www.az2.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:6b:ab:9f:0b:61:ef:31:35:18:7a:f0:63:0a:f9:72:96 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.az2.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:6b:ab:9f:0b:61:ef:31:35:18:7a:f0:63:0a:f9:72:96
Serial Number (int): 312182048970617312429711163657466207105686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:99:a2:21:0b:4b:6f:6b:86:7f:1b:29:3c:52:69:7d:6a:64:d1:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:60:40:a7:26:70:8a:9d:9a:92:36:e3:51:a6:c8:cb:4f:7d:ed:45
Fingerprint (sha256): 2c:29:da:c0:c0:82:02:ba:8b:ef:e5:35:e5:d3:d3:3f:32:34:dd:57:2e:4c:7e:16:79:bc:1a:3e:83:ff:9b:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.az2.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.az2.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

az2.at
www.az2.at

Other certificates including the domain name az2.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.az2.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312182048970617312429711163657466207105686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 05:35:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-25 05:35:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.az2.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1005516476551759298007433725132719192951150212442325322073192102329746685771760196411525522905250244192162052653296546292658706609118207323035180121620217985110171607924915027584178151723330627838383684724367301347448581032026509404899204444739131946381268169076259660776256414915351555643207616564493640210504332035362026372208972021795854732055667108286903758337747928899091011751472652281489230485951485642046112610858911787891481906833952901022526707903227418314970467320483857866502966908477876967288294572223818954154835187782061437650216746063416680545524572604614080989660242296550477243029959092206164288548048944870660325313972188975066230522990199060504163578908387001980160914952178534291566563918376416543084679780099719186693501489471933053638796662047561282330723877205662005261244625216456913715633795797482972799594230749480068231842869095973702837479114550894051720437262593475253914934758518190136527431193346772946247098696143273458285575487137507244280949416035292836666392250989156443403274009064005244213838328564786829421385575940028678038701272700743939498883797125904858391951950003008659763531244918290671041854481786200780254437274386395527674093313010506752509737421786565381313374491131430628624781702109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6099a2210b4b6f6b867f1b293c52697d6a64d106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az2.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.az2.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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