myanmar.ahk.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:93:80:d9:95:43:71:72:41:b8:2d:be:db:df:fa:18:14:05 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myanmar.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:93:80:d9:95:43:71:72:41:b8:2d:be:db:df:fa:18:14:05
Serial Number (int): 398641922603720139771497914181241401775109
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:26:9c:77:5a:f1:f6:7d:84:64:93:df:92:d2:ae:b1:32:27:b5:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:98:0c:c4:17:ae:e5:22:e1:6f:ec:71:2b:9c:d0:e8:91:b3:0b:1f
Fingerprint (sha256): 0f:f2:54:27:43:02:4b:05:4a:28:25:3a:fa:21:1d:77:34:34:5c:f5:c1:5d:48:47:7a:73:92:bf:30:a6:a4:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate myanmar.ahk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myanmar.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myanmar.ahk.de
www.myanmar.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for myanmar.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398641922603720139771497914181241401775109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 21:26:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 21:26:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myanmar.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767944570395718678045892661858814269528448333069020760494755513642557302565712608715472601566104646666671578274710720086781609219498594683742932802159780310967887490601864786328208193576307168455893504120527506348382337180537697521410802382130006380262563128214734713651981298458208817013169970923389049290031262660032380871171887695511016076570672764022978930523161589791920408860358332216368572560734954567218594384137151384285874758261385506438018780009086875647654828293265320697106218306349411958632339591688744785077299239840200379950054356658589003344089111694421722857912590936811801993255620112341635598758809481783713094995558200506721410148965880142715900736226420273867005035120520783282137117280210368894031983356352813215284606021783581867964079646860365005625099165035273792680166380240374491070810401464206494896438403032822466079183159581008456658701722162644354296790452414658370138270362715238379693902315242600509701697860365619531968512145288982831887904629103928940091374032342945459233390951598194158326427278511153484336577960514269595283023892495474075884059723793096885759435492706481100613711696299709274391224856770455241654326765878812597172869182147679124174136700836957258885830382708493053076069251353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c269c775af1f67d846493df92d2aeb13227b596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmar.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myanmar.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171045ad8480000040300483046022100af1983c12929ce675763241b3662011d7d94e7ef5da85e611aa0a5d39d8b4a3e02210099cd1143d41a532a5c6f68a329301493fd9df8b84ddd9840cc73e0a4bd822a27007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171045ad81900000403004630440220755e1abb1b02137481501b064a354005bc7834dbbe1ffa75d2f04c0256a7348e022046eaeadf708972cbf2ae395ddfb126e471e40ee4d03b51b95f85dc7a1ad841b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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