qa.paier.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:30:d4:43:d3:9c:79:d4:dd:5b:82:4b:90:c7:e3:93:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.paier.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:30:d4:43:d3:9c:79:d4:dd:5b:82:4b:90:c7:e3:93:42
Serial Number (int): 299513387976844545875079301306170313249602
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:69:55:44:b5:79:db:59:d8:c5:c1:35:7d:8a:85:81:b7:9e:0f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:bf:d2:1e:de:8c:f3:66:92:0e:4a:94:8e:49:ae:ef:e7:4b:fe:8a
Fingerprint (sha256): 1d:f2:55:50:44:c3:90:3f:42:0b:aa:02:94:9c:8d:5a:ca:8b:02:3c:d2:eb:86:5b:e5:e3:52:f6:9b:be:e2:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qa.paier.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.paier.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.paier.at

Other certificates including the domain name paier.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for qa.paier.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISA3Aw1EPTnHnU3VuCS5DH45NCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjIwNjI2MzlaFw0y
MDAyMjAwNjI2MzlaMBYxFDASBgNVBAMTC3FhLnBhaWVyLmF0MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA0EwruSYpggOXa5LdEgsLeNrTrO2mrlX5DHfp
Kz5kwug1KnvZAHA1d+H555eFC356iFbOnLia2xagjNANkj9+OvKwLemzQnKcElSy
AYxOKGTN90pg7oi8Qup4yp6SAZ1h7km3CBjT1msYNj3fiqbLmS3BLu5xP22FtEOd
2DC/Z0kTdFeKisK9zVXlhCVFhAFrUE/FUg5R/HJxUGMS9VHuZqL8rE4qkBglSPys
mQegA9Lndvd2e+wUh/Mo2gbreGhTemU6D2LX5gfIQnrxHW9sUbd5P7cuklaktGRW
FC36XjGk3nhQtURcU+rRi6yWPbfCw0SQEXWunFWmt60+iqRVTQmowfNI9o6Vt+Eq
sEXqao5WcASRf541nHPlvzAqG4TnrAphE22BondltpM3TcDM7PY0aLUdnC/hE/hH
ekfl68hBN5Npa5fFyd6jG90x9oRMmumgev5ctk8PbwPeRO4pmp8Q/3+tpQnuMP8a
AOtChX2iOudrPitbr5xiBSn7lYrHmGbjLNkF07WI7XTGs4C7Ryu8pO6K+r6Lgjxh
qIPnnq0UQzlVei0iZ7RChEsV/ZvBx1kfxg4XBW7lj2c2KqhRrewfW4zdkWJfD4PW
458Zs3ho0HWmuPBb0hj0r+NnfimFrXTUN4Mu8aTFSU6rIeIzLgBueLjlJCXJIz7S
sGC6B6UCAwEAAaOCAmAwggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGmlVRLV5
21nYxcE1fYqFgbeeD5kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtxYS5wYWllci5hdDBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3
ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbpIBd1oAAAQDAEgw
RgIhALxp0r2QPr4uGTJ3LYb7KfULG43fOrLASXF/krt4YeZyAiEAtIMkbKH+Io7q
pN1h3HRhdWtk154L9dQQBcNErfCR8qUAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLB
ACkGjbIImjfZEwAAAW6SAXeOAAAEAwBGMEQCICip/2D7PqF7o2QQ0opgCF+5RX3X
sbUPjaBJETIcV1+sAiA9Gul6yoTj3dp1UfL1BfYBNbYOKmFsmVe4qoggLn7rwzAN
BgkqhkiG9w0BAQsFAAOCAQEAO5shCX1p/NLhmi1oM2UrG/lw3pJzhEGuyIO2jWel
sM4sffJdlWESAlRes6CmBYqkM/RNSvpZmcw1JrlARzQILEF3gpBVSKNQdVFLh0dq
qFtxDMjmRTSzD8fh08KZwSvFIQ/651cWzYlZBiqxmavYsMiksuyOIQ9DeLBMKsYP
xllG7Z7VyiCysGnMoJ9m+MIWiFse5+/wBdVt2yp5A/0SnzZC05UrpOm8m590sjAW
W2oNPLMoh6r8bD14GKgBLM65BlK+SxJWNuHL2NnL1bRnYhEwMzKdyAAHiHjJ0aoO
fSSawBKVwBYoFAaoVkcBNm4g9vetFcyiGTgZjMYENMh2BA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299513387976844545875079301306170313249602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 06:26:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 06:26:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.paier.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849779832271206088689174959680164870786905189727283061397253143752404932327982570570981576405975366177058350799448091290147343434201223086849483370963713798326023118662490104442350427047051653990343744520456206694698020383080659328255980571814858437594005630866365798280255779756156237496756174677063419043331400821878331395898807586874004517690577383797314263776432875336044011179898004536768065515239931301398304989139428118958883222787947746518088112011506977285297840828804111806432325817573322385444636706952578071132304835538093945036051304281310246925668319841310235520787667152375766061024886629489489804304484358170078563512158068413309559015992962980469072114290311133382700785659855819140589535345051015315696934597215419444131788449684487749456093274563547465408512976748614164886016233327357210397652598649877680484844702693828212318026807800646110130398830668007523560122437666743121208939328408650799522393281017859612011008989074274806289797207012658342877947663431273929320766939657244251577809428842659240190108945780105496065470386857866747810954868265560335977238401461340454960376736450786664611594457992936866482028323683250964685804123780799171932502164324032833669797871739715735210566981195345849276882880421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a695544b579db59d8c5c1357d8a8581b79e0f99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.paier.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9201775a0000040300483046022100bc69d2bd903ebe2e1932772d86fb29f50b1b8ddf3ab2c049717f92bb7861e672022100b483246ca1fe228eeaa4dd61dc7461756b64d79e0bf5d41005c344adf091f2a50075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e9201778e0000040300463044022028a9ff60fb3ea17ba36410d28a60085fb9457dd7b1b50f8da04911321c575fac02203d1ae97aca84e3ddda7551f2f505f60135b60e2a616c9957b8aa88202e7eebc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b9b21097d69fcd2e19a2d6833652b1bf970de92738441aec883b68d67a5b0ce2c7df25d95611202545eb3a0a6058aa433f44d4afa5999cc3526b9404734082c417782905548a35075514b87476aa85b710cc8e64534b30fc7e1d3c299c12bc5210ffae75716cd8959062ab199abd8b0c8a4b2ec8e210f4378b04c2ac60fc65946ed9ed5ca20b2b069cca09f66f8c216885b1ee7eff005d56ddb2a7903fd129f3642d3952ba4e9bc9b9f74b230165b6a0d3cb32887aafc6c3d7818a8012cceb90652be4b125636e1cbd8d9cbd5b46762113033329dc800078878c9d1aa0e7d249ac01295c016281406a8564701366e20f6f7ad15cca21938198cc60434c87604