a52d310e1a6b24fde50fc4d68fa6e2e5c895ef99fa3941ca57cd28d2700f910f583a8f223686fa3a6675b00e46f024