www.rusgymnasium.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:4f:5e:1a:4d:94:a4:bb:08:0c:36:ec:df:7b:48:06:38 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rusgymnasium.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:4f:5e:1a:4d:94:a4:bb:08:0c:36:ec:df:7b:48:06:38
Serial Number (int): 373054971766409487720675799656757509752376
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7c:86:cf:1e:a9:bf:47:9c:84:32:e1:93:52:37:3b:7f:a0:20:65:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:15:90:25:88:a3:7f:e4:8d:e6:d0:f7:1c:5a:60:16:e4:79:1e:1a
Fingerprint (sha256): 28:f7:c6:a5:23:68:42:57:ac:79:d0:ae:c4:52:40:72:f8:35:b7:a8:90:21:c2:66:6d:fe:9e:2f:00:4c:7b:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rusgymnasium.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rusgymnasium.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rusgymnasium.at
www.rusgymnasium.at

Other certificates including the domain name rusgymnasium.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rusgymnasium.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373054971766409487720675799656757509752376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 06:41:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 06:41:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rusgymnasium.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918069418577651380820611518106364908444465095248102468398917416557998090894614750143405429594268688154148386557254954569664406245367473337830240599603440447975810955508904332966368277380997396742689105593643868620496832566604443679980835556966738826428611248711000623070737738499879813711688529812129599197864344895281221722964955345895898035982258106825336709650582322310003589536366446721972310979520611506252594213752516501666245086583137893381584686536997719090382904656859709420787627979843753737367238130884998740233422449145698603548084617794965792463147937858171896475686230601511548673202227463889805167764726535680034219550804914025157567670952723103184193496485367045894670253143568795303917902505583055018049597046026351507878828380464168917594979430342370887061094869618189217388634296706911446942809720250088933314198381261412114438458723171630916934000259301984533107060180121824384915467279202281971575244854674631968084628576726526857120333251938971250134651278889025352341613871974746270699449654299697941645874171306647690216556337336021171992026196833874858048102964620982780008407732629684894424999861949787953497972628616796808629596239563139007411795412797105099924984729837419727035359244234631981191085228207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c86cf1ea9bf479c8432e19352373b7fa0206523
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusgymnasium.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusgymnasium.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f509aa02f00000403004730450221009737c87f755c27f828bbab7c7bdf75e769a3365211709cd632e6bc6b3afb01d702203d44d5caaa3545c830cd261f22731c44f9a2073bb2492bc1f418cfb75190dd12007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f509aa018000004030046304402207c17ce7577b66deb00aa36095c2f7294447a2f6af681972be7b658ec7ffe237b0220141ef362f7d8b88820d6d0a61af1c64bc50bec15b222b63ea59cecd90b197302
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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