www.neukirchen.ooe.gv.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:ee:27:8a:20:2b:95:1d:a6:1d:1c:9b:9a:c8:6c:38:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.neukirchen.ooe.gv.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:ee:27:8a:20:2b:95:1d:a6:1d:1c:9b:9a:c8:6c:38:51
Serial Number (int): 284112055576158285994252344335285565012049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:27:fe:80:4d:71:44:9d:fb:d3:79:d2:ad:25:ba:3f:61:eb:d7:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:c0:e1:9a:6f:da:84:05:21:fa:83:c2:37:6d:e4:b0:5b:68:ad:b6
Fingerprint (sha256): 00:0e:78:6e:2a:da:1a:04:3c:d1:12:fc:06:1d:88:1a:4f:24:97:4f:a9:61:e8:70:d5:c1:de:aa:c7:c3:82:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.neukirchen.ooe.gv.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.neukirchen.ooe.gv.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.neukirchen.ooe.gv.at

Other certificates including the domain name ooe.gv.at

(limited to 100 certificates)
www.neukirchen.ooe.gv.at
www.hartkirchen.ooe.gv.at
www.schiedlberg.ooe.gv.at
www.piberbach.ooe.gv.at
www.st-florian-inn.at
sslvpn.ooe.gv.at
www.hallstatt.ooe.gv.at
lxli01-150.ooe.gv.at
test.doris.at
www.st-florian-inn.at
perg.at
confluence.ooe.gv.at
www.braunau.at
www.bad-hall.ooe.gv.at
www.mitterkirchen.at
mail.rossleithen.ooe.gv.at
mail.kirchdorf-krems.ooe.gv.at
www.bad-kreuzen.ooe.gv.at
mail.ried-traunkreis.ooe.gv.at
pw.ooe.gv.at
www.manning.ooe.gv.at
mail.scharnstein.ooe.gv.at
mail.st-wolfgang.ooe.gv.at
www.hallstatt.ooe.gv.at
mail.haslach.ooe.gv.at
sslvpn.ooe.gv.at
www.niederneukirchen.ooe.gv.at
www.mauerkirchen.ooe.gv.at
testcucm.ooe.gv.at
intranet.e-gov.ooe.gv.at
mail.stadtamt-badischl.at
UCLI01-002.voip.ooe.gv.at
mail.hinterstoder.ooe.gv.at
perg.at
www.st-georgen-attergau.ooe.gv.at
app.portal.ooe.gv.at
UCLI01-012.voip.ooe.gv.at
moa.ooe.gv.at
mail.regau.ooe.gv.at
remote.goldwoerth.ooe.gv.at
moaspss.ooe.gv.at
www.st-florian-inn.at
mail.hargelsberg.ooe.gv.at
www.hallstatt.ooe.gv.at
mail.windischgarsten.ooe.gv.at
www.gramastetten.ooe.gv.at
wahl.land-oberoesterreich.gv.at
autodiscover.testdom.ooe.gv.at
hartkirchen.riskommunal.net
service-t.ooe.gv.at
www.treubach.at
www.pfarrkirchen-muehlkreis.ooe.gv.at
mail.asten.ooe.gv.at
mail.gallspach.ooe.gv.at
www.gesundes-oberoesterreich.at
www.kematen-krems.ooe.gv.at
www.laakirchen.ooe.gv.at
www.mauerkirchen.ooe.gv.at
www.waldzell.ooe.gv.at
testwahl.land-oberoesterreich.gv.at
www.scharnstein.ooe.gv.at
www.braunau.at
www.pfarrkirchen-muehlkreis.ooe.gv.at
mitarbeiterportal.ooe.gv.at
www.alz.ooe.gv.at
x509.portal-t.ooe.gv.at
www.st-martin-innkreis.ooe.gv.at
asten.ooe.gv.at
mail.oberneukirchen.ooe.gv.at
zmon.ooe.gv.at
mail.ebensee.ooe.gv.at
x509.portal-e.ooe.gv.at
lxli02-024.ooe.gv.at
intranet.e-gov.ooe.gv.at
portal-t.ooe.gv.at
stzlog-t.ooe.gv.at
www.neukirchen.ooe.gv.at
www.pischelsdorf.ooe.gv.at
www.burgkirchen.ooe.gv.at
www.bad-hall.ooe.gv.at
www.land-oberoesterreich.gv.at
www.st-florian-inn.at
www.vorderstoder.ooe.gv.at
www.altheim.ooe.gv.at
www.st-florian-inn.at
www.gesundes-oberoesterreich.at
lxli02-106.ooe.gv.at
lxli01-150.ooe.gv.at
www.mitterkirchen.at
www.senftenbach.ooe.gv.at
e-gov.ooe.gv.at
www.st-martin-innkreis.ooe.gv.at
www.hargelsberg.ooe.gv.at
pvp-res.ooe.gv.at
mail.sierning.ooe.gv.at
www.neukirchen.ooe.gv.at
pw-p.ooe.gv.at
portal-verbund.ooe.gv.at
www.auerbach.ooe.gv.at
moaspss.ooe.gv.at

Certificate

The complete raw certificate details for www.neukirchen.ooe.gv.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArp4B+JZNGeK/B9tv/xS3
xQea2JScrZ4JHEOH5bfPFjWofSHBLrRiKXk2GROmbRRnzTQkSxUsdv8samkarVGX
KOoVJrEPl6osK1lnhl0lndcb49I9WB9QqRWP4y6AGGAB/5GDl0dVbDdR45FpmxTr
q0gBPVzpoK+tVvTiNxQKHf6b1r3sj5n22QjzZAOoJa5+sqHXXXkRcVFFVEaU9hMD
WWdpzbTd44o/tBZlnWLMrZKDSkP4Ar6r0xo7mH/hHFEQA/pxUiFBOewgQ+B5TuIy
bvWM6KNNDJOlMgUPmq16qdrCZwsym3dlm1LdrhdIvEvblLjFR5jaKBBrPLgrtigQ
8GcWGHmh6d6/hQH+gRrnH+7C2/rr6U3ZhGhSl/9WBm5qRaLZgF8ehxKxM58YHYzk
trH6gXK33H/IUWm0vGQZrjYZfBHSu5BBGeUM5tYNYCLWd6bCf61ysr5gMY7RFRmM
tLKrSHfj0bucX5qMLBGe+o8aqPkH3OFwtl3ekkue2JbjZOsZFnK6sivKbtsNj75C
ZOiT3ohCKJqu8W1hWZoMWNrtOtuT7iD1FnFIobYIXtD1cRzuCJFsIxX03CbIkTpc
bgG8rjgZEZegZxEs7CnNO4IGexUeOdimYByMkDag5uG9zOm1gcMB7ho29L0iUjdp
tFFYxkPvBGPRkmxSSNeRzlUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284112055576158285994252344335285565012049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 09:30:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 09:30:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.neukirchen.ooe.gv.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712376095857029950881471659655883298568149541920373106599960480556339076509739198945016371478794381032925113700777319945859480270662823856470229859252696178565017798787122337748020588722789493272854393758861797001482851165827719722425441384431686089167333558768949287480364197497802735952744093719691897758367222326928076035494363664160235243737679558009877183979046278183028198719810798101277258062028660888128528059008695329189714769487681389288465734246153681267495551083111933392220897506778200151362445648450006380948224031113735731909013858506828198257123536275874380730467106820952254809680633693096448547860539326802610330111932679808933760206012482676245362909198343221074509325932626165044255947370307103407814953326949481044744024520030396214668893230537956766324995081532549278945337935307400694608896618812267463954488743589442492196146741640455789778143801923485626947383643932523060519777505188199583864125897084435532623276151595928888964975847783983587939280844366681628008413203474020157366150210376569281256236594909650683412296657824200012925178650412768495248255333269261458401006688489937418466794103465815823021813162933849894473348008347083433468522025713986790082592996300017778142832824674103947834109840981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9827fe804d71449dfbd379d2ad25ba3f61ebd73d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neukirchen.ooe.gv.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dcef8043b00000403004730450220726619a4f1a31bf6fec682ffe6c7632fa65198e177e1e1796fbb975b23e10b26022100e65d5f0ddb839f2457bbae2556cab66b7ec136aab84d46f37a8f7db35e3a53a7007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dcef8062f0000040300483046022100b31f0910e9c07dd0a58fa9536fde80abf30569126e0087f91c58e2d8d75dde9b0221008427cf8fba6dd921db7de954079aceb6e0519820450f2ec74fe882b1082ebacf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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