offenbach.ihk.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:3f:dc:c7:5b:c3:14:8f:b0:51:8f:74:b2:7c:26:13:e4 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=offenbach.ihk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:3f:dc:c7:5b:c3:14:8f:b0:51:8f:74:b2:7c:26:13:e4
Serial Number (int): 340367254633451439174908758704939457713124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:f9:ff:36:b1:f1:00:62:94:05:db:1b:0e:60:69:48:5c:97:10:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:39:ed:a3:10:65:c8:57:4a:05:56:3a:01:53:1d:63:86:c1:a6:39
Fingerprint (sha256): 02:ef:18:40:53:96:fe:e2:f4:95:66:58:59:42:89:4d:f5:f7:f3:68:b2:7f:be:f1:ec:97:3e:1b:c6:4e:96:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate offenbach.ihk.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offenbach.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ihkof.de
ihkoff.de
offenbach.ihk.de
www.ihkof.de
www.ihkoff.de
www.offenbach.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for offenbach.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4402afsCHu5JJ8hZN73h
dSz8eHuhDu2r/ipo+VgEne2+uZ+4gaOrHHzBCqSFkoJ7FcAE8DqtKUasak5QHWq9
ebt9Rdm4dXTuK0tsWMUJ6DrarTliGxkK/z/MtlzD64avJjVRCF1ii659MeAaFKOi
crKZy0A1XEN0EQ6UaN0ycJQknLIUa4Lrq0wfK8QxjKQP9FbrodZOhIm9jAOcZMdM
cc7Ls1wjP5p5pmRNdsZRf6vEy+fMOAXwqp6DYotCcbs0xZI9oBgRoOXiKkKfSl0n
M7WeNvaQtFJZJVV++kJra14BBhaKDsN/nUKAVerN6oiWKDX7dkRvre1urQLKWlw1
HldO4X1kSqERsOXCtasTsDLm3ZDRisMrzb+47mYUdQwvxmqw8gK3RncLRjfQT1nP
aB2vfCDPRlLzODkZ05RF28pm/im8DTx/z61f4eH8S2oYs5X+UrRml1WxwpC0stJT
OavXOWlza+Vo8Z3/ZseoFQGdzIcDVQM9cf7+1IjY0d1pHBcIxErRRU8tHWmQLFVF
obZ0sdBwt2qXNJE4hBigXbfj7kzJKkGbRuDMB/3SR0o2ASf3jN827qSUlRxJHJl9
cE5mPZttBJsr0S/PvZdPSoXXYU+TjoVvHOH/tBjMgkzCARL/Ry4egOm9QVrCvpCe
cb2T1JUWCewZ3eOpzhFtrR8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340367254633451439174908758704939457713124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 20:05:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 20:05:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offenbach.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 928329582193861870482329895985774263087125522109949011098161166621645078458953427487091493955870880396116239087794571871089360961420014299182340109782522903675675047327995940345352035576973026320210489992395588225643531054048311193689295291140172753647060500111764066372562011049786599987763115719407822266918641453850937014284964949951035949258498591881939136327816834768045003053897903733253365638978996560084445958302136739598100139217914633750452466154208731297325405956178731583446095867716287250796449022100233867276319383692890273865287518122047189644723790779593080841955211837114368196989139169413592914830352459159280921412597090528286891503766303433491897036172526915121140413476330996987294381558634572539179940214956383135635935796136323908536615984427450732021631364121863084633301305072163865486190735072658393301401587392051411069320508097391667245674427239772581115557351754193706274391682467955483418482142395537013246542259326007844518372762915111119408834293243287190639091814756241519393963145130181070046651952377265029477261278709780672319152321034846627769279725477328203920049215992174714163337425877709416500464946939352547567886069766701530419609687630613623775094968200446729486936939832413267616380857631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50f9ff36b1f100629405db1b0e6069485c9710fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihkof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihkoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offenbach.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihkof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihkoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offenbach.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0fb6812e0000040300473045022041782fda13fa3ffbb57912d74db2b1e0c3278bd26ac11d2ca59617079a5e6f55022100ecba356d8f4beca5f3d53d9bf3f2cd5fd395defaea38140348be8b06697d0141007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b0fb681200000040300473045022017659150f7e2108f7904eb0e96591b88d0210a0c0a55f4c1d22b3136ed899ec0022100ffef10693bfd25bcf9ea66f2e17d8bd69c50f1a3f03b8eed49ebe0f791963588
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007406cd16a5d83f5084e5de40c613dfae229f0b9293c72c659aca8e043215c3565eb85ac9c6ea63d6ac7540c20aa6030fdf9cce57fac09ce76abbffc268aa8a5d0e7b3a651e893ad83809b5a2551921924f9ec5b94c7074f43c3dba59b3ecb8dc26f1d79acfaebb010fea767c5365c599f5204628b0fec1d9499a13e1554444e08476e8d8c35ab777e8c4688f0ece35aab5036c6d06bea27c3c68eab849a69948b8270e46091e5c3c37655adabf5e7d5d7a05494654ebbccfbb9bd31baa64c87a93df3741ac71cb313b9478e87efd9c30c4659d93aba21587ba64a916c2fbb90c10b7aebd307bfb05ed3c85a9a61a74a7a5d221a2cad4e2cc19d9938936439962