DV SSL/TLS Certificate for petra-haase.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the petra-haase.de DV SSL/TLS Certificate

This certificate with serial number 06:ea:4a:68:32:4c:ca:72:cf:28:ea:cd:2a:6b:fe:69:eb:83 for petra-haase.de was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for petra-haase.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:ea:4a:68:32:4c:ca:72:cf:28:ea:cd:2a:6b:fe:69:eb:83
Serial Number (int): 602398693340826927028320913617372305812355
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ac:ec:3f:d5:4c:3c:e4:1b:f3:87:46:15:e7:1e:f9:b9:89:e2:6b:07
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 8c:1a:15:6c:45:9c:e9:aa:dc:fc:30:3e:44:de:50:59:29:37:cc:e4
Fingerprint (SHA-256): 15:41:7a:33:6a:f4:09:b0:66:a3:c4:56:22:a7:fe:6f:ec:cb:a7:2d:52:01:61:cc:9c:42:d0:c4:4a:07:de:e5

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/4.crl

Check the revocation status for certificate petra-haase.de
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for petra-haase.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for petra-haase.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvIHrLdIkSVUXMdRMqNL5
mnbikeOUQ7ylaYFpkkRTjI+LYM68oqRpZcq/GNfgzjHmGGo/R0JxTW2tYVrKhf0L
I1Bw5Sndt0q7CjvYtQCtdczECGfNgU5NbzvhMgdicfLNBu3EQ94Zstf8uKeYuSkm
dZ/NuRMPqj5xvvojQZbeniPOyvrl1+l6VjRUGyO1jG7RN03NpM/EwAzYyitR1RF8
uvikygVo0Vg3vTtiHLoVw2YVObMmxbi8wa6KKuUZi9u678m5Up4VOdXeSGpSxUoi
8WjND2r+a9++NrR3g1+XgPX3ldfXPYqjtyl36VuxMuufnl205xeD3/rqnhpKaf2Z
TNlu7tcTNHqiT3hPN4J6pUJWj7sTsDlc3hga0m/Vpo/uNqMR+CAcF+8nBdOH3/jY
IbO5hG6birDjBMdL63PSeafj4cq9RA6zQ7uB/fYUeiTcvVN5y0uoejqF6zhcwHjj
WfJLfQgY3vKJ5sczjG05bZ0QschCeYv9J50KjO5KQhqp2eNspa12ylMnycIj2Bn9
zVGdLEGEeTY5ndZVmugca6WlRaQETNqIqxS3xSl8Z2kxJFxqTDagihqYnT+5wLQC
3sMHhRlyK3e8z8DLOrcYvdABWOfo15pEYxFwCH3oKnvcc+bgzt9jXGAG320nHH9+
oOn5xG5+FvPzy3wt2DCTPaUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 602398693340826927028320913617372305812355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 04:38:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-24 04:38:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petra-haase.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769043482924146005844036776679509914776111238879412697659573516159533576143206129022233941769579391219616347063811729646592318224801668882723617256385047734380894878848805071537658650673147723903126326775300955730858818972246598674881958355946310053943733648054228712335302948671704000335664922091661693835182025005701764635374457899785417991710296757878889999103371527876344870178147608478776445399128618023653642212102357277088065417478943317412508832085110893878158598591582798453343863981014187052348400700329637346744523151292503530636025663754446668916726663549254019099277243760972188958120361028302958892564853437859880524870076371296671133258984152898031043470097893583885906354391655062211668008384284313778680403471184834438270958222728872933127500313769129975578189355903121921401804714559912287134604474363699159629112598067225591545490386566768459829257178409350238217476183638434227338563956059078680853905830844669359583819562566097231706106316765275976591368466819764681508344738012217013132123739884118566891354103535926530449975148000352972743222239928902082737396316126091515364414351776351683427032589559082752816778857403393510058632956012297446771855185760235660843745400674151730634940191258090320233745300901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acec3fd54c3ce41bf3874615e71ef9b989e26b07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petra-haase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steltec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petra-haase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steltec.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001966b7314320000040300473045022015c633cdfb8d982d362d0c03ab87c587198009ac98161ffc1e9fb00b4abbd172022100d7a617bdb053d112210e73f3ce3c9467414529efae8ff1bca39c24d6d90804be007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001966b7314770000040300473045022100fc0c882b4dff4e6393cc1b2df933173f00d8863fbd1eec1b785b81b4ebeab04b02206342b792c7fe2d8d25f31edf56c3fe20a3beec443879dba892d3daa21bdfe062
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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