bosnien.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 04:77:c1:99:3a:b5:b9:5c:1d:fb:98:da:a6:0a:2a:65:a5:63 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bosnien.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:c1:99:3a:b5:b9:5c:1d:fb:98:da:a6:0a:2a:65:a5:63
Serial Number (int): 389200082006015928847195634364175817745763
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:9d:2f:7f:5f:d6:b4:7d:be:1d:34:2a:65:8a:e4:83:2d:56:72:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:d7:b9:3a:bf:43:a9:9a:6f:1d:2a:9c:03:e8:d9:98:34:5f:56:87
Fingerprint (sha256): 0e:d9:fa:c4:b4:7b:8d:0b:dd:e1:1a:0e:ac:36:24:c3:2d:5a:12:19:8f:f2:d4:40:9d:25:bc:04:d6:61:1f:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bosnien.ahk.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bosnien.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bosnien.ahk.de
prorecognition.ba
www.bosnien.ahk.de
www.prorecognition.ba

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for bosnien.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389200082006015928847195634364175817745763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 20:15:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 20:15:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bosnien.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 988646364898176096542580587674868690892321809682768248719876797156353219153280242043825650196365731030582542224279501850283761062613901110685304148986881444028226820640537473368814838045153355637885161210928122984991570720422149829057995300819030254045674727670595744849376887996330467529117285258477898206583852552304191051727761510418318566482027350073111693760143285827196670574181928444715106725269495521166414026169129520538648153352592804856323075336487585457426568677790734148653512124281991808134539498037548641633212752855875203939220353779808916630034545591350579348209652819386929609997395378559189172122977704583263554367742073433546269845661240955112440428596912412051970996213541836898799182669148643983983058605522862658587111300821473280555936862880736786599559321947796541811231508091764832217639534324253918279249696313710407724489189962400899268517632895682367784009469508397791466573837750635906250091056483888327499662139083650639370191016672707431119479657614291135868207529613061239469206607686235038360150736511820108580921424570172858790089351871525077499346579719000182931477611323517034659530644351699473285596038975672322041056012304804457903342205931823707640380715486744902904790264858440138421991516827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd9d2f7f5fd6b47dbe1d342a658ae4832d5672a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosnien.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prorecognition.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosnien.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prorecognition.ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187c4923658000004030046304402204929e4522526b689fc50f0cb784ff0e233d2170e4f111ac1dc09cc385a8ec75e022041948d7aab201b561ee5d1baf0f758361aeed24343b87000f0519de44dd0aeb6007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187c492367d000004030047304502204924c417a7f0d3b241798ae62dedfd16c9a06a191d39aa00ae6b12f2dd4ef20602210090acb0cd88972e6fc08ff6896e12daf181f5e629ba80ad79edf08cb48b904c87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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