gw-ss.machart.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:03:5d:1b:31:e2:f8:68:80:9e:b0:60:48:48:10:f5:4d was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gw-ss.machart.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:03:5d:1b:31:e2:f8:68:80:9e:b0:60:48:48:10:f5:4d
Serial Number (int): 300814083477282283369326992334444504872269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:c2:02:7c:75:12:b9:01:0a:ef:06:d2:6c:32:ae:99:72:7c:05:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:2b:82:7a:22:d1:ae:76:43:f1:cd:ef:84:7a:f3:42:ef:ed:76:23
Fingerprint (sha256): 07:56:9b:a6:45:f0:00:26:e9:27:5c:bc:8c:08:28:56:fd:98:fe:2d:e7:eb:91:5d:c3:7e:fc:79:40:38:63:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gw-ss.machart.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw-ss.machart.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.hermeskreis.at
data.machart.com
defaulthttp.machart.com
gw-ss.machart.com
heizraum-ss.machart.com
nas.machart.com
nettl.machart.com
photo.hermeskreis.at
photo.machart.com
photo.n5c.eu
photo.puchhammer.at
photo.widhalm.eu
ss.ddns.ms
ss5020.machart.com
vz-dss.machart.com
vz-ss.machart.com
www.hermeskreis.at
www.machart.at
www.machart.com
www.n5c.eu
www.puchhammer.at
www.widhalm.eu

Other certificates including the domain name machart.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gw-ss.machart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300814083477282283369326992334444504872269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 01:48:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 01:48:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw-ss.machart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768952137358495716804336430028953953487318415208759718597242278782621028112131844500447673166484988197209752438370095351049830250369004985790488046125484626247005163888662529186174849044395508374814741741794000697061487400383132540313366538217632212436710857631151436684370863934048174177746573692901953007492841730220653350671672844366727488746136681861292573783790540354799698734899429765153456671362058585803797209441962879519025097786967868741273592027354985416219459878270937765931199071515948933183658895469569169778421828825861940379941505699890424597751683461414003535595473899319562601304012051451944481497089658058719868259011945852571017256346746576657321845962915726015772523751967103048571958643726129378034629652806966350217989427204541250774073190908510145496956934592996763822185418731080298305128968408895207190924631277939270183570653003424947759167424274856157802217067607529001407920901521844923000230783074865670563339172435799360602649754644952446293307196990918866492817807626962771023645657192408536893854940165657491481939448858206024001704860264022345389420154857810170284457474297490447149871742216998295619992592076900482658035790690596859710689758756923965298585494143718410088578705375734670093863164303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcc2027c7512b9010aef06d26c32ae99727c0512
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defaulthttp.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heizraum-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettl.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.n5c.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.puchhammer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.widhalm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.ddns.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss5020.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vz-dss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vz-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machart.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n5c.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puchhammer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.widhalm.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e1a90e33b000004030046304402207982455466820e804cff7e1b8aaceba7c64b6861719263411c0faf9112053b8a022034c178a0d71d3e48f4840d4e77ac32499e81f682085f4e68d3ba0f071eca5529007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1a90e3350000040300483046022100d5e2015d119ec8720cbad3c2b8888fcf70c78eeb7ca212c3e8990b4353a9cb5f0221009f16f07b5285f540f122414d776eb598b7d114161d3ad60a13aaf5dccb51604e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066de144d3b6b690c8fcac6c8361acf1021de162c1e3c52f169eca7989c6c6804d289c99ee6f6c0b408e337a3e1df08936402a5691bb766c85b220d5c83d76342439673cc8cf7bff968818c96dd73ff11c51f66408a7b397e281f98c2a2f2fcad03c9f51bfa43ed41b0bd45e23b9607f2651aea4a1b59a4be472447b1f2ba55b7a74a44e85d8ade335384c6785b54de84d26ac6cf69769c386665790fd64d466c0b8a0ee7725a2224ceb007eab29113c86d07184b5bf792dd9365bbbdaf581c411839cd6d44884bb185d436899b57d5d9775d03ad3e87de9da304753503c256e88a351eb1588a8563faafd4ef3daf85503ba8422dd43e826718a93a5a7d335872