stammbaum.sontag.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:67:65:79:d1:03:e6:75:56:8b:70:4b:2e:65:e8:79:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stammbaum.sontag.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:67:65:79:d1:03:e6:75:56:8b:70:4b:2e:65:e8:79:f7
Serial Number (int): 322725121217329676785193390906757664504311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:7a:80:92:1b:54:4d:d6:fa:41:65:53:c4:bc:b4:71:47:22:f8:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:9a:f0:2b:44:6c:2c:96:de:53:31:2b:2c:2e:a6:74:46:96:fd:67
Fingerprint (sha256): 00:00:0b:9a:ce:c2:e2:08:e2:da:47:af:52:1a:6f:a0:58:4f:77:50:92:a6:ba:b5:d0:3f:e3:f7:e7:ad:18:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate stammbaum.sontag.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stammbaum.sontag.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stammbaum.sontag.at

Other certificates including the domain name sontag.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for stammbaum.sontag.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322725121217329676785193390906757664504311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-17 18:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-16 18:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stammbaum.sontag.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685835726815657312156017432807707576326392124282054447175668943699912641415276557511946966727287809739894876898888108260666836865030732491828402305155594741974659140393439326315492425344913759582583112194009156184175643795316688133833930361690979406736001749179864805812453757723631641945143609604111000555304012292114250546655964562019668004146872167817773323757435348565981272385079321151257311773599044087568738185208227892626385285699246112545972222166374551728358612774128099281819549929427796775822514105654560401210777997207791056014308389768461330452694055806102220512194024464812302051946918099513793305158780808117742560286184342484844729009084974300713186354174800285783382056362436513396511649912651249604273094379243464672292458055312380991207551737980503688446740439817406029231909240012417939084958805513077675659702332981721904285805905622825022070038273273863641992352106661163510846835072097853289990475504649146831575908526860051710864000592188717251477981190459042406613873675113476563119916223131124936612509716348852112527931546286210847825156652586209948338943118801475044192992857358070894405359457286273724764136453661895761645053976440409937712127573910984272023029830603477052274689016941298339305016763281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							527a80921b544dd6fa416553c4bcb4714722f86e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stammbaum.sontag.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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