ihk-sh.de

Issued by R3

About this certificate

This digital certificate with serial number 04:b3:ad:1e:20:77:da:64:7f:66:fa:19:ba:25:b2:f6:25:43 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ihk-sh.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b3:ad:1e:20:77:da:64:7f:66:fa:19:ba:25:b2:f6:25:43
Serial Number (int): 409589800276598365919694924564597073913155
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:6b:4a:c8:69:b1:90:fd:e4:fb:93:d2:6a:ad:90:d5:62:b5:40:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:59:07:20:12:4d:99:9a:ff:47:e7:0b:f1:de:fc:10:f2:7b:11:05
Fingerprint (sha256): 1d:d6:19:0d:8e:e4:82:3a:5b:a1:11:11:bb:4a:98:21:8a:7c:08:c4:94:4d:8e:dc:a7:93:03:28:a8:30:60:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ihk-sh.de

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ihk-sh.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amtliches-verzeichnis.ihk.de
essen.ihk.de
essen.ihk24.de
firmen-in-bayern.de
fitnord.ihk.de
gera-ihk-wahl.de
handelskammer-bremen.de
ihk-koeln.de
ihk-lueneburg.de
ihk-niederbayern.de
ihk-niederrhein.de
ihk-schleswig-holstein.de
ihk-sh.de
sihk.de
unternehmen.magdeburg.ihk.de
wuppertal.ihk.de
www.amtliches-verzeichnis.ihk.de
www.essen.ihk.de
www.firmen-in-bayern.de
www.gera-ihk-wahl.de
www.handelskammer-bremen.de
www.ihk-emden.de
www.ihk-koeln.de
www.ihk-lahndill.de
www.ihk-limburg.de
www.ihk-lueneburg.de
www.ihk-niederbayern.de
www.ihk-niederrhein.de
www.ihk-nordwestfalen.de
www.ihk-oldenburg.de
www.ihk-ostbrandenburg.de
www.ihk-regensburg.de
www.ihk-schleswig-holstein.de
www.ihk-sh.de
www.ihk-wiesbaden.de
www.schwarzwald-baar-heuberg.ihk.de
www.sihk.de
www.wuppertal.ihk.de

Other certificates including the domain name ihk-sh.de

(limited to 100 certificates)
ihk-sh.de
ihk-sh.de
ihk-sh.de
www.ihk-sh.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-schleswig-holstein.de
www.ihk-sh.de
ihk-sh.de

Certificate

The complete raw certificate details for ihk-sh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409589800276598365919694924564597073913155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 03:55:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 03:55:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ihk-sh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755472831770304644968793429137171804755251800407185470446884120236260165188203500997186191627005153528109794639153929703181889352353279271237872157778826854744941489984016225826160964919015466460426853227040026558887641112115446820992406581753457982085373041218050543958863814529765919129149364269757501100266068239133637937062778600246154135355331478761204887784806196440815111594314945296725925097738817016198514887071490703018073917001121188759627521975843568657449030792250214219802040356970202679708433649450856310707331731504296230428714979232070847386195710109939627340401933964143117815218806248529038657023608156683232134004272846609876245990951585875797188356725080784695807345295783776093858809497401416997252920498950554894390445826677043133679406997419663467509170796938192658726997836904256122030113677551004346858647052945846881117768774974571077361653470888206168970982982005788144822430037689167236838023493472433333047018737295090885866210090013218291122995128128915738791479446225957679614972429149571686491487423946132968058736305456485167591550183633304174915204900959853178678515248588650469978211930424944515368477369963038418663159461143579306035309848499694883876912040056981530946086872815632708644062191431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc6b4ac869b190fde4fb93d26aad90d562b5401a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amtliches-verzeichnis.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.ihk24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmen-in-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnord.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gera-ihk-wahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelskammer-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-lueneburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-niederbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unternehmen.magdeburg.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuppertal.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amtliches-verzeichnis.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essen.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firmen-in-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gera-ihk-wahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handelskammer-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-emden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-lahndill.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-limburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-lueneburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-niederbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-nordwestfalen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-oldenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-ostbrandenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-regensburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-wiesbaden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schwarzwald-baar-heuberg.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wuppertal.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000183638cff650000040300473045022100f98c931d2e740bc7fa887d171bebe66b8f3d7e07ebae7048416cdbfb067db20c022040b6834abc92ade220b2ebc294a2b104a16c6f39435431fce81204e1840567a00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000183638cff430000040300483046022100e9d605c4e6b4c5d6ffe15783401566586a061aceb4d1d8d46494da9b049ffa26022100c629451e7969725ac787aab19dbcf2711009ceaf651bae928d3bd17733079fec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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