myanmar.ahk.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:44:94:10:70:58:ab:b9:c7:36:3f:0e:21:91:97:a5:71 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myanmar.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:44:94:10:70:58:ab:b9:c7:36:3f:0e:21:91:97:a5:71
Serial Number (int): 346158323455662404920614832473025143088497
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:26:9c:77:5a:f1:f6:7d:84:64:93:df:92:d2:ae:b1:32:27:b5:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:10:b0:3f:92:71:9a:33:fe:b8:a7:58:23:3b:4d:0a:30:c3:55:09
Fingerprint (sha256): 0b:1f:b4:65:4a:7c:c7:c0:39:d1:0c:6a:17:b1:b9:70:c5:d6:3b:cb:ef:9e:ba:38:9f:d6:06:80:e0:f1:df:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate myanmar.ahk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myanmar.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myanmar.ahk.de
www.myanmar.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for myanmar.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346158323455662404920614832473025143088497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 20:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 20:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myanmar.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767944570395718678045892661858814269528448333069020760494755513642557302565712608715472601566104646666671578274710720086781609219498594683742932802159780310967887490601864786328208193576307168455893504120527506348382337180537697521410802382130006380262563128214734713651981298458208817013169970923389049290031262660032380871171887695511016076570672764022978930523161589791920408860358332216368572560734954567218594384137151384285874758261385506438018780009086875647654828293265320697106218306349411958632339591688744785077299239840200379950054356658589003344089111694421722857912590936811801993255620112341635598758809481783713094995558200506721410148965880142715900736226420273867005035120520783282137117280210368894031983356352813215284606021783581867964079646860365005625099165035273792680166380240374491070810401464206494896438403032822466079183159581008456658701722162644354296790452414658370138270362715238379693902315242600509701697860365619531968512145288982831887904629103928940091374032342945459233390951598194158326427278511153484336577960514269595283023892495474075884059723793096885759435492706481100613711696299709274391224856770455241654326765878812597172869182147679124174136700836957258885830382708493053076069251353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c269c775af1f67d846493df92d2aeb13227b596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmar.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myanmar.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a376c86790000040300483046022100d105ab2b6d45948cecd82ccde495c411b0b720d912d54b71bd620ce32c1ce8bb022100c3ff0aa6d525da8b2adfc9a6cd3669cc0f0cd5321a486768a02db87f14685c95007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a376c868e0000040300483046022100f834aa4bc77a356831ec7d9bdd1501b34b7a91bf509e681e2de1036f8f4f001e02210099c9b8e10bef28e303c59599bd1cc13a142d4d4ec497d3e3db6a57baf8da21d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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