kolumbien.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 03:ff:87:b2:14:85:09:52:ac:46:90:f1:c4:09:50:e2:66:59 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kolumbien.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:87:b2:14:85:09:52:ac:46:90:f1:c4:09:50:e2:66:59
Serial Number (int): 348289231784580253963177033151574333089369
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:5c:40:14:5d:0d:de:f2:98:40:10:c3:cc:d2:72:57:c8:66:cf:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:3f:5e:ba:46:25:0d:c7:52:dc:58:83:74:87:10:4a:87:07:db:56
Fingerprint (sha256): 03:d1:3b:bb:18:d6:35:26:6c:dd:49:48:36:52:d2:39:27:4a:98:70:b2:85:0f:36:3a:b6:ae:ba:5f:eb:d4:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kolumbien.ahk.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kolumbien.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahk-colombia.com
kolumbien.ahk.de
www.ahk-colombia.com
www.kolumbien.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for kolumbien.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348289231784580253963177033151574333089369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 13:58:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 13:58:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kolumbien.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896313459578285331846108476086176834667912172448834390449006929558523383773698674328990417869140770905112546750635548619258362139544978432886528384421785494234578300590225780137116705044612105340835904789496091521562386252713482118851506302439564494528484499314492818309135152351334542660852690039604718545911629510100225041183153310631567555819599128933217141218661264684228066960446750458951124886175452357984024109427858366413175054887987407390022471487841411820273414260366412142291361354549843535680375160333529575962573692513356961315915672767894300538696423984672350894485919861421505327692967671088660450799827592957209945596500893960418216207500828648215160707029018197682228166469699782126049174936190530724658203815000204048769092640144015607428134167606711741044011040907586602413447773103203465309324566730507618062270458342463013710667035332304046583977107586890392407099403175062388275073891897649459586059812420847762442481149571074867302670880158981175019667584187110773380377168251331372504654024179944924809571973428450258361309518935490492988286560013648350919718081607752802401667525537062579421051914533240818298361457540182895630287462265842421728653484527215574609750470843910014909595398172678536923752519911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d75c40145d0ddef2984010c3ccd27257c866cfe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahk-colombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolumbien.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahk-colombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kolumbien.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a1dc130580000040300483046022100e8653d0cfd94d957747895356af36795c434d67a5ec8a3819c9413f9a5cef717022100f261e63acc724e58ee5d4e7957968326298860cfb8b48a35710e574688989808007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a1dc1308c0000040300483046022100e64554faf4ba7a6a7a91f911818b63ff47e87ccdba5ca078c2fe35acd2415f2a0221009e265cf2846109b7a39feb55e6a5df0b7ef781b4d9cab8bbf2f4fb62356277fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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