aviation.wisag.de

Issued by R3

About this certificate

This digital certificate with serial number 04:1d:e3:a7:16:47:f9:da:68:0c:80:90:c3:30:43:3c:ff:cc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aviation.wisag.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:e3:a7:16:47:f9:da:68:0c:80:90:c3:30:43:3c:ff:cc
Serial Number (int): 358619934688282289869777037894849421705164
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:12:86:10:82:6a:96:e7:5c:e9:42:e5:0b:de:ca:5a:17:3c:44:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:b1:ce:7e:70:8d:52:82:fd:10:91:72:cb:0f:dd:c2:b7:1c:1f:74
Fingerprint (sha256): 0a:22:b6:24:78:f1:4f:78:a7:ef:74:6e:54:ed:c1:ab:fe:c3:aa:fb:05:30:38:65:6f:66:63:57:af:90:7a:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aviation.wisag.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aviation.wisag.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aviation.wisag.de
www.aviation.wisag.de

Other certificates including the domain name wisag.de

(limited to 100 certificates)
identity.wisag.de
www.my.wisag.de
trendkurve.wisag.de
mitteilungsblatt.seifert-medien.de
admin.cag.wisag.de
admin.cag.wisag.de
karriere.wisag.de
tts.2comtest.wisag.de
aviation.wisag.de
media.hirschmann-automotive.com
publications.cwgc.org
worxgw.wisag.de
identity.wisag.de
ecs.portale.wisag.de
downloads.yspi.ie
worx.wisag.de
smc.wgsfra.wisag.de
aufwiedersehen.wisag.de
deka.portale.wisag.de
wisag.de
kundenportal.wisag.de
ecs.portale.wisag.de
worxgwtest.wisag.de
www.digital.britishtraveljournal.com
extranet.wisag.de
acrest.portale.wisag.de
web.wisag.de
portale.wlh.wisag.de
staging-app.nos2.pp.ua
worxgw.wisag.de
wish.leitstand.wisag.de
publications.cwgc.org
flyer.aqua-dome.at
kundenmagazin.derpart.com
cag.wisag.de
pub.my.wisag.de
portale.wisag.de
industrie.wisag.de
kundenportal.wisag.de
vdkf.extranet.wisag.de
news.vdmno.de
tts.wisag.de
evelynogvegard.no
nsag.wisag.de
facility.wisag.de
meinrestaurant.wisag.de
mitteilungsblatt.seifert-medien.de
publikationen.contipark.de
deltalifeshoes.com
cag.wps.wisag.de
worxtest.wisag.de
flyer.aqua-dome.at
kiosk.antalis-verpackungen.de
brochures.waterrower.co.uk
jobs.wisag.de
magazine.elektropraktiker.de
aviation.wisag.de
cag.wisag.de
publications.cwgc.org
oos.wisag.de
smc.wgsfra.wisag.de
admin.cag.wisag.de
leitstandportal.wisag.de
spezial.cag.wisag.de
karriere.wisag.de
remussmobile.wisag.de
net.wisag.de
cag.wisag.de
shop.wisag.de
worxgw.wisag.de
meet.furry.my
epaper.wisag.de
mitteilungsblatt.seifert-medien.de
portale.wisag.de
kataloge.weilermoebel.at
downloads.yspi.ie
katalog.erima.de
www.my.wisag.de
extranet.wisag.de
dokumente.zettlerelectronics.com
flyer.aqua-dome.at
epaper.wisag.de
admin.cag.wisag.de
worx.wisag.de
digitalerbriefkasten.wisag.de
wgr.leitstand.wisag.de
industrie.wisag.de
brochures.waterrower.co.uk
service.wisag.de
portale.wisag.de
flyer.aqua-dome.at
wisag.de
evelynogvegard.no
lf.wisag.de
cag.wisag.de
epaper.wisag.de
fuhrpark.wisag.de
extranet.wisag.de
my.wisag.de
net.wisag.de

Certificate

The complete raw certificate details for aviation.wisag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISBB3jpxZH+dpoDICQwzBDPP/MMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMzAxMzQxNTlaFw0yNDAxMjgxMzQxNThaMBwxGjAYBgNVBAMT
EWF2aWF0aW9uLndpc2FnLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAqV8LignhoM9b4k5fBkqavgWeFm/vPgVu2xy5WljyRnT2GEirTaD+EU5WosQN
wH7BJmj9p1h8jplEwET7Y31SZkJgyB6l8x+4LElAuAh378Rg0J1Q+ZGV9ufNpvOO
UjNhwA7K6LU9QvYLyG275bAqH7c6uQ0klHLsfwVMzKLneAszYC88UW6bKPk/pKks
EFzD2zfr23LErh1mxdCG0WbWMEGjsDsbmcP2VFMzYGafzoJGpwvu+oZj3DLgh1gT
92DEI9IBGEWFn47ntjnP+rIqLt8CxX+zIT9Wjjsi+DZ+sVcgDJjwIQRxDU5Rq+iK
XYcB5dHxBy/V30MBxUcOPDkWgQqa9Y0+M9kp0oN7q2BlUV77XEIRWCgX//QdowjB
WzILx5587m+DRhk7X+4/bU2dw/EcIBxLtnWyn7EdGXEe6D7sGrMgvGRxbOwdEnXa
PSyVzONCc5p2Ozsc0gTKZ5ffA7TqPXUPr4np4zLiMZjtQgdgekBVfunDFCmBP8KW
IgLUhowIQr4ziBWhDLhXKfBYqgfmW6KjU8CMuO+0Ef/h4SctPzWSYqJkKxcweYLt
HSjrn/OqArVTQrkAwMXjUkW0mEfHrY3nF9b8THHNPlif9WteRGWHEwSUw1TeRxLZ
bSO+Uuxsgh76hR6kGqVqXJcw21r04ckXs+EFtFVIyxVP/uECAwEAAaOCAikwggIl
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmRKGEIJqludc6ULlC97KWhc8RBwwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wMwYDVR0RBCwwKoIRYXZpYXRpb24ud2lzYWcu
ZGWCFXd3dy5hdmlhdGlvbi53aXNhZy5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSF
NL2kPTBI1/urAAABi4EIzvAAAAQDAEYwRAIgaTk5yrTB+HXULtd7D2btO+Ywnuxa
Hw6kZIAccGZtoHUCIHd8rKdPFllk/+AovOk9LodvthHOOHaQZeZIMg2YopgvAHYA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLgQjO3gAABAMARzBF
AiA0pPP9e0g5j4iC8OAj4QYvdpvpq8vBCV3uoaOLScddEwIhAOzedTpIIw5boJC2
HCJhh+7bQaOpO2DMaWlf8xJoVnz6MA0GCSqGSIb3DQEBCwUAA4IBAQBF11d9RSDT
ewS7cSWEDna9dkeucKXEv8nMVozB3DpUYdFR0svLBsQXSPJiN/xm3y7l7UAJPUPm
3qzNeVhRU9gVpCrSi1m3d3ooHDZjwznuN4O2cqnEU+wvgJM4/zJtOgtTei0ZBIaL
nMxa8rfAwMAL3+hvcy+nujqcKWBuv5FqIxS+ugjh5eh22o3pjSbOSnes441LMUTw
D8JiHi7+ZeTw0lp0TtSG9XDLRX9nKrelOCLYg0a+uQruLuNxsoXeGs3ljD86xo7J
HXpgBH/D4ZbkjrxLRyTSowElFWd+DhmMoxt2XrE7QYmvECzP/vepU33VSRfUPIzN
g7zy8hogR7/w
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358619934688282289869777037894849421705164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 13:41:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 13:41:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aviation.wisag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690974496232236893755438380388246736101443436268337609094400564377874280609073051823755350434418479346060289752308864915283324052653028966288367772800649398649656817110054471482881713504113873529325212816435029228784691831063000933546938373807981437954797578663076395141074548954941756273710763376101448268956287261026508081761266342911884186999555233439093381994518776198891628066506575639094233617667329183401171388917968642964337378556405306513168289687474223621040175488039577281907571376779726315396015199227235724404670437348202709315919119712054444770928640192789515785590527672920008930982092919788816748989953230483102397911472503374626237376507331152163767187832883602532918046662030072525076123925409665475592144889136812495266508831589333524993189557738804507401542870205808862207839366019845330099300120464758761647839200568380290686989697903380051952766162736775817044635647761603497629878229085690376432186913387019755911368038246806360094536633855263021333071788588245328110977283085986006469370151722951379945338117303121032583045010673204581552611253312636025776906535689672006564994514252883255255069257137569127130052050154780918348810348343825029149322342546909260362521413126653787878219766289584121847867244257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:25|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviation.wisag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviation.wisag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8108cef000000403004630440220693939cab4c1f875d42ed77b0f66ed3be6309eec5a1f0ea464801c70666da0750220777caca74f165964ffe028bce93d2e876fb611ce38769065e648320d98a2982f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8108cede0000040300473045022034a4f3fd7b48398f8882f0e023e1062f769be9abcbc1095deea1a38b49c75d13022100ecde753a48230e5ba090b61c226187eedb41a3a93b60cc69695ff31268567cfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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