europakonferenz.ahk.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2c:b8:4b:0f:bd:77:47:36:f7:d2:c9:24:42:51:4b:dc:b1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=europakonferenz.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2c:b8:4b:0f:bd:77:47:36:f7:d2:c9:24:42:51:4b:dc:b1
Serial Number (int): 276554249632538028544398894959402926464177
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:ec:42:49:4b:07:cd:cc:4d:b3:9b:fd:d6:3a:ce:91:c0:9c:92:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:b5:f7:ec:4a:ca:a0:75:8d:9e:8c:63:9b:72:93:97:b7:dd:67:5c
Fingerprint (sha256): 10:07:b3:d0:51:e4:f1:3c:90:f7:48:6f:f2:8e:c0:0b:da:61:26:26:ae:24:78:a0:56:c4:bc:e7:20:1b:2b:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate europakonferenz.ahk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for europakonferenz.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

europakonferenz.ahk.de
www.europakonferenz.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for europakonferenz.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276554249632538028544398894959402926464177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 20:19:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 20:19:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'europakonferenz.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624676617499739021640330281394772265557439369762409235770450593766310904974375229527690493675583337621674920664797150625040960445954185716988999975263858691008877506185265432966917705094232861441820364413550041797295072240375293672314235557322367319961257745845334019893038724958887249209806434496765144782646255055224757317681428672751581855845790774464546619705812537852729801821449129897291170087137202310768317827575859627368838637521412114115366895192656077710136888685417163519602197150537232061481125637503341190884005498768144961697516806004456980582899507105310871955361979985110638772390544582621172088829761832156895594533636685014896297747175922543039548327132062355500916211212965909563356895536695962306971425807255268966418176184116030178346732238474470542793492310906488122723309865934538661884038234102286007276355180466031588086790120337580422066115205598811477999526261820049115029316224275583047756365545692276267286060404861825220725803910772765257986825724608579045535887749122606152710724424271050249121416585404308207076239057822647084389301550469979576443718026529245410205892960383927760365272782583318882642813333008658054760317443625925144326059503403199811095117111072351666479471151127413867583388890863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51ec42494b07cdcc4db39bfdd63ace91c09c92bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europakonferenz.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europakonferenz.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c30275cd20000040300463044022076403873185d4b8d44bf5b16bac11bdbd2f79f891d561764581936bcd8d06a65022051ba57598d68004822e96082496fd43ad617f1170a6e60f303b9965884ab6efb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c30275ccd0000040300473045022100d65da7606ae5acf9eab13682853e4ef83724bcc25772fbaa62925132d35b030202205c3e62123ee57e9b21fd730d38cebf37ad25a096faaf74a57afdb91d642cc687
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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