www.casc.at

Issued by R3

About this certificate

This digital certificate with serial number 04:69:07:0c:e6:b0:3f:b4:bc:99:74:7c:0e:7a:bc:1c:77:33 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.casc.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:07:0c:e6:b0:3f:b4:bc:99:74:7c:0e:7a:bc:1c:77:33
Serial Number (int): 384188163836190403574488441325253541263155
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:84:30:0d:f6:a3:9a:02:60:92:43:13:bc:fc:ac:62:de:3d:73:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:77:e6:9d:95:b8:cb:4e:f2:fd:16:48:55:c4:7c:4f:de:29:4f:1e
Fingerprint (sha256): 21:9f:30:77:62:ae:75:f0:e8:a7:0d:e9:9d:a7:ee:42:82:18:7d:45:ac:83:90:f0:9d:f7:89:05:a9:53:ca:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.casc.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casc.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casc.at
www.casc.at

Other certificates including the domain name casc.at

(limited to 100 certificates)
gymbadvoeslau.casc.at
www.casc.at
cpt.web1.casc.at
gefas.casc.at
www.casc.at
100und1.web1.casc.at
gymbadvoeslau.casc.at
100und1.web1.casc.at
100und1.web1.casc.at
casc.at
casc.at
www.casc.at
athletics-meeting.at
uba.web2.casc.at
gymbadvoeslau.casc.at
www.casc.at
www.ensemble-tris.info
uba.web2.casc.at
sportunionfavoriten.web2.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
kirschenhof.web1.casc.at
casc.at
sportunionfavoriten.web2.casc.at
cpt.web1.casc.at
monitoring.casc.at
gymbadvoeslau.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
physio16.casc.at
100und1.web1.casc.at
server.casc.at
casc.at
favoritenwp.web2.casc.at
gymbadvoeslau.casc.at
preview.casc.at
casc.at
gymbadvoeslau.casc.at
uba.web2.casc.at
gefas.casc.at
www.casc.at
physio16.casc.at
www.casc.at
sportunionfavoriten.web2.casc.at
sportunionfavoriten.web2.casc.at
www.ensemble-tris.info
physio16.casc.at
favoritenwp.web2.casc.at
100und1.web1.casc.at
sportunionfavoriten.web2.casc.at
preview.casc.at
gymbadvoeslau.casc.at
sportunionfavoriten.web2.casc.at
www.ensemble-tris.info
www.schneekugel.webhost3.casc.at
casc.at
staringer.webhost01.casc.at
gymbadvoeslau.casc.at
100und1.web1.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
casc.at
www.vipur.at
cpt.web1.casc.at
www.casc.at
gymbadvoeslau.casc.at
favoritenwp.web2.casc.at
casc.at
www.casc.at
susen.webhost01.casc.at
www.casc.at
100und1.web1.casc.at
bg9.web1.casc.at
cpt.web1.casc.at
favoritenwp.web2.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
www.vipur.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
cpt.web1.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
lbmanu.webhost01.casc.at
www.tu.webhost2.casc.at
100und1.web1.casc.at
uba.web2.casc.at
www.leppla.webhost3.casc.at
server.casc.at
www.casc.at
gymbadvoeslau.casc.at
casc.at
www.casc.at
sportunionfavoriten.web2.casc.at
www.casc.at
server.casc.at
server.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
gymbadvoeslau.casc.at

Certificate

The complete raw certificate details for www.casc.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384188163836190403574488441325253541263155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 22:05:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 22:05:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casc.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653726009367687274173436613601087225641259258771830433350194400998687396540304615103870985665233171482774044585389935737640678847151417413199296179490251133582502138179150451770733160359757898514445853561859290465827145474433180000312362682074444643509607049338308368257329923718413290190153268177316957499505651297010431159337331849284707968633292634364237409410422425139707278221232093019356808939212678852647942115939331691395038129282244534150740383026261852846913829870623287691693312158210457905795508459206443999192644942057831971121560580499686603949253460766785329451199623281724266853573037790196071904654571948595202162665465026394047515250868428291751369154716367010038212301566546513136900670454575322491858373759879994104685749001040686085151885658625086634406473328089958385753105308957161825615728954302324128651412418542596919720431880141957505347309250126644017029844873969843832842875583017388971716887780775169706788696114753767411853105193604257473337395164359373565381358295339008180215915589601683305864784569750346930644188990876512713158137310112260486093416629693028566740417759419716011842030979447265462536832932478280683591837804349000853808961627962632914462981489585115414537144068750014421086644205289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f684300df6a39a0260924313bcfcac62de3d7381
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casc.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcaef3b1f00000403004630440220115296f64ca21feea6688fc68e1c098bb16d7c5380341a94b8f1886652a44b91022010080bd3399d7945d14b40819db364e662201592bb6a94470072a23eae43c497007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcaef3b25000004030047304502203e4dfef32eec5eaea42d697f1b9bd146f1fc8b9cc8ffb37fb2755a89464eb1ef022100ad62585048dfb9eabaf0af43f7444f9ce69af6f825185a1d566670988f3e48fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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