indonesien.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:29:41:e8:a3:b5:8d:0b:40:0d:a4:cb:95:5b:41:08:2d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=indonesien.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:29:41:e8:a3:b5:8d:0b:40:0d:a4:cb:95:5b:41:08:2d
Serial Number (int): 314135465233638593926738133801662257629229
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:b9:13:ad:7e:06:15:82:71:2f:d3:63:02:8f:a7:68:54:bb:41:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:24:68:d6:66:0e:1b:26:ec:2f:60:23:95:c0:39:0c:41:40:2b:02
Fingerprint (sha256): 05:ac:1a:08:ec:27:d3:4e:0a:ae:46:ad:8a:b9:94:43:9b:b4:0c:2d:07:2d:c7:ce:f6:46:5a:3d:5d:43:de:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate indonesien.ahk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indonesien.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indonesien.ahk.de
www.indonesien.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for indonesien.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3MPONItVxzCuGcGcgjZ3
D9tvBYFXId4pX+l8dRSgrOTGww03rBbwRTpl3wnmGanwpJURTTnUNdWpOy3F6QVM
AaE4DGvzSKw4RAkStCv1CrWaVl/SeWyhK4ZC/BDwL7WvVmb2Vx9bd6IrIZ7uI4eV
jkA18R7S0/KuxGPjUoIX4JNvfRNJeUXeDN54atNfXyeLRiVoMK66VT4uhi1OJYml
WMmx3HAHqQXkDqXxnfbfkjM559zCrOdnfgr98DPOaRlStexELx5nZawbvowm3Yap
LpnYn/Hl+mfQ0axuQZYnHvxb2MmN4ScXswywTCuPdFpd3E7wk0pcey4k8ObfyYKr
3c3IHRzr2KjwH6UGppyVTJsaJiBji7BDcQ6Ih0z7N22Uua5VFMn0pyAt4PIybH3m
/wlhJcpweh1zn+KbOGWyoJfvxRIkqS7CPkj3m+58qX/zNhfARMd7w/1AjBq+IiTl
Du38DXN2BLyf3Jr2/KQ+wuTi/NtKTifgv1Nen7E/nElbXUus89/XBfUMolWQWmQ4
5a+QLWNqePSlyLtOMkVXuckyh2KCmLC/lSa1BtfwKR3x/f7ylpg15kTA4l32SoSs
NXsG5c8qYmetLsV//8P1SUYd5b7OSVOCrxTCdRKyB6WHkhVcyqe8uFLkXNY0l43J
3vXfVtBemdrqKaA6W6366S0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314135465233638593926738133801662257629229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 20:38:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 20:38:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indonesien.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900642072709559558126989269688119255179554964499811869598721993691634430415917423836938452677530675585874114930870772772544336172996084605619447894749839086525152890616582852725753288864990610849104638123259763490852521358401791092211141500632728617642433261997645082171449009765400604171011277846336510287197261262873519059872598755040765235806479192321394870740063083756671580613865069042764801069366670961242763420903342040081845374434733762701126051099533521732349820341741432157938183341255486191106603780855336957858319778562693484764831987710257010363731560878216935720472738819214643312747616073326476719173776624660963661921326831595834876676103906801324291329907746580422703195812462034838557437786084618408453764231600376429645337500323747563924737461938643017470478962255597486561750336487676535055308496468439534738062371229590911395028938690830211775219258501082778954373635368168788837375639856244426916195974696581995568172267085368569876800514584946967392997725242844433550646009636707676742482582708492202823592242424383150497442968520128707981981902778864466183649044946287444657065634672165980207433727845801056492393901508733718485397631790759521194875303616104166999401431486852082266480966550465610964480485677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35b913ad7e061582712fd363028fa76854bb413f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesien.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesien.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187c4a79440000004030046304402203bfda039fac7a1bf954e2c49499c309a93891b32323e8da148ac0050c1bce881022074182ffff32f5dd3c0c929cd90d018067a7dd09f14ee3bf42ef648eec392ded9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187c4a7942700000403004730450220725ac3278a0fc3ab02de19c6b46448aac000286ec0b36410a4e730ccc5dce80a022100c7d1e49bd33987a84c987a6b465643edb6e5efa61e5f954da0e039fcf9ae1029
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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