chiemgau-arena.de

Issued by R3

About this certificate

This digital certificate with serial number 03:49:2f:89:2c:e3:0e:09:44:a3:0a:17:eb:02:a1:f7:da:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chiemgau-arena.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:2f:89:2c:e3:0e:09:44:a3:0a:17:eb:02:a1:f7:da:ea
Serial Number (int): 286240656551395917536119478537397512690410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:1a:34:5f:1f:5d:71:be:5d:c0:b2:ae:e0:af:6d:6c:ce:09:ca:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:65:1e:6e:80:ce:25:7f:80:04:f7:e4:c5:36:ca:ae:da:c9:06:4a
Fingerprint (sha256): 1c:23:90:3e:ee:35:75:5b:16:2e:a2:7e:bc:06:57:3a:b7:0f:5e:53:bf:87:89:80:b4:f8:95:75:52:97:ec:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chiemgau-arena.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chiemgau-arena.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chiemgau-arena.de
www.chiemgau-arena.de

Other certificates including the domain name chiemgau-arena.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for chiemgau-arena.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISA0kviSzjDglEowoX6wKh99rqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMjQxMTQ4NTRaFw0yMzA2MjIxMTQ4NTNaMBwxGjAYBgNVBAMT
EWNoaWVtZ2F1LWFyZW5hLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAtH37O0haITFbNDcWStT9JwxwGPp4AHycWhMvyoU9BVqRgusob2US+a55kw1F
9R3SgHSKKAMR329rcoc98cOzwlMWGpnTOc7L3okO0zeGnmAKob/90D47Ql5izFRi
xybWUS1gdJtqIz2s3tQ2B7NLecI+J2XCJZAfQ6MUDW87XfPpFPicBqXQxLX3LIQ9
El1u5vDsXhkb4niRMYH7JQu8LUDMQ3Ala/JrEPE4brF4xYo+C9YU9fXGyINrNXQs
R531fLHf3cDUwuv7w0ZD0v11qwYh3OUfRZp3ew6JNmh//H1pM7p8KOPaEQ4a96EZ
QBBORv6znL4Q1PlNTM96D/0qakcsJ7OaI0sitecKpcHuUFyK83ZQdcty+bJEtzyY
OAtV5iKSmLSUV7UnDXeX+/YCVPXRBM4mHit+bEXgG6n3McpSkdiBr/lOMeMhIyrD
2yPtxf4w0ggj/6rxAlA3xUEdh2fiuUpKqZaI8NsAm9CmDPEE5c5imjr1bqadJJli
nfDyRy/AjVnJC6uY2GuXpUVFh0iRYmVTo5T3Y73NZY1bhz+k1d+fORYtP08P/l42
Tz24DMMTq3NYsH6/APNz1U6yV7DiXmHstfuCBN+K5FjyKZTgLBCXTHxk352BnCZl
YlAxcadG1O9Sdj+Cy/f8KiR3VPPfkpc8/M4Qya4ZgFBS/cECAwEAAaOCAmEwggJd
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUKRo0Xx9dcb5dwLKu4K9tbM4JyjswHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wMwYDVR0RBCwwKoIRY2hpZW1nYXUtYXJlbmEu
ZGWCFXd3dy5jaGllbWdhdS1hcmVuYS5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AHoyjFTYty22IOo44FIe
6YQWcDIThU070ivBOlejUutSAAABhxOqNIoAAAQDAEYwRAIgXKJL7/EpIgjRnJP6
lwCYHwiuJ+VWYI+DyInkWk+3qCgCIG4zNF3E9TUTS3q4bm0jGkflVAWI99RnEw0k
qd/VTntFAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGHE6o0
bQAABAMARjBEAiAKzC6hDv7LJkA9ihzkV3MgLQDYZskfhtGaMZOz2M6pMwIgH1eR
tazU6CNeiteEhplzatPwYm0q4cigJPYzUo4+cM4wDQYJKoZIhvcNAQELBQADggEB
AEBsrhNAkAsA0tbe7SpjVYYPjRY0uhpRzNUzqhwvHyPCZdQfWH2RTZ0WGkoR5KmL
qDXBPeaB0tRvlt798bVH8a4Cyk+S3527RrYJNhI8cA43PkyPunIL+EXipcv6Ybl3
u+vh7AmHbW81QNkrWm1auBc0C047C2trtBn77+h59aHemGM41KuvnW6aJHLh/thz
iFLKA9XmRx4sH82tJM16SJPERRf5tKLJu+XVua76nipFJM9Ex1dsfcvE5uKedDaT
zplrYeeYOlKCfk1Jq5q9r4oda30D21sjhSPqExKj/nFK/QnBr7y2DSbMvCoUIpP1
hCF1eh2uBQn7gkBgFqgmEAA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286240656551395917536119478537397512690410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 11:48:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 11:48:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chiemgau-arena.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736343585221713267615274915870947238359385032189576496617241877939568279881296779722016076916529513631079290087604409816402632513800548269585953929333059783906431728440564235749240941300177583717951969452623999066563824888031734047889020658567077230212553992564995679993649330503576230037986221621498980386778893556805244002014152293553830393494374130493829233133845806922001415668123646949217342024746287481331489444267270343147874715379991203601993358929800606042138166438559021100900287601979350588329987430731390187785893713138419814590611605419289518770727216037046898437993020917894111582369062131763441751825896099523028859148953944278999030663508799165083217288501948660914791471935404006257739176633969898019006787653029366745565955710701456167889738704722328489299570911698221700573627051641107835855636507708203903433277727979994443585904912293904595132346045452611522830999272475354754832702155671279542022205382020980246203918825556953959501494315391145570800590503001364885611132114258587282822946301353030288079864939326731364808661153637031262966086289739240860408888844892569496731611674786953494742239476559841739458334767833754552853896768978903895325649008018976324385458398650759656027574437835228015599711092161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							291a345f1f5d71be5dc0b2aee0af6d6cce09ca3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiemgau-arena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiemgau-arena.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018713aa348a000004030046304402205ca24beff1292208d19c93fa9700981f08ae27e556608f83c889e45a4fb7a82802206e33345dc4f535134b7ab86e6d231a47e5540588f7d467130d24a9dfd54e7b45007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018713aa346d000004030046304402200acc2ea10efecb26403d8a1ce45773202d00d866c91f86d19a3193b3d8cea93302201f5791b5acd4e8235e8ad7848699736ad3f0626d2ae1c8a024f633528e3e70ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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