concerto-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:65:aa:f2:ec:04:18:98:62:c6:ec:ee:a3:21:aa:ae:a4:e0 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=concerto-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:aa:f2:ec:04:18:98:62:c6:ec:ee:a3:21:aa:ae:a4:e0
Serial Number (int): 383044892868152163498249199458730120226016
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:7f:3d:0b:ac:80:a3:84:ec:3f:8e:79:7d:52:df:b4:92:30:b5:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:87:2d:57:ba:18:cf:31:d7:6d:a6:94:5c:71:08:da:de:d2:ac:4e
Fingerprint (sha256): 16:6f:bc:a5:65:19:a7:ed:cb:9f:38:74:30:ff:8e:d8:4d:5b:c6:b3:a5:4e:48:c8:10:1f:88:36:aa:2a:4d:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerto-magazin.de

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerto-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
backup.wege-zum-mittelalter.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de

Other certificates including the domain name concerto-magazin.de

(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de

Certificate

The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383044892868152163498249199458730120226016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 13:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 13:08:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821058975111204608962117560129978841208593872494948876463271153208010748580371337404254822064308022912201042054380400658954797859523948168407783542498794178517071815999475685087199695957937531594194050877608854882003226928872468234796439206633254365346607068769727906982889520515183188138380909557727638659135386582972285304642900863839234861946435095657233687168221564384432954399182422777788972006307714861057387166729407216503007602126897436837733654966410306762362894134396172779012647850105028558511052150122652988496955360083350640555422967379628064595773938824355562234966271422754895792080847525291820599614067379865740926955998470811900904868545943432490787267609757432925575604722862013003185613143060397255883980413169830519921971575583417187759871618233354818762900532247954833729426428738837376008621279863434204208878963565822240144735376194025680530410658768329757138918396004697151290505237187259623285910195759849944469652632640336466310791950321071956745551743619399649858789305699456427875014472777757457873469750530793387523850086564790968708203169061684989148919034579085991815757286575137110549504253137970323761071809602825429467466434309154324414273586118150165102275983083169047326314251063520699919564800969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b07f3d0bac80a384ec3f8e797d52dfb49230b5d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.wege-zum-mittelalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b19ea95ad0000040300473045022100f6b010de93e2c8ed873e5bef031b462ab726d488275fe7d79eef5fe5d8dffe0e02200c4df2f4595ef3ec9fc44bab92a44c556ca82d9d0d1cefb4e2046d81c4a57d28007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b19ea95a8000004030046304402201b45485b1db6791c6e12f2ea228a6ea4f2f0c0578a249bd38b50b853d5ae9f18022069adc89bd2d40ddf39588f7e0619c6766ddbbb3530f068e67f983080fe33214c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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