concerto-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:99:fa:98:3f:69:f3:f2:8c:d3:38:43:32:43:e7:b8:a6:1c was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=concerto-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:99:fa:98:3f:69:f3:f2:8c:d3:38:43:32:43:e7:b8:a6:1c
Serial Number (int): 400845443380199557934932951836322499700252
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:b9:ac:b8:1d:dd:f7:c7:25:cd:7d:65:2e:8f:d5:d0:f4:56:b5:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:ed:b7:b8:ba:ff:84:32:67:6b:3f:e4:be:c4:2f:2c:2e:3f:8d:b5
Fingerprint (sha256): 04:47:47:3c:e2:26:4d:ec:06:b8:08:2c:6a:1e:1c:b1:d8:f4:86:f1:33:1d:59:c6:20:c7:23:c6:6b:b3:01:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerto-magazin.de

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerto-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de

Other certificates including the domain name concerto-magazin.de

(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de

Certificate

The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0wUkfwDmylHMk/oZ0xzE
8Q0oSYbBI+dDGWUpCDLhRnZPLOEy3VU+aUm3JZ6a4Z2g6fsuPBl9s6GrUpKTEtqM
eJ/Et+LjEijgY5n+C32lR170EfrWEB7HkVaYwVhb62JoszTPNCTBS8XmpLrKycRl
JZ4+GcsldnKMcGSh61/RCM2jYFh06ZRuv55MWm1q7CpXaIKGKIQnbFg8BaZzRBJS
Ml/GpwkfV0gRCeBE5Kev93IKy7kQH0QglgEKCImf+fd/DjVHRffkhM+qyp8TkOLM
M0OyRB1TAB0I9lXzbUBIzsR9YmXg+/Fk+/HalslOsEHr+U+XcHzmHLNNYecAtCzD
ixdee0EDQ2Ft3P41Lj1Psslnhg48kDrDw10XRUebEoinGPMHTkRbastqm/Mr4zpm
dKvL+jyXFOpGvc6hiEKN5ckaw+s6xubp4PdmK+hS2hLngAruJNotpX9RQVobx9Cg
OVT7N7TWAckqzT+fyPOh75CeVZdi4llxhctR3flvVg63OFIU/P49qlj89VNpZ8RN
RYju91AKOMiNXx7miEl2zkdIb2sw6hSBnsNLPNXlERhDCFkVvhAZjduSZEXBo/Xe
ZJelgHbSDRQzeR9kOm3n390DLmPgZCgkBdA9S05BmLA92bYIx3tGOxQ4aqE/0LFm
RqI++aq8/slg11Dn7c+ycNMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400845443380199557934932951836322499700252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 09:29:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 09:29:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860886850798773268944695409629523171122006835834974756261381156350876052423856135032657041494073653248081756549987457053516008888018222556945097545417156456220271311663926878462736465316081834853889523787574770932091383679390877226712524701543964071336930727775807402389965770480090800717495980720206456834158033712346920070351360816011685019788313899886894372217007864551359739142419590018166097863505121147798135890272394978938622339785288371927766105012416828237327681939880441871486565657307961748222967764981802133883745353184329999987770194640332078413292129901059650644312662812025920912918831780872701386979235056457474402250246806526239836957865297071163013421965813404315013918794307699887627585870560384922693038813936013986912776662825153170006590649836186096888969415810800240490243292244663407699471831913940945463407073906769761881622679517203547525734256897480774769870452666319447249211230713217113453390204854932419037335520256019318475567843934013346230537294823860265870089663726209945681392626874564076053065123111453559400481446685384633514021707691884966046921429447397573209459142974331486225071918535551131212793837814993751724986211391054653752553932140084022666275990333463829433625129268175410053541687507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfb9acb81dddf7c725cd7d652e8fd5d0f456b5c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc60ff7b60000040300483046022100a126f8c36a53ae81fec06c29b1572754b178f93185072b18984488b4b2a1cb610221008fef4bf0a60874e594852c9ce3a3299a0164da26976db23ecedb1cade05aa01d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc60ff829000004030047304502207774e6805fe9e6ddb81f0a5bab82ede76b1644e81b68841f1b461a7da37e441d022100ef6a3ed68c571abd7c3a2a93027303c84d17094cce25906412eef6fdc525b275
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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