portugal.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 04:68:79:2f:c4:77:48:ae:5a:1a:e2:34:71:cb:28:42:ff:46 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portugal.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:79:2f:c4:77:48:ae:5a:1a:e2:34:71:cb:28:42:ff:46
Serial Number (int): 383999594497063840098439966410626748841798
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:07:b7:8e:75:31:2f:0a:1b:06:10:4f:f9:b6:f1:92:58:c4:f6:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:e9:0d:11:36:42:10:58:bb:2e:24:e5:34:b8:f2:2b:a6:bf:73:71
Fingerprint (sha256): 0a:f5:25:ac:aa:f7:cd:66:12:7f:84:7c:03:f4:63:d8:e7:c4:bc:0d:b3:8f:65:99:68:2f:e6:8d:27:fd:60:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portugal.ahk.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portugal.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccila-portugal.com
portugal.ahk.de
www.ccila-portugal.com
www.portugal.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for portugal.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383999594497063840098439966410626748841798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-27 21:14:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-28 21:14:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portugal.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660745071327857237936466421648727783964988061598932575233581621141329615053842256493885905188278905405965709413715521773116781104638975607909030287692213011269219206535777953350143979126894842657282733591497271412179643442142124071957083106166955903282687271812514781860325440149178951427140977255586856995234809415863879454875635551904601941759850741693746455521094749003578869461604524216530336059806186887698564113431342428018871345667063839001654696145782058144048161769902273314352275173300356083843079857655347341083881309726770436259169674740582607424886155438915237275574025078669987294133444492168023012394129537211958932958353676954612035621982604575654516019153416369062225475377842348422231306003284744054229122661920457591819826681921639323196749437353930200659951057174857795716133138027016904878505246138371660434894862842996095653235149729382223560869264233939939401470790645689177849684858736603898184381368660406872368979251108171887486053631671894565403130819407286103211607505709678131231509708244905393115209771069671898542616250700311637304812137951905795431849253943811486386451041742729445249933167693001117687533820005416932773883634891082367697874284542940046651412066342015498991048963118776952644924380959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a07b78e75312f0a1b06104ff9b6f19258c4f6bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccila-portugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugal.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccila-portugal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portugal.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000177e58ea1b3000004030046304402202bed13c73bb549d0c8f1b85a7d8294fdb65015472dbeb3a1254e4267c2ace57d02202446687f4db9becb5a49f77ce9a891b2d079d04ce6a4d17130e09a50d3d97a1c007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177e58ea1900000040300473045022100d72b7d995be40ea1769598dc1ee4cdbfc9ecc00cb28e9e384cdcf31385eaf98c02201f85624c6134e94667e50d43dca265a01cb2527c683d2c83d51b1ace37696daf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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