ostwestfalen.ihk.de

Issued by R3

About this certificate

This digital certificate with serial number 03:fa:4a:59:81:f1:4d:76:c5:20:ec:aa:3b:89:dc:7f:95:f7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ostwestfalen.ihk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:4a:59:81:f1:4d:76:c5:20:ec:aa:3b:89:dc:7f:95:f7
Serial Number (int): 346506277147172649146888865892029117208055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:5a:40:aa:26:f3:30:4b:d8:93:d7:82:89:4c:55:82:18:86:d6:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:63:5c:c4:dd:fa:eb:61:82:20:09:17:74:99:b2:ff:c5:f1:e4:97
Fingerprint (sha256): 04:6e:5e:11:9d:da:81:e1:2a:49:cb:20:ad:07:95:be:ac:45:71:e5:fd:01:0b:4b:d2:1c:45:aa:b2:b9:c6:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ostwestfalen.ihk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ostwestfalen.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ostwestfalen.ihk.de
www.ostwestfalen.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for ostwestfalen.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346506277147172649146888865892029117208055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 11:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 11:59:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ostwestfalen.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630563174121057894691202149099596672152643667540828324564066737983694363082525155833475099632066516508818309387418060341637768447365697205284529529949302019633918568091352545789541905254750650680769559717511635453510536219041598945435396627674826205694471197924442556480067946331851070457034203164695770276445501668841296650229795330290286418585392724721018310767466009653673492715342729795932218619398379279048033541026459487035508045676609217135272912238018095352994012226919095583534669718715647866191280223919903285543527835527473789289161253591694805451065185522109201639286589679197637267185686576579391473344004327050255661074189496663739036507490726416692642212008513526816401907422777459951178153256050864442974559822381519184752983343410506490296827370810711321129559982076883709539388153514847099244388171855931925175498207387000390654226166084693744778105512437863260889359052318662566955169063991381347844048718876163457071889093080344906134472349476619829487026910510052543520709956814822528623214380795947130618585245505551333987863344420420646396881456275795545821240107375238645005284828663332229196689746174990827764606309374689882214683243552305741668674147679552769817840778771790934464817912427845157663809373187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e85a40aa26f3304bd893d782894c55821886d645
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostwestfalen.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostwestfalen.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185a6102f770000040300473045022064da1d8b4a8fc52d7bb16a5ff41fe8e7294bfbb467f8b61686fefd7e9fd5a910022100984b873aecdaf26ed4bf69074c8e3f1953c60472b2d8bab0078a0419b9e1cd76007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185a6103156000004030046304402202c6525fe02d6952bc756fd6820a3b7db88e5064a07d459df7f6b86106d8aec97022034b95860cf364df26c9deae49c3e076c7dc6132380e54b3b1f9db0bf5ef7f986
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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