hoefleroel.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:ef:3b:a3:ec:a4:9c:da:67:01:b7:41:6b:d0:dc:81:1b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hoefleroel.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:ef:3b:a3:ec:a4:9c:da:67:01:b7:41:6b:d0:dc:81:1b
Serial Number (int): 289217724677165560842862389689782925820187
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:c9:0d:bb:24:cc:d1:10:ac:dc:19:b3:f0:2e:94:8d:11:2e:27:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:48:f8:45:ef:df:d5:d6:4e:7f:62:99:90:be:ff:2f:2a:05:08:46
Fingerprint (sha256): 0a:3d:a1:80:bc:a9:c0:52:7c:cd:5b:04:bb:59:b6:d8:b6:28:da:74:78:bb:86:ee:3b:af:e3:4c:c7:c6:0d:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hoefleroel.at

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hoefleroel.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hoefleroel.at
webmail.hoefleroel.at
www.hoefleroel.at

Other certificates including the domain name hoefleroel.at

(limited to 100 certificates)
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
www.hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at
hoefleroel.at

Certificate

The complete raw certificate details for hoefleroel.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISA1HvO6PspJzaZwG3QWvQ3IEbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjAyMDU3MThaFw0y
MDA2MTgyMDU3MThaMBgxFjAUBgNVBAMTDWhvZWZsZXJvZWwuYXQwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjQW+DM37TArL1wwt8a7wuVGlhKXYrebX
iCsPj+brZDQWmWswwfelrqMD1y3YCy0L+MLOJCkxtuWc/OUQG7uzjr5Y0s7OzjuT
eZlaZCLUPsSjZptqH4tPN/snBk/UEnKKFA31iaZjBu5jFFW50z8585LTYc+ahCHM
ijqbQPc38OF1AEP6pLFSfE/WayKMWZTjn5S//KnSZQtmPemhhQmegCg3bF0q7mdl
jYim1l1zcJV3WE9hDlLMoA/TWSdjr/3K7sonnUBF00yrZNLyP0J80o6US6vDxyTM
6AknBEbCXW5m1ELyj34rECJyhwWlupX3ZvVvAqp7svOCPGIgkNaDAgMBAAGjggKN
MIICiTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMTJDbskzNEQrNwZs/AulI0RLid6
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wQgYDVR0RBDswOYINaG9lZmxlcm9lbC5hdIIVd2VibWFpbC5ob2VmbGVyb2Vs
LmF0ghF3d3cuaG9lZmxlcm9lbC5hdDBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2APCVpFnyANGCQBAtL5OIjq1L
/h1H45nh0DSmsKiqjrJzAAABcPnzVd4AAAQDAEcwRQIgfheyPL4rjwkQUaApJXME
RU6j66KKkki2UnvJe0LtSE0CIQDg+thf4g7RYSRrkPGOPpDO1cPRIP6Git3+kxyI
JJvoogB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcPnzV+kA
AAQDAEgwRgIhALMgwVTYxLAjpZN1Cm5wju54FAILFsdFhD+Dxux8zB0kAiEAxjE/
m/aj4dJ/W8omnmG2x7FWNuxiE4kS3aqYuxth+HowDQYJKoZIhvcNAQELBQADggEB
AAuzKEmIPTg2344mbNAe+wRLiHuNpDZhpHuCdr2ihoEp2GgKqw5LuKDz6PZEMvwr
KWH1W4QXFbDiHe+b+ClX1dGjPYSXuMyccEB+o/WNVE4aIzAWxeBNbxSHr7buemzk
KjO9HtzqiIwNLuPwVaYogVp19VXmCZyFOv/rYS4DanNNKzkAE2MQF4kLQtNJ0IuS
MB0FPEqfiE24VRYgTNnI7fUpYBLlCPqdFCmYMQQZDMCUXkdlQZAkesssaesvnjSU
epQL8INp0ufunRDQKlvConTa+gdJnI2tcQiGLhH/caso4uUdMyTtcCVdnQG3JzGT
n/sEPGxOuP4ECjmnAZlN1VE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0FvgzN+0wKy9cMLfGu
8LlRpYSl2K3m14grD4/m62Q0FplrMMH3pa6jA9ct2AstC/jCziQpMbblnPzlEBu7
s46+WNLOzs47k3mZWmQi1D7Eo2abah+LTzf7JwZP1BJyihQN9YmmYwbuYxRVudM/
OfOS02HPmoQhzIo6m0D3N/DhdQBD+qSxUnxP1msijFmU45+Uv/yp0mULZj3poYUJ
noAoN2xdKu5nZY2IptZdc3CVd1hPYQ5SzKAP01knY6/9yu7KJ51ARdNMq2TS8j9C
fNKOlEurw8ckzOgJJwRGwl1uZtRC8o9+KxAicocFpbqV92b1bwKqe7LzgjxiIJDW
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289217724677165560842862389689782925820187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 20:57:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 20:57:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hoefleroel.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20393907852171187380999592279040814077323185346361967240230609720220808904609167753523653975517632581397942439302930687783875083092200397372645231382770515771764071631772753228555670535954002984814555247315813051620199292093571728723535261258253975475775015158447907195844953897395873978365721278480133527652826670621759747775924112645198624515581305183314740804768959248647208474949959317585282778733665768960632455865497495522003693336468596870917853653162564255278080378362606542804832917660841135231832483254322406523303507753694538398481871381338116811310554636921109709719265044037702083539671802535942355474051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4c90dbb24ccd110acdc19b3f02e948d112e277a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoefleroel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hoefleroel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoefleroel.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f9f355de000004030047304502207e17b23cbe2b8f091051a029257304454ea3eba28a9248b6527bc97b42ed484d022100e0fad85fe20ed161246b90f18e3e90ced5c3d120fe868addfe931c88249be8a2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f9f357e90000040300483046022100b320c154d8c4b023a593750a6e708eee7814020b16c745843f83c6ec7ccc1d24022100c6313f9bf6a3e1d27f5bca269e61b6c7b15636ec62138912ddaa98bb1b61f87a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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