www.gemnova.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:35:31:9e:6c:65:ca:b1:d3:db:08:83:48:c4:67:47:38 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gemnova.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:35:31:9e:6c:65:ca:b1:d3:db:08:83:48:c4:67:47:38
Serial Number (int): 324359802395185886385692607578515633030968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:47:13:45:04:30:05:ad:cd:7e:1e:96:22:48:7a:2e:ec:50:36:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:02:e7:5b:0e:ce:6f:75:08:f5:b2:a8:f9:d4:e6:56:39:ae:db:76
Fingerprint (sha256): 1f:bb:98:bc:16:3f:39:7e:dc:cb:9c:78:56:02:3f:9c:3d:d2:0c:01:3d:d2:d1:8d:98:08:e7:6c:92:94:98:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gemnova.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gemnova.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gemnova.at
www.gemnova.at

Other certificates including the domain name gemnova.at

(limited to 100 certificates)
www.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
gemnova.at
seminare.gemnova.at
cliq.profitroom.com
seminare.gemnova.at
www.gemnova.at
www.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
gemnova.at
gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
chat.ethos.ltd
cliq.profitroom.com
cliq.profitroom.com
chat.bamero.de
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
nextcloud.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
ferienbetreuung.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.podmanagement.co.uk
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
wiki.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
wiki.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
chat.ethos.ltd
cliq.profitroom.com
akademie.gemnova.at
cliq.profitroom.com
server.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
chat.podmanagement.co.uk
www.gemnova.at
cliq.profitroom.com
server.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
wiki.gemnova.at
cliq.profitroom.com
cliq.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
www.gemnova.at
seminare.gemnova.at
cliq.profitroom.com
chat.bamero.de
meine.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.mobility-bi.com
www.gemnova.at
chat.mobility-bi.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
collabora.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at

Certificate

The complete raw certificate details for www.gemnova.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Yb3QN25Kd5rLzmwIuQO
jIkSJqrVYcO6+wtpWVBpTp826+o3NYi+zGqaZ7YZKlnbZ1tsVaXDwwTSmFbC3hvP
qu1UI/6UEWL/k2W4MbRWhm9Z71chgOL78YDLQfDaAuez2582nAZlLDR7mIbCP9oc
6n3ANBE2MI+e4QFRkSiQTYvBmNa8CO6CEJIRoVI2twqzz1NFjzTTHKGL66NvFX1l
IyZ3n1fhAzCqbejusw0ZteOU5gp1VKcpIGPQE8noo1iKVKI5aIAslwTd2J3McHi2
/dJQzXYo2xi20u/ioNYIiAANZHUmbf1Z33FE0tget/6yPq5sXemZSVyEaTtbrIs0
mxtiVE+uRj64WNH3BUahW5fRl2zHIMljF38QL41KI0ERsxyLCFasc/1G+StVUZrO
BF+A+MB+LHkV4ysISZbjYJyos6cFnumKOL4xA9jnAZdEomCKpfEom3HdZlEmig9Y
REZaVmdys5mhqqhOOGoGwsId3VQwH6C7UFpmzD14cf2hFzBqe9cB69o0J/aVS0NS
l/P54SfnTUoKv7ItmsOKBsvZ8YaDHnxj3LIU+CCoYzmuWyFj6g6Y7NnWxAIaJ/GY
EI0DjnXyEz7GU5IxnRm7riaaSSCDWLXKIGo2m6YEsHjzsOi9r5htdOn5Zr3UFFWD
ssCn2nviTAa6Xc9S1K9FQScCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324359802395185886385692607578515633030968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 08:48:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 08:48:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gemnova.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854796440537061496153778482390244458278729104706584583413021999547279419872094750414765530343405348980037817262673161110039482587657281117780752320355784009691501035391379160998441880983272494898669512430095330885002200309565936115008870088344991329886856175766356944883534431088673527943089921039080428369012720393636302570489761235102403747840264570054630007005416290056031466614556521104099976989418426570688774250714068695850214797950033546761132340787371258628846213416948917413946214240488374228367539317467752943855289780532122865717976854848001359909875697723340818273477352377044753619701374003932461423995699515674779126692339126185070910539814193468551281634943091303114729275863642234109458224834366853451830370374584320032536987440924073894809912801206307522294602610094734156216060644096773094478512104565709610890283712755278035049659974462446865528720006494561881010590772510116319411968550444992619395129086422560735078195220979878653983703800295956310962079752410808936474265315513769148280801516267620428331983822988692325914177043086332975984176412654218784556422623189836513335602053068967740361785022454550375515131522939537468145024435265463305964008325100134366820986439385110967983103028998874596231004635431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38471345043005adcd7e1e9622487a2eec5036c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemnova.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemnova.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a4cce52d000004030046304402206458c2140558b26234957c716a24c5d2eec825e6b7da9da0e5c0017424cc4cda0220016b01dd96ede146dd1f256d54ab8059719312a20f75ada2472e697107be628f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a4cce385000004030046304402202a37af4482b08f8fcf8725daabe276a675488c0a4fce8cc5c6334db226d7cc1c02205731359e19a20ebaaa28f8b522363a5eef7ce18a053278114ca061f886f1b785
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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