nextcloud.knoebl.bmw.at

Issued by R3

About this certificate

This digital certificate with serial number 03:72:50:52:09:7d:98:07:43:6b:f7:29:1b:34:21:0a:52:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextcloud.knoebl.bmw.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:50:52:09:7d:98:07:43:6b:f7:29:1b:34:21:0a:52:ad
Serial Number (int): 300235811824765175149906071352174902399661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:48:cb:82:67:3c:af:e9:77:ab:73:31:43:9f:19:e1:58:7e:cd:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:57:f5:f8:d6:c4:45:3c:59:9a:ab:2f:6b:2f:0e:4d:49:d0:39:04
Fingerprint (sha256): 16:35:8e:d5:55:5c:91:58:0d:fc:60:85:4e:3c:b0:2e:2c:92:24:ff:21:32:e9:8b:af:30:15:44:16:6f:a1:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nextcloud.knoebl.bmw.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcloud.knoebl.bmw.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcloud.knoebl.bmw.at

Other certificates including the domain name bmw.at

(limited to 100 certificates)
meinfs.bmw.de
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
bmw-gady-graz-lieboch.at
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at

Certificate

The complete raw certificate details for nextcloud.knoebl.bmw.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300235811824765175149906071352174902399661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 11:06:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-16 11:06:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.knoebl.bmw.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864075701728902670642211262741460208036394810342446845149337601321439327139536983956697102162190922519187892383665463450285724059590148485858122703406682735713802637669403738275882082794099099049750745693259206256608131002223762215013064281751778930935657117927886664742851379008081934950780108044107689762420730315223978662307606661024154131837401085040871769979714719739747961961038629764967989332754237430240965427384463641886883487801865780373598390113533564170838967352272220031442878306986416056486914561148688093114420685134561467694919518560717216514956406596152349931092090382611500362165731989069688526016053199678227763889933194154006926451591856943023477551982273760850220936130285522773132368022173510872417369944233014637410852276910487120184849064282323387148438799776759118460464052630633069410220627053567455021314692025736336089952714702345147243888191247100028292291994964766097863310668803999749538945011788641709311671403236590481460084397200800670749384831148424730991916481860144220094287233495338727261454935685034393107753762639236932960891072709571734625496305769494503722061245094331768682482466705957997123352061875897675179553440809002959682571838929047556240727925385866294527963292682685457496068501957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f948cb82673cafe977ab7331439f19e1587ecdd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.knoebl.bmw.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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