zq-digitalekompetenz.schwaben.ihk.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:fb:a6:6e:fb:a4:c9:b8:2b:f6:33:a1:7b:eb:be:d9:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zq-digitalekompetenz.schwaben.ihk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:fb:a6:6e:fb:a4:c9:b8:2b:f6:33:a1:7b:eb:be:d9:40
Serial Number (int): 330068113945612226359686108281911547713856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:33:19:93:c0:3d:cc:0a:0e:4c:43:56:bd:a9:53:07:f6:70:f0:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:43:7c:87:8d:61:ac:94:6b:5a:98:bf:dc:ce:d7:79:23:ef:03:ad
Fingerprint (sha256): 09:14:a1:92:60:ac:dc:db:41:65:b5:04:2d:81:84:42:26:77:05:76:64:4a:61:e1:16:b5:c9:16:4b:c4:01:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zq-digitalekompetenz.schwaben.ihk.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zq-digitalekompetenz.schwaben.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zq-digitalekompetenz.schwaben.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for zq-digitalekompetenz.schwaben.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330068113945612226359686108281911547713856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 10:01:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 10:01:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zq-digitalekompetenz.schwaben.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 644548857144090973420156063658537082722538498793261521050624844868372965422338910632721148749238318916689950124558472705329396867315744457395275193774704825335170563074004131045904944866574822267849474377021678633853216595151113631415228933834046451424153138278938236959402606460940193785013920158499305699301291810968264829763288882935530437017515891441734312012617951864693140812136622760454455354685618670725594992777421571446771111421310298002184867175613153300935497065648262993798879264084092384268995387149483185960596156608011032227098151730694676696385704629196566921826744202191123431998833507054431646427535687856171726410248671088026282276394679879864202676926860640319120328554920991091654470264316353126224983037815230177538839537859543315749228116053629624586162660202849961883338195729129114021641506616551297059204885881231996250663606096941831325651378478847112932724149509334991578733431218710689579085483757540465598838142493409433928339523206725011975178485278285250857459517894423630435721050799717910535414121222877990825406825200725720281768771268138175686240590894846083233743359948097193289053945305856211125516358085494073309569872090161474036932148310693066935379110199177850493569252292905930925191258017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e331993c03dcc0a0e4c4356bda95307f670f038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zq-digitalekompetenz.schwaben.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169056acd1d0000040300473045022100e51c20b8fcf46567e61f5d5984b0817522871924d9af7dd5d6b9578451a3d1c102207538bcca07b986f97dc1e916267cf46b6011b84d9cab86c8decabf9a60b258b6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169056acd1e0000040300483046022100d782d5c4eaf28820e37e44f19ebb7cc2a70a6c781c0cd08ad6b29fbdf5437355022100aeb22252abe4e714e6679ef76caf058352da3452f42389543580e2ed2d47c8af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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