bej.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 04:bf:05:7f:b8:32:8d:ae:ab:22:ea:e1:53:53:d4:08:7f:69 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bej.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:05:7f:b8:32:8d:ae:ab:22:ea:e1:53:53:d4:08:7f:69
Serial Number (int): 413450385106588815355740270693781212790633
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:d6:e3:8b:75:65:dd:3e:0c:30:98:6a:0c:64:44:a4:7a:0f:b2:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:e9:fc:e1:02:8c:3d:97:5d:4b:23:fe:f0:ea:06:79:5d:58:d9:e6
Fingerprint (sha256): 08:31:ac:1e:34:c8:46:5f:01:23:8a:83:4f:4b:1d:cb:87:8e:0a:0f:88:79:55:ab:4e:20:ba:c0:9b:c2:4e:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bej.ahk.de

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bej.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bej.ahk.de
china.ahk.de
china.beijing.ahk.de
china.guangzhou.ahk.de
china.shanghai.ahk.de
www.bej.ahk.de
www.china.ahk.de
www.china.beijing.ahk.de
www.china.guangzhou.ahk.de
www.china.shanghai.ahk.de
www.german-company-directory.com

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for bej.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413450385106588815355740270693781212790633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 20:20:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 20:20:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bej.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1004973387389712893539544067687066037931528262709624061929412695167302211719807552778262188551434574543489488287965701497139628958829901895557876732776822249930542246073813051513852727851206175205363950974594840486746785897621931355187393387058042221088425711603832883459936956598713212892851100734130732665417158979999117554548431782471565127525856403603662357078071442038005496284278896711027484292070228930575906896807842849668516166693376971730841077811736466895263254248164435431435168701684636475813312868773398351642714855443344262196891388897368492425783998711610295109189265119298741291797681035265994342025698035224315439415673551275718244227269399535618307460386236564414878209922041527189672806126620881272716834673596398705018727405117593741507557781227327217630045965767649234410312831465746044454299450023340607234906548904119952975990163036043137952636518003781089353713146270155916592345716274715026332960985461466206212573005785134740181683554162647033137788114535463775205569010875010005882747584418215025850339425351493632383601046571610773041886579491450181820725917427911133886329548609836581673942669384885295369571693450932249978774348533257473477601680352536619717697909093086491215306617954446181157176440203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42d6e38b7565dd3e0c30986a0c6444a47a0fb220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bej.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.beijing.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.guangzhou.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.shanghai.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bej.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.beijing.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.guangzhou.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.shanghai.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.german-company-directory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187c496d3a3000004030047304502204afd9f9640d2c0e217335f35dd02ae6329017a857f93cf5dc99cbae55b6e5cf8022100ff38a5dbd410eae8e9ad6c7f7018695044c88dee8a8c5dd5618d68bab211a998007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187c496d3e60000040300473045022100e2afdef6927be4c0f29982183117edfe5e6cea8e0e005641bf9bd9dc12de72c802203aeb18a96a57e68de4349f9e099a684c0202f4abf06797db35afbdfb3a64c67e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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